30334 matches found
Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017
Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017 Summary An information disclosure vulnerability exists when the Windows kernel fails to correctly initialize a memory address. An attacker who successfully exploits this...
Microsoft Windows Media Player CVE-2017-11768 Local Information Disclosure Vulnerability
Description Microsoft Windows Media Player is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Window...
Microsoft Windows Kernel CVE-2017-11831 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
Microsoft Windows Kernel CVE-2017-11880 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
Windows 2008 November 2017 Multiple Security Updates
The remote Windows host is missing multiple security updates released on 2017/11/14. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. CVE-2017-11880 - An information disclosu...
Microsoft Windows Kernel CVE-2017-11847 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based...
Microsoft Windows Kernel CVE-2017-11851 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
Windows 7 and Windows Server 2008 R2 November 2017 Security Updates
The remote Windows host is missing security update 4048960 or cumulative update 4048957. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a...
Windows Server 2008 Defense in Depth (KB4042723)
This host is missing an important security update according to Microsoft KB4042723. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
CVE-2008-7319
The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments e.g., invalid hostnames containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used...
CVE-2008-7319
The CVE-2008-7319 issue affects the Perl Net::Ping::External extension (up to version 0.15) where External.pm does not properly sanitize inputs containing shell metacharacters before using backticks, enabling shell command injection and arbitrary command execution when untrusted input is supplied...
Sql injection
Vastal I-Tech Agent Zone aka The Real Estate Script allows SQL Injection in searchCommercial.php via the propertytype, city, or postedby parameter, or searchResidential.php via the propertytype, city, or bedroom parameter, a different vulnerability than CVE-2008-3951, CVE-2009-3497, and...
Sql injection
ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604...
Sql injection
Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'productid' to addtocart.php, a different vulnerability than CVE-2008-4461...
Mura CMS < 6.2 - Server-Side Request Forgery / XML External Entity Injection Vulnerabilities
Exploit for unknown platform in category web applications Exploit Title: Mura CMS before 6.2 SSRF + XXE Date: 30-10-2017 Exploit Author: Anthony Cole Vendor Homepage: http://www.getmura.com/ Version: before 6.2 Contact: http://twitter.com/acole76 Website: http://twitter.com/acole76 Tested on:...
October 2017 Security and Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008 SP2 (KB 4043768)
October 2017 Security and Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008 SP2 KB 4043768 Notice This update has been released as part of the October 2017 Preview of Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008...
October 2017 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB 4043766)
October 2017 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 7 SP1 and Windows Server 2008 R2 SP1 KB 4043766 Notice This update has been released as part of the October 2017 Preview of Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1,...
Description of the Windows Server 2008 Windows wireless WPA group key reinstallation vulnerability: October 16, 2017
Description of the Windows Server 2008 Windows wireless WPA group key reinstallation vulnerability: October 16, 2017 Summary A spoofing vulnerability exists in the Windows implementation of wireless networking. An attacker who successfully exploits this vulnerability could potentially replay...
October 2017 Preview of Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008 SP2 (KB 4042201)
October 2017 Preview of Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008 SP2 KB 4042201 View products that this article applies to. Summary This article lists the Quality Rollup for the .NET Framework 2.0 SP2, 4.5.2, and 4.6 for Windows Server 2008...
CVE-2017-11813
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Memo...