9558 matches found
Description of the security update for the information disclosure vulnerability in Windows Server 2008: January 12, 2018
Description of the security update for the information disclosure vulnerability in Windows Server 2008: January 12, 2018 Summary An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layo...
Elastic Kibana X-Pack Open Redirect Vulnerability
Elastic Kibana is prone to an open redirect vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:x-pack";...
Security feature bypass
The Application Firewall Pack AFP, aka Web Application Firewall component on Kemp Load Balancer devices with software before 7.2.40.1 allows a Security Feature Bypass via an HTTP POST request...
CVE-2017-15524
The CVE-2017-15524 entry concerns Kemp Load Balancer’s Application Firewall Pack (AFP/WAF). A security feature bypass exists where HTTP POST data is not inspected, enabling bypass of the Web Application Firewall. Affected versions are Kemp AFP prior to 7.2.40.1; remediation is upgrading to 7.2.40...
Kemp Load Balancer WAF 7.2.40 Bypass Vulnerability
Exploit for hardware platform in category web applications 1. ADVISORY SUMMARY Kemp Load Balancers - Module Application Firewall Pack AFP - Web Application Firewall WAF does not inspect HTTP POST data Risk: high Application: Kemp Load Balancers - Module Application Firewall Pack AFP Versions...
Microsoft Office 2013 Service Pack 1 Information Disclosure Vulnerability (KB4011277)
This host is missing an important security update according to Microsoft KB4011277 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Immunity Canvas: GOAHEAD_ENV_RCE
Name| goaheadenvrce ---|--- CVE| CVE-2017-17562 Exploit Pack| CANVAS Description| GoAhead 3.6.5 Remote Code Exec Notes| References: https://www.elttam.com.au/blog/goahead/ Repeatability: Unlimited VENDOR: EmbedThis Software CVE Url: https://nvd.nist.gov/vuln/detail/CVE-2017-17562 CVE Name:...
Description of the security update for Office 2013: December 12, 2017
Description of the security update for Office 2013: December 12, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Office 2010: December 12, 2017
Description of the security update for Office 2010: December 12, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for the Windows information disclosure vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: May 08, 2018
None None...
Description of the security update for SharePoint Server 2016: December 12, 2017
None None...
Open Redirects
Kibana is vulnerable to open redirect attacks. The fix for CVE-2017-8451 was found to be incomplete, therefore when X-Pack is installed the open redirect in the login page remains...
Open redirect
The Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana versions before 6.0.1 and 5.6.5 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website...
CVE-2017-11482
The Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana versions before 6.0.1 and 5.6.5 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website...
CVE-2017-11482
The Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana versions before 6.0.1 and 5.6.5 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website...
CVE-2017-11482
Elastic Kibana with X-Pack is affected by an open redirect on the login page due to an incomplete fix for CVE-2017-8451. Vulnerable: Kibana versions before 6.0.1 and 5.6.5. Impact: an attacker can craft a link that redirects users to an arbitrary website. Mitigation: upgrade to Kibana 6.0.1+ or 5...
CVE-2017-11482
The Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana versions before 6.0.1 and 5.6.5 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website...
Asterisk 13.17.2~dfsg-2 Memory Exhaustion
Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Date and time of release: Nov, 15 2017 Found this and more exploits on my open source security project: http://www.exploitpack.com Tested on: Asterisk 13.17.2dfsg-2 Description: Asterisk is prone to a remote unauthenticated memory...
mybb -- multiple vulnerabilities
mybb Team reports: High risk: Language file headers RCE Low risk: Language Pack Properties XSS...
Microsoft Office Remote Code Execution Vulnerability (CNVD-2017-37106)
Microsoft Office 2010 and others are products of Microsoft Corporation.Microsoft Office 2010 is an office software suite.Office Compatibility Pack SP3 is an Office compatibility pack. A remote code execution vulnerability exists in Microsoft Office that stems from the program failing to properly...