Dirty Pipe Local Privilege Escalation via CVE-2022-0847

This exploit targets a vulnerability in the Linux kernel since 5.8, that allows writing of read only or immutable memory. The vulnerability was fixed in Linux 5.16.11, 5.15.25 and 5.10.102. The module exploits this vulnerability by overwriting a suid binary with the payload, executing it, and the...

KB4541504: Windows Server 2008 March 2020 Security Update

The remote Windows host is missing security update 4541504 or cumulative update 4541506. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory. CVE-2020-0770 - A tampering...

CVE-2020-0847

Technical details (affected products/versions/root cause/fix) for CVE-2020-0847 are not provided in connected documents; monitor for updates. The initial description confirms a VBScript RCE in the VBScript engine but lacks actionable specifics in the supplied materials.

Security Updates for Internet Explorer (March 2020)

The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a...

Microsoft VBScript Remote Code Execution (CVE-2020-0847)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

KLA11681 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Scripting Engine can be exploited remotely to...

CVE-2019-0847

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0851, CVE-2019-0877, CVE-2019-0879...

CVE-2019-0847

Technical details for CVE-2019-0847 are not publicly available in the provided documents; no affected product/version, root cause, or remediation are specified here. Monitor for updates from official advisories.

Microsoft Windows JET Database Engine CVE-2019-0847 Remote Code Execution Vulnerability

Description Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10...

KB4493441: Windows 10 Version 1709 and Windows Server Version 1709 April 2019 Security Update

The remote Windows host is missing security update 4493441. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver luafv.sys...

Solaris 10 (sparc) : 126356-06

Sun Java System Access Manager 7.1 Solaris. Date this patch was last updated by Sun : Apr/23/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2018-0847

Technical details beyond the IE information disclosure description are not publicly provided in the supplied documents. Monitor for updates from the referenced sources.

Microsoft Windows Multiple Vulnerabilities (KB4074591)

This host is missing a critical security update according to Microsoft KB4074591 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4074590)

This host is missing a critical security update according to Microsoft KB4074590 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KB4074587: Windows 7 and Windows Server 2008 R2 February 2018 Security Update

The remote Windows host is missing security update 4074587 or cumulative update 4074598. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability...

KB4074591: Windows 10 Version 1511 February 2018 Security Update (Meltdown)(Spectre)

The remote Windows host is missing security update 4074591. It is, therefore, affected by multiple vulnerabilities : - An vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local user access to disclose...

Microsoft Windows Scripting Engine CVE-2018-0847 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607...

KB4074592: Windows 10 Version 1703 February 2018 Security Update (Meltdown)(Spectre)

The remote Windows host is missing security update 4074592. It is, therefore, affected by multiple vulnerabilities : - An vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local user access to disclose...

CVE-2017-0847

CVE-2017-0847 is an elevation of privilege in the Android media framework (mediaanalytics) affecting Android 8.0 on Pixel/Nexus. The vulnerability is classified as EoP with impact on confidentiality, integrity, and availability. The Pixel security bulletin notes a patch level of 2017-11-05 or lat...

Synology Video Station Cross-Site Scripting Vulnerability

Synology Video Station is a video manager from Synology, a Chinese company. A cross-site scripting vulnerability exists in Synology Video Station version 1.2 before 1.2-0455, version 1.5 before 1.5-0772, and version 1.6 before 1.6-0847. A remote attacker can exploit this vulnerability to inject...