1075 matches found
vulhub
This is an open-source collection of vulnerable web applications and environments, designed for security training and testing. The repository contains a variety of applications, including web servers, databases, and other services, each with its own set of vulnerabilities. The goal is to provide ...
Security Updates for Microsoft Office Web Apps (January 2022)
The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary code. CVE-2022-21840 %NASLMINLEVEL 70300 C...
Description of the security update for Office Web Apps Server 2013: January 11, 2022 (KB5002122)
None None...
Microsoft Office 代码注入漏洞
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code injection vulnerability exists in Microsoft Office. The following products and version...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1632-1 Rating: important References: 1192310 1192734 1193519 1193713 Cross-References: CVE-2021-38005 CVE-2021-38006 CVE-2021-38007 CVE-2021-38008 CVE-2021-38009 CVE-2021-38010 CVE-2021-38011 CVE-2021-38012...
DEBIAN-CVE-2021-4052
Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...
Design/Logic Flaw
Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...
UBUNTU-CVE-2021-4052
Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...
CVE-2021-4052
Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...
CVE-2021-4052
CVE-2021-4052 describes a use-after-free bug in the Chromium-based Chrome engine before version 96.0.4664.93, affecting the web apps component. An attacker could convince a user to install a crafted extension, potentially enabling heap corruption and arbitrary code execution. Publicly documented ...
Description of the security update for Office Web Apps Server 2013: December 14, 2021 (KB5002103)
None None...
Chromium: CVE-2021-4052 Use after free in web apps
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2021-41246
Express OpenID Connect middleware for Express.js is affected. Versions up to and including 2.5.1 do not regenerate the session id and session cookie on login, enabling session-fixation risks. A patch exists in version 2.5.2, which fixes the issue. Several sources corroborate this behavior and pat...
KLA12373 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, inject malicious code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free...
[SECURITY] Fedora 35 Update: moby-engine-20.10.11-1.fc35
Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between - and they don'...
The vulnerability of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Word Automation Services, and the Microsoft Word text editor arises from allowing operations beyond the buffer boundaries, enabling attackers to execute arbitrary code.
The vulnerability of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Word Automation Services, and the Microsoft Word text editor is related to the execution of operations outside of the buffer boundaries. Exploitation of this vulnerability could allow...
12 New Flaws Used in Ransomware Attacks in Q3
A dozen new vulnerabilities were used in ransomware attacks this quarter, bringing the total number of bugs associated with ransomware to 278. That’s a 4.5 percent increase over Q2, according to researchers. Five of the newbies can be used to achieve remote code execution RCE, while two can be us...
Description of the security update for Office Web Apps Server 2013: November 9, 2021 (KB5002065)
None None...
[SECURITY] Fedora 34 Update: moby-engine-20.10.9-1.fc34
Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between - and they don'...
