10072 matches found
Exploit for Use After Free in Microsoft
CVE-2019-0708-POC Affected versions Windows 7 Windows...
UPM Policy - "Enable multi-session write back with Fslogix Profile Container" not working for local admins
Changes made in multiple sessions do not persist on logoff even after configuring "Enable multi-session write-back for FSLogix Profile Container" policy Note: The policy is available from Profile Management 2003 onwards...
Oracle MySQL Server 3.20 - 4.1.0 Weak Password Encryption Vulnerability
Oracle MySQL Server is prone to a weak password encryption vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2003-1602
This CVE entry is rejected/not used per the initial description.
CVE-2003-1601
CVE-2003-1601 is rejected/not used and does not represent an active vulnerability entry.
snakeyaml: Billion laughs attack via alias feature
The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...
Microsoft investigating Windows XP, Server 2003 source code leak
By Waqas Microsoft Windows XP may be old but still powers roughly 1% of all desktop and laptop computers worldwide. This is a post from HackRead.com Read the original post: Microsoft investigating Windows XP, Server 2003 source code leak...
Microsoft Windows XP Source Code Reportedly Leaked Online
Microsoft's long-lived operating system Windows XP—that still powers over 1% of all laptops and desktop computers worldwide—has had its source code leaked online, allegedly, along with Windows Server 2003. Yes, you heard that right. The source code for Microsoft's 19-year-old operating system was...
Microsoft Windows XP Source Code Reportedly Leaked Online
Microsoft's long-lived operating system Windows XP—that still powers over 1% of all laptops and desktop computers worldwide—has had its source code leaked online, allegedly, along with Windows Server 2003. Yes, you heard that right. The source code for Microsoft's 19-year-old operating system was...
Application Compatibility Update for Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: April 2011
Application Compatibility Update for Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: April 2011 INTRODUCTION The Windows Application Compatibility Update is a software update that improves the compatibility experience in the following...
QiHang Media Web Digital Signage 3.0.9 Arbitrary File Disclosure Vulnerability
Exploit for hardware platform in category web applications QiHang Media Web QH.aspx Digital Signage 3.0.9 Arbitrary File Disclosure Vulnerability Vendor: Shenzhen Xingmeng Qihang Media Co., Ltd. Guangzhou Hefeng Automation Technology Co., Ltd. Product web page: http://www.howfor.com Affected...
Exploit for Improper Input Validation in Microsoft
cve-2020-1350 Bash Proof-of-Concept PoC script to exploit SI...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2020-1762)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Palo Alto Networks PAN-OS 7.1.x < 8.1.14 / 8.0.x < 8.1.14 / 8.1.x < 8.1.14 / 9.0.x < 9.0.7 / 9.1.x < 9.1.1 Vulnerability
The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 8.1.14 or 8.0.x prior to 8.1.14 or 8.1.x prior to 8.1.14 or 9.0.x prior to 9.0.7 or 9.1.x prior to 9.1.1. It is, therefore, affected by a vulnerability. - An external control of filename vulnerability in the...
snakeyaml: Billion laughs attack via alias feature
The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...
CVE-2020-10136
CVE-2020-10136 concerns the IP Encapsulation within IP (IPIP) decapsulation path that decapsulates and routes IP-in-IP traffic without validation of the source network packets, enabling spoofing and potential access-control bypass and other unexpected behavior. The NVD entry assigns a MEDIUM seve...
IP-in-IP protocol routes arbitrary traffic by default
Overview IP Encapsulation within IP RFC2003 IP-in-IP can be abused by an unauthenticated attacker to unexpectedly route arbitrary network traffic through a vulnerable device. Description IP-in-IP encapsulation is a tunneling protocol specified in RFC 2003 that allows for IP packets to be...
Description of Update Rollup 2 for System Center 2012 R2 Data Protection Manager
Description of Update Rollup 2 for System Center 2012 R2 Data Protection Manager This update rollup was re-released on May 20, 2014 to resolve a "DPMAMService" crash that occurred if the original update KB 2958100 was applied. If you already installed Update Rollup 2 on your Windows Server 2003...
Oracle Hospitality RES 3700 5.7 - Remote Code Execution Exploit
Exploit for java platform in category web applications Exploit Title: Oracle Hospitality RES 3700 5.7 - Remote Code Execution Exploit Author: Walid Faour Vendor Homepage: https://www.oracle.com/industries/food-beverage/products/res-3700/ Software Link: N/A Available to customers Version: \ ...