Outlook USB Sync for Android - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Outlook USB Sync for Android published at the 'play' market has multiple vulnerabilities...

DejaOffice for Outlook Sync - Apache license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application DejaOffice for Outlook Sync published at the 'play' market has multiple vulnerabilities...

March 8, 2016, update for PowerPoint 2016 (KB3114847)

None None...

Fedora 23 : php-horde-Horde-Service-Weather-2.3.1-1.fc23 / php-horde-Horde-Core-2.22.4-1.fc23 / etc (2015-a3c9048cdd)

HordeCore 2.22.4 mjr SECURITY: Fix XSS in HordeCoreVarRendererHtml reported by Centurion Information Security. mjr Support sending MDN via ActiveSync Request 23080. HordeCore 2.22.3 mjr Fix issue with synchronizing IMAP folder names that contain only numbers. HordePerms 2.1.6 mjr Use NULL instead...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the Sync Framework component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially crafted data...

CVE-2015-5266

The enrolmetasync function in enrol/meta/locallib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to obtain manager privileges in opportunistic circumstances by leveraging incorrect role processing during a long-runni...

UBUNTU-CVE-2015-5266

The enrolmetasync function in enrol/meta/locallib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to obtain manager privileges in opportunistic circumstances by leveraging incorrect role processing during a long-runni...

CVE-2016-2509

The password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and L2E, L2P, L3E, and L3P before 09.0.06 sets an SNMP community to the same string as the administrator password, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2016-2509: Exposure of Sensitive Information to an Unauthorized Actor

The password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and L2E, L2P, L3E, and L3P before 09.0.06 sets an SNMP community to the same string as the administrator password, which allows remote attackers to obtain sensitive information by sniffing the network...

Hirschmann "Classic Platform" switches reveal administrator password in SNMP community string by default

Overview Hirschmann "Classic Platform" switches contain a password sync feature that syncs the switch administrator password with the SNMP community password, exposing the administrator password to attackers on the local network. Description CWE-257: Storing Passwords in a Recoverable Format For...

Microsoft Windows DLL Load Denial of Service Vulnerability

Microsoft Windows is a family of operating systems released by Microsoft Corporation in the U.S. Sync Framework is one of the synchronization platform components used to enable collaboration and offline access to applications, services, and devices. A denial of service vulnerability exists in Syn...

CVE-2016-0044

Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote attackers to cause a denial of service SyncShareSvc service outage via crafted "change batch" data, aka "Windows DLL Loading Denial of Service Vulnerability."...

CVE-2016-0044

Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote attackers to cause a denial of service SyncShareSvc service outage via crafted "change batch" data, aka "Windows DLL Loading Denial of Service Vulnerability."...

Denial of service

Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote attackers to cause a denial of service SyncShareSvc service outage via crafted "change batch" data, aka "Windows DLL Loading Denial of Service Vulnerability."...

CVE-2016-0044

CVE-2016-0044 is a Windows Sync Framework denial-of-service vulnerability. A remote attacker can exploit specially crafted input using the DLL loading/change-batch mechanism to cause the SyncShareSvc service to stop responding. The issue affects Windows 8.1, Windows Server 2012 R2, and Windows RT...

CVE-2016-0044

Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote attackers to cause a denial of service SyncShareSvc service outage via crafted "change batch" data, aka "Windows DLL Loading Denial of Service Vulnerability."...

Microsoft Windows Multiple Vulnerabilities (3134228)

This host is missing an important security update according to Microsoft Bulletin MS16-014. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2016-0044: Improper Input Validation

Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote attackers to cause a denial of service SyncShareSvc service outage via crafted "change batch" data, aka "Windows DLL Loading Denial of Service Vulnerability."...

PT-2018-6055

Name of the Vulnerable Software and Affected Versions: sync-exec versions prior to 0.11.9 Description: The issue allows an attacker with low privileges on the server to potentially obtain confidential information from the buffer/tmp file used by the sync-exec module. This is because the tmp...

MS16-014: Security Update for Microsoft Windows to Address Remote Code Execution (3134228)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the Windows kernel due to improper handling of objects in memory. A local attacker can exploit this, via a crafted application, to run...