Microsoft Office Word Preview Unsafe Hyperlink Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the displa...

Microsoft PowerShell Core Security Feature Bypass Vulnerability (Jul 2018) - Windows

This host is missing an important security update for PowerShell Core according to Microsoft security advisory CVE-2018-8356. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Security Bulletin: IBM Cúram is susceptible to a Open Source CKEditor vulnerability (CVE-2014-5191).

Summary IBM Cúram Social Program Management is vulnerable to Reflected Cross-Site ScriptingXSS. This is caused by improper sanitization of user-supplied data in the Preview Plugin for CKEditor. Vulnerability Details CVE ID: CVE-2014-5191 The Preview Plugin for CKEditor is vulnerable to cross-site...

Synology Universal Search Highlight Preview License Vulnerability

Synology Universal Search is a software from Synology for searching applications and files in Synology NAS.Highlight Preview is one of the highlighted components. A security vulnerability exists in Highlight Preview in Synology Universal Search versions prior to 1.0.5-0135. A remote attacker can...

UBUNTU-CVE-2018-10891

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. When a quiz question bank is imported, it was possible for the question preview that is displayed to execute JavaScript that is written into the question bank...

PT-2018-10163

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 3.5.1 Moodle versions prior to 3.4.4 Moodle versions prior to 3.3.7 Moodle versions prior to 3.1.13 Description A flaw was found in the software. When a quiz question bank is imported, it is possible for the question...

CVE-2018-3762

CVE-2018-3762 affects Nextcloud Server prior to 12.0.8 and 13.0.3, where improper checks of dropped permissions for incoming shares let a user request previews for files they should not access. Root cause: inadequate enforcement of access control on image preview requests. Impact stated in source...

CVE-2017-16773

Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote authenticated users to bypass permission checks for directories in POSIX mode...

CVE-2017-16773

Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote authenticated users to bypass permission checks for directories in POSIX mode...

CVE-2017-16773

CVE-2017-16773 affects Synology Universal Search, specifically the Highlight Preview component, prior to version 1.0.5-0135. The root cause is an improper authorization check that allows remote authenticated users to bypass directory permissions in POSIX mode. Impact is the ability to access or b...

CVE-2017-16773

Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote authenticated users to bypass permission checks for directories in POSIX mode...

PT-2018-6337

Name of the Vulnerable Software and Affected Versions: Synology Universal Search versions prior to 1.0.5-0135 Description: The issue is related to an improper authorization vulnerability in the Highlight Preview feature of Synology Universal Search. This vulnerability allows remote authenticated...

CVE-2017-16773: Improper Authorization

Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote authenticated users to bypass permission checks for directories in POSIX mode...

Microsoft Windows: Select when Preview Builds and Feature Updates are received

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winfeatureupdatesreceived.nasl 10989 2018-08-15 14:57:51Z emoss $ Check value for Select when Preview Builds and Feature Updates are received Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

UBUNTU-CVE-2018-12265

Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp...

Description of the security update for Excel 2016: June 12, 2018

None None...

CVE-2017-5453

A mechanism to inject static HTML into the RSS reader preview page due to a failure to escape characters sent as URL parameters for a feed's "TITLE" element. This vulnerability allows for spoofing but no scripted content can be run. This vulnerability affects Firefox 53...

CVE-2017-5421

A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox 52 and Thunderbird 52...

CVE-2017-5421

A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox 52 and Thunderbird 52...

CVE-2017-5382

Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internal information not meant to be seen by web content. This vulnerability affects Firefox 51...