CVE-2020-1488 Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

...

CVE-2020-1488

Technical details about CVE-2020-1488 are not publicly available in the provided connected documents. The supplied materials only reiterate a Windows AppX Deployment Extensions privilege-elevation issue with a Microsoft advisory; monitor for updates.

Microsoft Windows Multiple Vulnerabilities (KB4571703)

This host is missing a critical security update according to Microsoft KB4571703 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4530734)

This host is missing a critical security update according to Microsoft KB4530734 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4530715)

This host is missing a critical security update according to Microsoft KB4530715 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4530714)

This host is missing a critical security update according to Microsoft KB4530714 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2019-1488

A security feature bypass vulnerability exists when Microsoft Defender improperly handles specific buffers, aka 'Microsoft Defender Security Feature Bypass Vulnerability'...

CVE-2019-1488

Technical details about CVE-2019-1488 are not available in the provided documents. Monitor for updates from ENISA/RH and OpenVAS references for any concrete exposures or fixes.

KB4530684: Windows 10 Version 1903 and Windows 10 Version 1909 December 2019 Security Update

The remote Windows host is missing security update 4530684. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system...

KB4530730: Windows 8.1 and Windows Server 2012 R2 December 2019 Security Update

The remote Windows host is missing security update 4530730 or cumulative update 4530702. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the...

KB4530681: Windows 10 December 2019 Security Update

The remote Windows host is missing security update 4530681. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious...

CVE-2011-1488

A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent...

CVE-2011-1488

CVE-2011-1488 affects rsyslogd prior to 5.7.6. The issue is a memory leak in how log messages are logged when RepeatedMsgReduction is enabled, which a local attacker can exploit to crash the rsyslogd daemon by flooding it with a sequence of repeated messages in a short time. Publicly available co...

Oracle Linux 6 : kernel (ELSA-2019-1488)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1488 advisory. - net tcp: enforce tcpminsndmss in tcpmtuprobing Florian Westphal 1719614 CVE-2019-11479 - net tcp: add tcpminsndmss sysctl Florian Westphal 1719614...

RHEL 6 : kernel (RHSA-2019:1488)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1488 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: An integer overflow flaw was found in...

Synametrics SynaMan Cross-Site Scripting Vulnerability

Synametrics SynaMan is a remote file manager from Synametrics Technologies, USA. A cross-site scripting vulnerability in Synametrics SynaMan version 4.0 build 1488 can be exploited by a remote attacker to inject arbitrary web script or HTML via the Main heading or Sub heading fields in the Partia...

CVE-2018-10763

Multiple cross-site scripting XSS vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the 1 Main heading or 2 Sub heading fields in the Partial Branding configuration page...

Default credentials

Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials...

Debian DLA-1488-1 : mariadb-10.0 security update

Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.36. Please see the MariaDB 10.0 Release Notes for further details : https://mariadb.com/kb/en/mariadb/mariadb-10036-release-notes/...

Security Bulletin: Buffer overflow in IBM® Db2® tool db2licm (CVE-2018-1488).

Summary The Db2 tool db2licm is vulnerable to buffer overflow. Vulnerability Details CVEID: CVE-2018-1488 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on...