116 matches found
KB4528760: Windows 10 Version 1903 and Windows 10 Version 1909 January 2020 Security Update
The remote Windows host is missing security update 4528760. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files. An attacker who successfully exploited the vulnerability could execu...
KB4534314: Windows 7 and Windows Server 2008 R2 January 2020 Security Update
The remote Windows host is missing security update 4534314 or cumulative update 4534310. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Remote Desktop Web Access improperly handles credential information. An attacker who successfully...
CVE-2019-0620
The CVE-2019-0620 entry describes a Windows Hyper-V remote code execution vulnerability. The issue arises when Hyper-V fails to properly validate input from a guest OS, allowing an authenticated guest to run a specially crafted app that could cause the Hyper-V host to execute arbitrary code. The ...
Microsoft Windows Multiple Vulnerabilities (KB4503291)
This host is missing a critical security update according to Microsoft KB4503291 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Windows Hyper-V CVE-2019-0620 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the host operating system. Failed exploit attempts will result in a denial of service condition. Technologies Affected Microsoft Hyper-V...
CVE-2018-0620
Untrusted search path vulnerability in LOGICOOL Game Software versions before 8.87.116 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2018-0620
CVE-2018-0620 affects LOGICOOL Game Software versions before 8.87.116 due to an untrusted DLL search path vulnerability (CWE-427). The root cause is insecure loading of a Trojan horse DLL, enabling privilege escalation when the vulnerable installer is used. Official remediation per JVN/JVNDB note...
JVN#52574492: The installers of multiple Logicool software programs may insecurely load Dynamic Link Libraries
The installers of multiple software programs provided by Logicool Co. Ltd contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries（CWE-427）. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the...
The vulnerability in the Omnibox browser implementation of Google Chrome allows a hacker to perform domain substitution attacks.
The vulnerability of the Omnibox browser implementation by Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform domain substitution remotely, using a specially created domain name containing the symbol “U+0620”...
Google Chrome Domain Spoofing Vulnerability (CNVD-2017-33606)
Google Chrome for Mac is a Mac-based web browser developed by Google.Omnibox is one of the real-time search engines. A security vulnerability exists in Omnibox in Google Chrome for Mac, which stems from the program's failure to adequately enforce policies. The vulnerability can be exploited by a...
CVE-2017-5090
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.115 for Mac allowed a remote attacker to perform domain spoofing via a crafted domain name containing a U+0620 character, aka Apple rdar problem 32458012...
CVE-2017-0620
An elevation of privilege vulnerability in the Qualcomm Secure Channel Manager driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android...
CVE-2017-0620
CVE-2017-0620 is a local elevation-of-privilege in the Qualcomm Secure Channel Manager driver on Android, allowing a malicious local app to run code in the kernel. Affected: Android devices with Kernel-3.10/3.18 (per the CVE entry). Impact per sources is High (CVSSv3: 7.0). Affected devices liste...
CVE-2016-0620
CVE-2016-0620 entry is rejected/not used and does not represent an active vulnerability.
SUSE SLED10 Security Update : Acrobat Reader (SUSE-SU-2013:0044-1)
Acrobat Reader was updated to 9.5.3 to fix various bugs and security issues. More information can be found at http://www.adobe.com/support/security/bulletins/apsb13-02.html The resolved security issues are CVE-2012-1530 , CVE-2013-0601 , CVE-2013-0602 , CVE-2013-0603 , CVE-2013-0604 , CVE-2013-06...
CVE-2015-0620
CVE-2015-0620 concerns the Cisco TelePresence Management Suite (TMS) XML parser. Affected versions are TMS 14.3(.2) and earlier. The root cause is improper handling of XML external entities, enabling a remote authenticated attacker to cause a denial of service by submitting specially crafted POST...
Technicolor TC7200 - Multiple XSS Vulnerabilities
No description provided by source. Exploit Title: Technicolor TC7200 - Multiple XSS Vulnerabilities Google Dork: N/A Date: 02-01-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.technicolor.com/en/solutions-services/connected-home/modems-gatew...
openSUSE Security Update : flash-player (openSUSE-SU-2011:0492-1)
Flash Player has been updated to version 10.3, fixing bugs and security issues. More information can be found on: http://www.adobe.com/support/security/bulletins/apsb11-12.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...
openSUSE Security Update : flash-player (openSUSE-SU-2011:0492-1)
Flash Player has been updated to version 10.3, fixing bugs and security issues. More information can be found on: http://www.adobe.com/support/security/bulletins/apsb11-12.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...