CVE-2020-1471

CVE-2020-1471 is an elevation-of-privilege vulnerability in Windows CloudExperienceHost. The root cause, as described in the initial document, is that CloudExperienceHost fails to properly check COM objects, enabling an attacker who can log on to an affected system to run a crafted script or appl...

KB4577041: Windows 10 Version 1709 September 2020 Security Update

The remote Windows host is missing security update 4577041. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co...

KB4570333: Windows 10 Version 1809 and Windows Server 2019 September 2020 Security Update

The remote Windows host is missing security update 4570333. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co...

KB4574727: Windows 10 Version 1903 and Windows 10 Version 1909 September 2020 Security Update

The remote Windows host is missing security update 4574727. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co...

KB4577049: Windows 10 September 2020 Security Update

The remote Windows host is missing security update 4577049. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co...

KB4577032: Windows 10 Version 1803 September 2020 Security Update

The remote Windows host is missing security update 4577032. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co...

Latest Microsoft Update Patches New Windows 0-Day Under Active Attack

With its latest and last Patch Tuesday for 2019, Microsoft is warning billions of its users of a new Windows zero-day vulnerability that attackers are actively exploiting in the wild in combination with a Chrome exploit to take remote control over vulnerable computers. Microsoft's December securi...

Microsoft Windows Multiple Vulnerabilities (KB4530715)

This host is missing a critical security update according to Microsoft KB4530715 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2019-1471

CVE-2019-1471 is a Windows Hyper-V remote code execution vulnerability. The issue arises when a host server’s Hyper-V component fails to properly validate input from an authenticated user on a guest OS, allowing arbitrary code execution on the host. Affected product surface is Microsoft Windows H...

Microsoft Patch Tuesday — Dec. 2019: Vulnerability disclosures and Snort coverage

By Jon Munshaw. Microsoft released its monthly security update today, disclosing vulnerabilities across many of its products and releasing corresponding updates. This month's Patch Tuesday covers 25 vulnerabilities, two of which are considered critical. This month’s security update covers securit...

KB4530684: Windows 10 Version 1903 and Windows 10 Version 1909 December 2019 Security Update

The remote Windows host is missing security update 4530684. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system...

CVE-2018-1471

...

CVE-2018-1471

CVE-2018-1471 entry is rejected/not used and does not represent an active vulnerability.

CVE-2016-1471

CVE-2016-1471 describes a Cross-site Scripting (XSS) vulnerability in the web-based management interface of Cisco Small Business 220 Series Smart Plus Switches (Sx220) with firmware prior to 1.0.1.1. The root cause is insufficient validation of user-supplied input in the web interface, allowing a...

Oracle: Security Advisory (ELSA-2009-1471)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2011-1423)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2015-1471)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1471

Pragyan CMS is affected by an SQL injection in userprofile.lib.php (Pragyan CMS 3.0). The vulnerability allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI. The issue is confirmed across multiple sources (NVD entry CVE-2015-1471 and OpenVAS probe), ...

openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2011:0645-1)

This php5 update fixes : - CVE-2011-0421: CVSS v2 Base Score: 2.6 AV:N/AC:H/Au:N/C:N/I:N/A:P: Input Validation CWE-20 - CVE-2011-1092: CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Numeric Errors CWE-189 - CVE-2011-1148: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Resource Managemen...

openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2011:0645-1)

This php5 update fixes : - CVE-2011-0421: CVSS v2 Base Score: 2.6 AV:N/AC:H/Au:N/C:N/I:N/A:P: Input Validation CWE-20 - CVE-2011-1092: CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Numeric Errors CWE-189 - CVE-2011-1148: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Resource Managemen...