CVE-2018-9081

CVE-2018-9081 affects Iomega, LenovoEMC NAS devices (4.1.402.34662 and earlier) with Content Viewer assets vulnerability enabling self-XSS via file names. Attackers could chain vulnerabilities (token theft, CSRF) to gain unauthorized shell access or escalate privilege on affected devices, impacti...

CVE-2018-9081 Iomega and LenovoEMC NAS Web UI Vulnerabilities

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file name used for assets accessible through the Content Viewer application are vulnerable to self cross-site scripting self-XSS. As a result, adversaries can add files to shares accessible from the Content...

Provisioning Services 7.X: Target Devices Fail To Boot With Error "No servers available for disk"

When we start the Target Device, we notice the following error on the device during boot process. "No servers available for disk" We also notice Database Access errors for certain functions on the Event Viewer of PVS Server...

[SECURITY] Fedora 29 Update: okular-18.08.1-1.fc29

A document viewer...

Event Viewer on the PVS Target Devices Shows: "Unable to update database with new machine account - The operation completed successfully. (0x0)"

Error shown in the Event Viewer on all the PVS Target Devices: Source: BNDevice EventID: 1014 Unable to update database with new machine account password - The operation completed successfully. 0x0. All PVS Target Devices are getting the same error every one hour after the first automatic attempt...

[SECURITY] Fedora 27 Update: okular-17.12.3-2.fc27

A document viewer...

CVE-2018-8429

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel...

CVE-2018-8429

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel...

CVE-2018-8429

CVE-2018-8429 is an information disclosure vulnerability in Microsoft Excel and related components (Excel Viewer, Office). The underlying issue is that Excel may disclose memory contents. Affected products include Excel 2010 SP2, 2016 (KB4092460), Office compatibility pack, and related Excel/Offi...

Microsoft Excel Viewer 2007 Service Pack 3 Information Disclosure Vulnerability (KB4092467)

This host is missing an important security update according to Microsoft KB4092467 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

[SECURITY] Fedora 28 Update: okular-18.04.3-2.fc28

A document viewer...

September 11, 2018—KB4457144 (Monthly Rollup)

None None...

September 11, 2018—KB4457140 (Security-only update)

None None...

September 11, 2018—KB4457145 (Security-only update)

None None...

Security Updates for Microsoft Office Viewer Products (September 2018)

The Microsoft Office Viewer Products are missing a security update. It is, therefore, affected by the following vulnerability : - An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could...

DEBIAN-CVE-2018-16648

In Artifex MuPDF 1.13.0, the fzappendbyte function in fitz/buffer.c allows remote attackers to cause a denial of service segmentation fault via a crafted pdf file. This is caused by a pdf/pdf-device.c pdfdevalpha array-index underflow...

NovaRad NovaPACS Diagnostics Viewer 8.5 - XML External Entity Injection Vulnerability

Exploit for xml platform in category web applications Title: NovaRad NovaPACS Diagnostics Viewer 8.5 - XML External Entity Injection File Disclosure Author: Gjoko 'LiquidWorm' Krstic @zeroscience Vendor: NovaRad Corporation Product web page: https://www.novarad.net Affected version: 8.5.19.75...

NovaRad NovaPACS Diagnostics Viewer 8.5 File Disclosure

NovaRad NovaPACS Diagnostics Viewer v8.5 OOB XXE File Disclosure Vendor: NovaRad Corporation Product web page: https://www.novarad.net Affected version: 8.5.19.75 Diagnostics Viewer, Study Browser Summary: NovaPACS revolutionary workflow infrastructure has been designed and developed using the...

UBUNTU-CVE-2018-16368

SplashXPath::strokeAdjust in splash/SplashXPath.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

Foxit Reader < 8.3.7 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 8.3.7. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid112059; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate"...