9558 matches found
Description of the security update for SharePoint Server 2016: November 14, 2017
None None...
Description of the security update for Word 2013: November 14, 2017
Description of the security update for Word 2013: November 14, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: November 14, 2017
None None...
Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017
Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017 Summary An information disclosure vulnerability exists when the Windows kernel fails to correctly initialize a memory address. An attacker who successfully exploits this...
Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017
Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017 Summary An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To learn more about the vulnerability, go to...
Description of the security update for vulnerabilities in Windows Server 2008: November 14, 2017
Description of the security update for vulnerabilities in Windows Server 2008: November 14, 2017 Summary To learn more about the vulnerabilities, go to the Security Update Guide. More Information Important If you install a language pack after you install this update, you must reinstall this updat...
Description of the security update for Office 2010: November 28, 2017
Description of the security update for Office 2010: November 28, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Office Web Apps Server 2013: November 14, 2017
None None...
Description of the security update for 2007 Microsoft Office Suite: November 28, 2017
None None...
Microsoft Word CVE-2017-11854 Memory Corruption Vulnerability
Description Microsoft Word is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Excel 2007 SP3 Microsoft...
Description of the security update for 2007 Microsoft Office Suite: November 14, 2017
None None...
PT-2017-3277 · Microsoft · Excel Viewer +3
Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions 2007 Service Pack 3 through 2016 Microsoft Office Compatibility Pack version Service Pack 3 Microsoft Excel Viewer version 2007 Service Pack 3 Description: The issue is related to the improper handling of objects in...
Immunity Canvas: WPUSERPRO_RCE
Name| wpuserprorce ---|--- CVE| CVE-2017-16562 Exploit Pack| CANVAS Description| Wordpress Remote Command Execution Through UserPro Plugin login bypass Notes| References: https://www.exploit-db.com/exploits/43117/ Repeatability: Infinite VENDOR: UserPro Plugin CVE Url:...
mybb -- multiple vulnerabilities
myBB Team reports: High risk: Installer RCE on configuration file write High risk: Language file headers RCE Medium risk: Installer XSS Medium risk: Mod CP Edit Profile XSS Low risk: Insufficient moderator permission check in delayed moderation tools Low risk: Announcements HTML filter bypass Low...
Update Rollup 13 for System Center 2012 R2 Virtual Machine Manager
Update Rollup 13 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 13 for Microsoft System Center 2012 R2 Virtual Machine Manager. There are two updates available for Virtual Machine Manager, one for the Virtual Machin...
The vulnerability of Microsoft Excel, Microsoft Excel for Mac, and the Microsoft Office Compatibility Pack relates to improper handling of objects in memory, allowing an attacker to gain privileges of the current user.
The vulnerability of Microsoft Excel and Microsoft Excel for Mac editors, as well as the Microsoft Office Web Apps suite and the Microsoft Office Compatibility Pack, is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow a malicious actor, operating remotel...
Vulnerability of Microsoft Office software, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.
The vulnerabilities of the Microsoft Office Compatibility Pack, Office Online Server, Microsoft Office Web Apps, Word Viewer and Microsoft Excel Web App, SharePoint applications, Microsoft Word text editor, and Word Automation Services are related to improper handling of objects in memory...
GHSA-HGPP-PP89-4FGF Action Pack contains database-query restrictions bypass
actionpack/lib/actiondispatch/http/request.rb in Ruby on Rails before 2.3.16, 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to...
Action Pack contains database-query restrictions bypass
actionpack/lib/actiondispatch/http/request.rb in Ruby on Rails before 2.3.16, 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to...
actionpack Cross-site Scripting vulnerability
The sanitizecss method in lib/actioncontroller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle \n newline characters, which makes it easier for remote attackers to...