6733 matches found
Microsoft Office CVE-2016-7290 Information Disclosure Vulnerability
Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2010 Service Pack 2 32-bit editions Microsoft Office 2010 Service Pack 2 64-bi...
Error session termination mechanisms lead to account hijacking-vulnerability warning-the black bar safety net
Error session termination mechanisms Session termination is to secure the session period in one important aspect. Security implementation session tokens can effectively reduce the session hijacking attack. The session is terminated as the number of attack control mechanisms, such asXSS（cross-site...
PT-2016-3068 · Openssh +7 · Openssh +7
Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 7.4 OpenSSH versions prior to 9.3p2 Description: The issue is related to an untrusted search path vulnerability in the ssh-agent component of OpenSSH, which can be exploited by remote attackers to execute arbitrary...
Microsoft Office CVE-2016-7235 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...
Microsoft Windows CVE-2016-3343 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to run processes with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Syste...
Microsoft Office CVE-2016-7236 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...
Microsoft SQL Server CVE-2016-7249 Privilege Escalation Vulnerability
Description Microsoft SQL Server is prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft SQL Server 2016 for x64-based Systems Recommendations Run all software as a nonprivileged user with minimal access...
Microsoft Windows CVE-2016-3338 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to run processes with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Syste...
Microsoft Windows NTLM CVE-2016-7238 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated system privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems...
Microsoft Office CVE-2016-7233 Information Disclosure Vulnerability
Description Microsoft Office is prone to an information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel for Mac 2011 Microsoft Office 2010 Service Pack 2 32-bit editions Microsoft...
LifeSize Room 5.0.9 - Multiple Vulnerabilities
LifeSize Room 5.0.9 - Multiple Vulnerabilities Source: https://github.com/XiphosResearch/exploits/tree/master/deathsize LifeSize Room 5.0.9, remote config disclosure, code execution & local privilege escalation Ultimately the Lifesize Room products have fundamentally flawed firmware, many similar...
ssh-audit - SSH Server Auditing
ssh-audit is a tool for ssh server auditing. Features SSH1 and SSH2 protocol server support; grab banner, recognize device or software and operating system, detect compression; gather key-exchange, host-key, encryption and message authentication code algorithms; output algorithm information...
PT-2022-1364
Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.8 through 5.16.10 Linux kernel versions 5.15 through 5.15.24 Linux kernel versions 5.10 through 5.10.101 Description A flaw exists in the Linux kernel where the flags member of the new pipe buffer structure is not...
PT-2016-3096
Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.x through 4.8.2 Description A race condition in the mm/gup.c component of the Linux kernel allows local users to gain elevated privileges. This occurs due to the incorrect handling of the copy-on-write COW feature—a...
Microsoft Windows Graphics Component CVE-2016-3270 Local Privilege Escalation Vulnerability
Description Microsoft Graphics Component is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges within the context of the affected system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft...
PT-2016-4085 · Microsoft · Windows 8.1 +7
Name of the Vulnerable Software and Affected Versions: Windows Vista version SP2 Windows Server 2008 versions SP2 and R2 SP1 Windows 7 version SP1 Windows 8.1 Windows Server 2012 versions Gold and R2 Windows RT 8.1 Windows 10 versions Gold, 1511, and 1607 Description: The issue allows local users...
SOL13167034 - OpenSSL vulnerability CVE-2016-2183
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
Microsoft Office CVE-2016-0141 Information Disclosure Vulnerability
Description Microsoft Application Virtualization is prone to an information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2007 SP3 Microsoft Office 2010 Service Pack 2 32-bit...
Emerson Liebert SiteScan XML External Entity Vulnerability
OVERVIEW Researcher Evgeny Ermakov from Kaspersky Lab has identified an XML External Entity XXE vulnerability affecting Emerson’s Liebert SiteScan application. Emerson has produced patches to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The...
PT-2016-3343
Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified TLS, SSH, and IPSec protocols affected versions not specified Integrated Lights-Out 4 iLO 4 affected versions not specified Description The DES and Triple DES ciphers have a birthday bound of approximate...