30334 matches found
Microsoft Windows Print Spooler Components Access Control Error Vulnerability
Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Windows Print Spooler Components. The following products and editions are affected:Windows Server 2012 R2 Server Core...
Microsoft Windows Update Stack Security Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Windows Update Stack. The following products and editions are affected:Windows Server, version 20H2 Server Core Installation,Windows 10 Version 20H2...
Microsoft Windows Remote Procedure Call Runtime Security Vulnerability
Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Remote Procedure Call Runtime. The following products and editions are affected:Windows...
KB4598287: Windows Server 2008 January 2021 Security Update
The remote Windows host is missing security update 4598287 or cumulative update 4598288. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions...
KB4598289: Windows 7 and Windows Server 2008 R2 January 2021 Security Update
The remote Windows host is missing security update 4598289 or cumulative update 4598279. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Microsoft Graphics Component Information Disclosure Vulnerability
Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Graphics Component. The following products and versions are affected:Windows Server 2016 Server Core installation,Windows Server 2016,Windows 10...
Microsoft Windows GDI+ Information Disclosure Vulnerability
Microsoft Windows GDI+ is a graphical device interface for the Windows operating system from Microsoft USA. The software is part of the .NET Framework and is responsible for drawing graphical images and displaying information on screens and printers. An information disclosure vulnerability exists...
Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB4598500)
Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 KB4598500 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1...
Metasploit Wrap-Up
In case you missed it, this past weekend the Metasploit team hosted the latest Metasploit CTF. We saw 1903 users register in this round and some excellent writeups have been published on what they found. If you participated but haven’t had a chance to fill out our feedback survey you can find it...
December 8, 2020—KB4592471 (Monthly Rollup)
None None...
KB4592504: Windows Server 2008 December 2020 Security Update
The remote Windows host is missing security update 4592504 or cumulative update 4592498. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2020-17098 C Tenable Network...
KB4592503: Windows 7 and Windows Server 2008 R2 December 2020 Security Update
The remote Windows host is missing security update 4592503 or cumulative update 4592471. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2020-17098, CVE-2020-17140 - ...
Rejetto HttpFileServer 2.3.x Remote Command Execution
Exploit Title: Rejetto HttpFileServer 2.3.x - Remote Command Execution 3 Google Dork: intext:"httpfileserver 2.3" Date: 28-11-2020 Remote: Yes Exploit Author: Óscar Andreu Vendor Homepage: http://rejetto.com/ Software Link: http://sourceforge.net/projects/hfs/ Version: 2.3.x Tested on: Windows...
Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: December 8, 2020
Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: December 8, 2020 Applies to Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service...
ZeroLogon - Netlogon Elevation of Privilege Exploit
Exploit Title: ZeroLogon - Netlogon Elevation of Privilege Date: 2020-10-04 Exploit Author: West Shepherd Vendor Homepage: https://www.microsoft.com Version: Microsoft Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2 Tested on: Microsof...
Microsoft Windows Multiple Vulnerabilities (KB4586827)
This host is missing a critical security update according to Microsoft KB4586827 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Internet Explorer help
None None...
November 10, 2020—KB4586827 (Monthly Rollup)
None None...
November 10, 2020—KB4586805 (Security-only update)
None None...
KB4586817: Windows Server 2008 November 2020 Security Update
The Windows installation on the remote host is missing security update 4586781. It is, therefore, affected by multiple vulnerabilities. Please review the vendor advisory for more details. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from t...