9607 matches found
CVE-2017-0212
Windows Hyper-V allows an elevation of privilege vulnerability when Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 fail to properly validate vSMB packet data, aka "Windows Hyper-V vSMB Elevation of Privilege Vulnerability"...
CVE-2017-0212
CVE-2017-0212 : Windows Hyper-V vSMB Elevation of Privilege. Affected: Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016, where Hyper-V fails to properly validate vSMB packet data, enabling privilege escalation. Root cause: improper validation in vSMB handling. Impact: elevation of priv...
Release Notes for Veeam Backup & Replication 9.5 Update 2
More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 9.5 Update 2 Cause Please confirm you are running version 9.5.0.580, 9.5.0.711, 9.5.0.802, or 9.5.0.823 prior to...
CVE-2017-0212: Improper Input Validation
Windows Hyper-V allows an elevation of privilege vulnerability when Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 fail to properly validate vSMB packet data, aka "Windows Hyper-V vSMB Elevation of Privilege Vulnerability"...
SNMP Protocol Community String Authentication Privilege Bypass Vulnerability in Lenovo NetroStar Smart-V Firewalls
Smart-V Firewall is a security appliance produced by Lenovo Nethub that combines ADSL dialing, routing, firewall, VPN, switch and other functions. Lenovo Smart-V Firewall has a SNMP protocol community string authentication privilege bypass vulnerability, which allows an attacker to bypass SNMP...
Microsoft Windows Hyper-V Remote Elevation of Privilege Vulnerability
Microsoft Windows is the popular computer operating system. A remote elevation of privilege vulnerability exists on the host server where Windows Hyper-V does not properly validate vSMB packets and a remote attacker elevates privileges...
Windows Hyper-V vSMB Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data. An attacker who successfully exploited these vulnerabilities could gain elevated privileges on a target operating system. This vulnerability by itself does not allow...
KB4019472: Windows 10 Version 1607 and Windows Server 2016 May 2017 Cumulative Update
The remote Windows host is missing security update KB4019472. It is, therefore, affected by multiple vulnerabilities : - A security bypass vulnerability exists in Internet Explorer due to an unspecified flaw. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a...
KB4016871: Windows 10 Version 1703 May 2017 Cumulative Update
The remote Windows 10 version 1703 host is missing security update KB4016871. It is, therefore, affected by multiple vulnerabilities : - A security bypass vulnerability exists in Internet Explorer due to an unspecified flaw. An unauthenticated, remote attacker can exploit this, by convincing a us...
KB4019474: Windows 10 Version 1507 May 2017 Cumulative Update
The remote Windows 10 version 1507 host is missing security update KB4019474. It is, therefore, affected by multiple vulnerabilities : - A security bypass vulnerability exists in Internet Explorer due to an unspecified flaw. An unauthenticated, remote attacker can exploit this, by convincing a us...
Siemens devices using the PROFINET Discovery and Configuration Protocol (Update H)
CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...
PT-2017-10459
Name of the Vulnerable Software and Affected Versions Windows Hyper-V versions 10 Gold, 1511, 1607, and 1703 Windows Server 2016 Description The issue arises from the failure to properly validate vSMB packet data, leading to an elevation of privilege. This allows attackers to affect the system...
KLA11009 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...
SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:1183-1)
The SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.58 to receive various security and bugfixes. Notable new/improved features : - Improved support for Hyper-V - Support for Matrox G200eH3 - Support for tcpwestwood The following security bugs were fixed : - CVE-2017-2671: The pingunhash...
Siemens PROFINET DCP (Update V)
1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION : Exploitable from an adjacent network/low attack complexity Vendor : Siemens Equipment : Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerabilities : Uncontrolled Resource Consumption 2. UPDATE INFORMATION This updated advisory...
SUSE-SU-2017:1183-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.58 to receive various security and bugfixes. Notable new/improved features: - Improved support for Hyper-V - Support for Matrox G200eH3 - Support for tcpwestwood The following security bugs were fixed: - CVE-2017-2671: The pingunhash...
FreeBSD : NSS -- multiple vulnerabilities (4cb165f0-6e48-423e-8147-92255d35c0f7)
Mozilla Foundation reports : An out-of-bounds write during Base64 decoding operation in the Network Security Services NSS library due to insufficient memory being allocated to the buffer. This results in a potentially exploitable crash. The NSS library has been updated to fix this issue to addres...
April 18, 2017âKB4015553 (Preview of Monthly Rollup)
None None...
Microsoft Windows Hyper-V Remote Code Execution Vulnerability (CNVD-2017-05755)
Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to execute arbitrary code on the host computer...
Microsoft Windows Hyper-V Remote Code Execution Vulnerability (CNVD-2017-05757)
Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to execute arbitrary code on the host computer...