Lucene search
+L

1282 matches found

Positive Technologies
Positive Technologies
added 2017/05/09 12:00 a.m.6 views

PT-2017-2157 · Microsoft · Sharepoint Server +6

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft Word affected versions not specified Microsoft Skype for Business affected versions not specified Microsoft SharePoint Server affected versions not specified Microsoft SharePoint...

9.3CVSS7.9AI score0.15757EPSS
SaveExploits1References9
ThreatPost
ThreatPost
added 2017/04/21 4:00 p.m.21 views

Skype Fixes Credential Phishing Bug "SPYKE"

Microsoft recently fixed a vulnerability in its video chat and messaging app Skype that could have allowed an attacker to execute code on the system it was running on, phish Skype credentials and crash the application. Zacharis Alexandros, an independent researcher who’s also with the ‎European...

2.3AI score
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2017/04/11 7:00 a.m.155 views

Description of the security update for Office 2013: April 11, 2017

Description of the security update for Office 2013: April 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

9.3CVSS7.7AI score0.99933EPSS
SaveExploits30
Microsoft KB
Microsoft KB
added 2017/04/11 7:00 a.m.113 views

Description of the security update for Office 2016: April 11, 2017

None None...

6.1AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/04/06 12:00 a.m.18 views

Microsoft Skype DLL Planting Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Skype. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.5CVSS3.5AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2017/04/05 12:00 a.m.21 views

Microsoft Skype Insecure Library Loading Vulnerability

Microsoft Skype is prone to insecure library loading vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:skype:skype";...

10CVSS8.6AI score0.46342EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
added 2017/04/03 12:00 a.m.12 views

The vulnerability of the Skype instant messaging program allows a hacker to execute arbitrary code.

The vulnerability of the Skype instant messaging program is related to the limitation on the download of external libraries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted library named api-ms-win-core-winrt-string-l1-1-0.dll, which is...

10CVSS8.2AI score0.46342EPSS
SaveExploits2References7Affected Software1
Prion
Prion
added 2017/03/23 8:59 p.m.19 views

Design/Logic Flaw

Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded by Skype. It allows an attacker to load a .dll of the attacker's choosing that...

10CVSS9.5AI score0.46342EPSS
SaveExploits2References7Affected Software1
NVD
NVD
added 2017/03/23 8:59 p.m.23 views

CVE-2017-6517

Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded by Skype. It allows an attacker to load a .dll of the attacker's choosing that...

10CVSS9.6AI score0.46342EPSS
SaveExploits2References7
OSV
OSV
added 2017/03/23 8:59 p.m.10 views

CVE-2017-6517

Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded by Skype. It allows an attacker to load a .dll of the attacker's choosing that...

9.8CVSS6.2AI score0.46342EPSS
SaveExploits2References7
Cvelist
Cvelist
added 2017/03/23 8:00 p.m.30 views

CVE-2017-6517

Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded by Skype. It allows an attacker to load a .dll of the attacker's choosing that...

9.7AI score0.46342EPSS
SaveExploits2References7
CVE
CVE
added 2017/03/23 8:00 p.m.123 views

CVE-2017-6517

CVE-2017-6517 affects Microsoft Skype 7.16.0.102, due to insecure library loading in Skype.exe that handles (api-ms-win-core-winrt-string-l1-1-0.dll). An unauthenticated attacker could leverage DLL hijacking to execute arbitrary code on the target system. Public sources describe this as a DLL loa...

10CVSS9.6AI score0.46342EPSS
SaveExploits2References7Affected Software1
CNVD
CNVD
added 2017/03/23 12:00 a.m.10 views

Microsoft Skype DLL Load Local Code Execution Vulnerability

Microsoft Skype is a suite of instant messaging software from the American company Microsoft. Microsoft Skype suffers from a DLL loading local code execution vulnerability that originates from the program failing to validate user-supplied input. A local attacker could exploit this vulnerability t...

10CVSS7.6AI score0.46342EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2017/03/17 12:00 a.m.40 views

CVE-2017-0108

The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to execute arbitrary code v...

6.5AI score0.5047EPSS
SaveExploits2References4
Packet Storm
Packet Storm
added 2017/03/15 12:00 a.m.57 views

Skype 7.16.0.102 DLL Hijacking

Vulnerability Title: Skype Insecure Library Loading Vulnerability api-ms-win-core-winrt-string-l1-1-0.dll Affected Product: Skype Vendor Homepage: https://www.microsoft.com/en-us/ MSRC Case 32355 TRK:0001002846 CVE-ID : CVE-2017-6517 Severity: Medium Description: Microsoft Skype contains a DLL...

0.3AI score0.46342EPSS
SaveExploits2
Microsoft Security Update
Microsoft Security Update
added 2017/03/14 5:00 p.m.23 views

Security Update for Skype for Business 2015 (KB3172539) 64-Bit Edition

A security vulnerability exists in Skype for Business 2015 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

3AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2017/03/14 5:00 p.m.11 views

Security Update for Skype for Business 2015 (KB3172539) 32-Bit Edition

A security vulnerability exists in Skype for Business 2015 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

3AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2017/03/14 7:00 a.m.86 views

Microsoft Teams help & learning

None None...

9.3CVSS6.7AI score0.5047EPSS
SaveExploits4
Microsoft KB
Microsoft KB
added 2017/03/14 7:00 a.m.68 views

MS17-013: Description of the security update for Skype for Business 2016: March 14, 2017

None None...

9.3CVSS6.7AI score0.5047EPSS
SaveExploits4
Symantec
Symantec
added 2017/03/14 12:00 a.m.70 views

Microsoft Windows Graphics Component CVE-2017-0060 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Live Meeting 2007 Add-in Microsoft Live Meeting 2007 Console Microsoft Lync...

1.9CVSS0.8AI score0.15939EPSS
SaveExploits2Affected Software10
Rows per page
Query Builder