8233 matches found
CVE-2015-2371: Undefined Security Weakness
The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action scrip...
CVE-2015-2379: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Microsoft Office Memory Corruption...
CVE-2015-2380: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, and Word 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...
CVE-2015-2368: Undefined Security Weakness
Untrusted search path vulnerability in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Windows DLL Remote Code Execution Vulnerability."...
Fedora Update for rt FEDORA-2015-4698
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 7 : kernel-rt (RHSA-2015:1139)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1139 advisory. - Kernel: fs: isofs: infinite loop in CE record entries CVE-2014-9420 - kernel: use-after-free during key garbage collection CVE-2014-9529 -...
Airties RT-210 Multiple Parameter Cross-Site Scripting Vulnerability
Airties RT-210 is a router product from Turkey. The Airties RT-210's web interface ddns.stm file fails to adequately filter the 'ddnsdomainame' and 'ddnsaccount' parameters, allowing remote attackers to exploit vulnerabilities to inject malicious script or HTML code, which can be used to obtain...
CVE-2015-4679
Multiple cross-site scripting XSS vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the 1 ddnsdomainame or 2 ddnsaccount parameter to ddns.stm...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the 1 ddnsdomainame or 2 ddnsaccount parameter to ddns.stm...
CVE-2015-4679
Multiple cross-site scripting XSS vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the 1 ddnsdomainame or 2 ddnsaccount parameter to ddns.stm...
CVE-2015-4679
CVE-2015-4679 affects the Airties RT-210 router, where the web interface ddns.stm fails to properly filter the parameters ddns_domainame and ddns_account, enabling multiple cross-site scripting (XSS) vulnerabilities. Exploitation allows remote attackers to inject arbitrary script/HTML via the aff...
PT-2015-6670
Name of the Vulnerable Software and Affected Versions Airties RT-210 affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the web interface. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML...
CVE-2015-4679: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the 1 ddnsdomainame or 2 ddnsaccount parameter to ddns.stm...
CVE-2015-1719
The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to obtain sensitive information from kernel memory...
Design/Logic Flaw
Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges...
Null pointer dereference
The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to gain privileges or cause a denial of service NUL...
Design/Logic Flaw
Use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows user-assisted remote attackers to execute arbitrary code via a...
Design/Logic Flaw
Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges...
Design/Logic Flaw
Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges...
Design/Logic Flaw
Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges...