Lucene search
+L

3855 matches found

Microsoft KB
Microsoft KB
•added 2017/06/13 7:00 a.m.•97 views

End of support for Office 2016 and Office 2019

None None...

9.3CVSS7.6AI score0.24243EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2017/06/13 7:00 a.m.•74 views

Description of the security update for Excel Services on SharePoint Server 2013: June 13, 2017

Description of the security update for Excel Services on SharePoint Server 2013: June 13, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilitie...

9.3CVSS8.9AI score0.22127EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2017/06/13 7:00 a.m.•72 views

Description of the security update for Office Web Apps Server 2013: June 13, 2017

None None...

9.3CVSS7AI score0.22127EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2017/06/06 2:00 p.m.•4 views

CVE-2017-5664

The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the request is presented to the error page with the origin...

0.16567EPSS
SaveExploits1References38
Schneier on Security
Schneier on Security
•added 2017/06/05 11:16 a.m.•32 views

CIA's Pandemic Toolkit

WikiLeaks is still dumping CIA cyberweapons on the Internet. Its latest dump is something called "Pandemic": The Pandemic leak does not explain what the CIA's initial infection vector is, but does describe it as a persistent implant. "As the name suggests, a single computer on a local network wit...

6.7AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2017/05/11 9:39 a.m.•36 views

All OnePlus Devices Vulnerable to Remote Attacks Due to 4 Unpatched Flaws

There is a bad news for all OnePlus lovers. A security researcher has discovered four vulnerabilities that affect all OnePlus handsets, including One, X, 2, 3 and 3T, running the latest versions of OxygenOS 4.1.3 worldwide and below, as well as HydrogenOS 3.0 and below for Chinese users. Damn, I ...

5CVSS6.4AI score0.01146EPSS
SaveExploits8
Microsoft KB
Microsoft KB
•added 2017/05/09 7:00 a.m.•232 views

Description of the security update for Office 2010: May 9, 2017

Description of the security update for Office 2010: May 9, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

9.3CVSS8.4AI score0.81005EPSS
SaveExploits2
Microsoft KB
Microsoft KB
•added 2017/05/09 7:00 a.m.•72 views

Description of the security update for SharePoint Server 2010 Office Web Apps: May 9, 2017

Description of the security update for SharePoint Server 2010 Office Web Apps: May 9, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, s...

9.3CVSS7.7AI score0.19817EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2017/05/05 12:00 a.m.•59 views

Avast Free Antivirus Multiple Vulnerabilities

Avast Free Antivirus is prone to multiple vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

9.8CVSS8.9AI score0.01781EPSS
SaveExploits2References3
BDU FSTEC
BDU FSTEC
•added 2017/04/27 12:00 a.m.•20 views

Microsoft Outlook

The vulnerability of the Microsoft Outlook email client is related to lack of access control. Exploiting this vulnerability allows a malicious actor to replace the content of a web page using an email with specially crafted HTML tags...

4.3CVSS6.7AI score0.10485EPSS
SaveExploits0References3
CNVD
CNVD
•added 2017/04/20 12:00 a.m.•18 views

Liebert MultiLink Automated Shutdown Elevation of Privilege Vulnerability

Liebert MultiLink Automated Shutdown is a set of programs used in Liebert UPS systems to prevent automatic server shutdown. A security vulnerability exists in Liebert MultiLink Automated Shutdown version 4.2.4. A local attacker can exploit this vulnerability by replacing the LiebertM executable...

7.8CVSS6.8AI score0.00307EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2017/04/20 12:00 a.m.•21 views

Safari iOS Code Execution

The vulnerability of the WebKit component in the Safari browser and the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or replace the default browser tab by making incorrect references to...

6.8CVSS8AI score0.02853EPSS
SaveExploits0References4Affected Software2
Oracle linux
Oracle linux
•added 2017/04/12 12:00 a.m.•136 views

httpd security and bug fix update

2.4.6-45.0.1.4 - replace index.html with Oracle's index page oracleindex.html 2.4.6-45.4 - Resolves: 1396197 - Backport: modproxywstunnel - AH02447: err/hup on backconn 2.4.6-45.3 - prefork: fix delay completing graceful restart 1327624 - modldap: fix authz regression, failing to rebind 1415257...

7.5CVSS0.7AI score0.49024EPSS
SaveExploits4
Microsoft KB
Microsoft KB
•added 2017/04/11 7:00 a.m.•62 views

Description of the security update for Excel Services on SharePoint Server 2010: April 11, 2017

Description of the security update for Excel Services on SharePoint Server 2010: April 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...

5.4CVSS6.1AI score0.03842EPSS
SaveExploits0
Prion
Prion
•added 2017/04/10 3:59 a.m.•27 views

Design/Logic Flaw

Liebert MultiLink Automated Shutdown v4.2.4 allows local users to gain privileges by replacing the LiebertM executable file...

7.2CVSS7.1AI score0.00307EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2017/04/10 3:00 a.m.•54 views

CVE-2015-7260

CVE-2015-7260 affects Liebert MultiLink Automated Shutdown, specifically version 4.2.4. A local attacker can escalate privileges by replacing the LiebertM executable. The vulnerability details across sources describe a local-exploit scenario with privilege elevation, but remediation/patch informa...

7.8CVSS7.6AI score0.00307EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
•added 2017/04/06 6:59 p.m.•33 views

CVE-2017-7572

The checkPolkitPrivilege function in serviceHelper.py in Back In Time aka backintime 1.1.18 and earlier uses a deprecated polkit authorization method unix-process that is subject to a race condition time of check, time of use. With this authorization method, the owner of a process requesting a...

9.3CVSS7.1AI score0.01083EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2017/04/04 4:59 p.m.•23 views

CVE-2017-7307

Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file...

6.8CVSS5.8AI score0.00333EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2017/04/02 8:59 p.m.•25 views

CVE-2016-8273

Huawei PC client software HiSuite 4.0.5.300OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise...

7.8CVSS5.6AI score0.0021EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
•added 2017/03/22 12:00 a.m.•12 views

March 22, 2017—KB4016636 (OS Build 10586.842)

None None...

5.3AI score
SaveExploits0
Rows per page
Query Builder