13 matches found
CVE-2019-16896
In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll aka the backup module improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality...
CVE-2019-16896
creationtimestamp| type| source ---|---|--- 2024-03-18 09:11:17+00:00| seen| https://t.me/ctinow/210283...
CVE-2018-16896
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...
CVE-2018-16896
...
CVE-2018-16896
This CVE entry is rejected and not used; the candidate was withdrawn by its CNA.
CVE-2020-16896
An information disclosure vulnerability exists in Remote Desktop Protocol RDP when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. ...
CVE-2020-16896
CVE-2020-16896 describes an information-disclosure vulnerability in Microsoft Windows Remote Desktop Protocol (RDP). According to the linked sources, the issue arises when an attacker connects to a target system via RDP and sends specially crafted requests, potentially allowing the attacker to ob...
Microsoft Windows Multiple Vulnerabilities (KB4580327)
This host is missing a critical security update according to Microsoft KB4580327 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Patch Tuesday - October 2020
Microsoft brings us an October's Update Tuesday with 87 vulnerabilities, a sub-100 number we haven't experienced in quite some time. To further add to this oddity, there are no Browser-based vulnerabilities to mention and the arrival of a new Adobe Flash vulnerability CVE-2020-9746. Despite this...
Microsoft Windows Remote Desktop Protocol (RDP) Information Disclosure (CVE-2020-16896)
An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
CVE-2019-16896
CVE-2019-16896 affects K7 Ultimate Security 16.0.0117. The backup module K7BKCExt.dll improperly validates administrative privileges, enabling a local, user‑privilege bypass that allows an arbitrary file write via a symbolic link attack with file restoration functionality. Documented impact acros...
CVE-2017-16896
A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...
CVE-2017-16896
A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...