PT-2020-5695

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 84.0.4147.89 Description The issue concerns an incorrect security UI in Progressive Web Apps PWAs within Google Chrome, allowing a remote attacker to spoof the contents of the Omnibox URL bar via a crafted PWA...

PT-2020-3212

Name of the Vulnerable Software and Affected Versions Microsoft Office Web Apps Server affected versions not specified Description A spoofing issue exists due to improper sanitization of specially crafted requests by an Office Web Apps server. This can lead to a cross-site scripting attack. The...

CVE-2020-1442: Improper Neutralization of Input During Web Page Generation

A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'...

Security Updates for Microsoft Office Web Apps (July 2020)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory. An attacker who exploited the...

PT-2020-3217

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft Office Online Server affected versions not specified Microsoft Office Web Apps Server affected versions not specified Microsoft SharePoint Server affected versions not specified...

PT-2020-3214

Name of the Vulnerable Software and Affected Versions Microsoft Word affected versions not specified Microsoft Office affected versions not specified Microsoft Office Online Server affected versions not specified Microsoft Office Web Apps Server affected versions not specified Microsoft SharePoin...

[SECURITY] Fedora 31 Update: moby-engine-19.03.11-1.ce.git42e35e6.fc31

Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This me ans they can run anywhere, from your laptop to the largest EC2 compute instance and everything in between - and they don'...

vulhub

This repository is an open-source collection of vulnerable web applications and environments for security testing and education, maintained by vulhub. It is a defensive blue-team research and threat mitigation tool. The repository contains a variety of vulnerable web applications and environments...

November 11, 2014 update for SharePoint Server 2010 Office Web Apps (KB2889835)

November 11, 2014 update for SharePoint Server 2010 Office Web Apps KB2889835 This article describes update KB2889835 for Microsoft SharePoint Server 2010 Office Web Apps that was released on November 11, 2014. This update has a prerequisite. Fixes and Improvements Improves German proofing tools ...

Security Updates for Microsoft Office Web Apps (April 2020)

The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability...

Security Update for Microsoft Office Web Apps Server 2013 (KB4475609)

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office Web Apps Server 2013 (KB4475609) farm-deployment

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for SharePoint Server 2010 Office Web Apps: April 14, 2020

Description of the security update for SharePoint Server 2010 Office Web Apps: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if it does not correctly handle objects in memory. To learn more about the vulnerability...

MS15-033: Description of the security update for Office Web Apps Server 2013: April 14, 2015

Resolves vulnerabilities in Office Web Apps Server 2013 that could allow remote code execution if an authenticated attacker sends specially crafted page content to a targeted computer that is running SharePoint Server.IntroductionThis update resolves vulnerabilities in Microsoft Office Web Apps...

MS15-046: Description of the security update for Office Web Apps Server 2013: May 12, 2015

Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file.IntroductionThis update resolves vulnerabilities in Microsoft Office Web Apps Server 2013 that could allow remote code execution if an authenticated attack...

MS15-022: Description of the security update for Office Web Apps Server 2013: March 10, 2015

Resolves vulnerabilities in Office Web Apps Server 2013 that could allow remote code execution if an authenticated attacker sends specially crafted page content to a targeted computer that is running SharePoint Server.IntroductionThis update resolves vulnerabilities in Microsoft Office Web Apps...

MS16-029: Description of the security update for SharePoint Server 2010 Office Web Apps: March 8, 2016

MS16-029: Description of the security update for SharePoint Server 2010 Office Web Apps: March 8, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...

MS16-015: Description of the security update for SharePoint Server 2010 Office Web Apps: February 9, 2016

MS16-015: Description of the security update for SharePoint Server 2010 Office Web Apps: February 9, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...

Node.js third-party modules: [sapper] Path Traversal

I would like to report a critical path traversal vunerability in the sapper module It allows an attacker to simply obain arbitrary files from the remote server, exploiting a simple path traversal using URL-encoded "../". Module module name: sapper version: 0.27.10 npm page:...

Description of the security update for SharePoint Server 2010 Office Web Apps: March 10, 2020

Description of the security update for SharePoint Server 2010 Office Web Apps: March 10, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if it does not correctly handle objects in memory. To learn more about the vulnerability...