30342 matches found
CVE-2017-11846
CVE-2017-11846 affects ChakraCore and Edge/IE scripting engine in Windows 7 SP1, Windows Server 2008/2008 R2, 8.1, 10 (various builds), and Windows Server 2012/2012 R2, with memory handling in the scripting engine leading to memory corruption. The vulnerability could allow an attacker to execute ...
Windows Information Disclosure Vulnerability (KB4049164)
This host is missing an important security update according to Microsoft KB4049164 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Windows Search Denial of Service Vulnerability (KB4047211)
This host is missing an important security update according to Microsoft KB4047211 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Windows Information Disclosure Vulnerability (KB4046184)
This host is missing an important security update according to Microsoft KB4046184 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Description of the security update for the Windows Search denial of service vulnerability in Windows Server 2008: November 14, 2017
Description of the security update for the Windows Search denial of service vulnerability in Windows Server 2008: November 14, 2017 Summary A denial of service vulnerability exists when Windows Search improperly handles objects in memory. An attacker who successfully exploits the vulnerability...
Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017
Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017 Summary An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To learn more about the vulnerability, go to...
Description of the security update for vulnerabilities in Windows Server 2008: November 14, 2017
Description of the security update for vulnerabilities in Windows Server 2008: November 14, 2017 Summary To learn more about the vulnerabilities, go to the Security Update Guide. More Information Important If you install a language pack after you install this update, you must reinstall this updat...
Description of the security update for the Windows Media Player Information Disclosure Vulnerability in Windows Server 2008: December 12, 2017
Description of the security update for the Windows Media Player Information Disclosure Vulnerability in Windows Server 2008: December 12, 2017 Summary An information vulnerability exists when Windows Media Player improperly discloses file information. Successful exploitation of the vulnerability...
Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017
Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017 Summary An information disclosure vulnerability exists when the Windows kernel fails to correctly initialize a memory address. An attacker who successfully exploits this...
Microsoft Windows Kernel CVE-2017-11831 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
Microsoft Windows Media Player CVE-2017-11768 Local Information Disclosure Vulnerability
Description Microsoft Windows Media Player is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Window...
Microsoft Windows Kernel CVE-2017-11880 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
Windows 2008 November 2017 Multiple Security Updates
The remote Windows host is missing multiple security updates released on 2017/11/14. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. CVE-2017-11880 - An information disclosu...
Microsoft Windows Kernel CVE-2017-11847 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based...
Microsoft Windows Kernel CVE-2017-11851 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
Windows 7 and Windows Server 2008 R2 November 2017 Security Updates
The remote Windows host is missing security update 4048960 or cumulative update 4048957. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a...
Windows Server 2008 Defense in Depth (KB4042723)
This host is missing an important security update according to Microsoft KB4042723. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
CVE-2008-7319
The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments e.g., invalid hostnames containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used...
CVE-2008-7319
The CVE-2008-7319 issue affects the Perl Net::Ping::External extension (up to version 0.15) where External.pm does not properly sanitize inputs containing shell metacharacters before using backticks, enabling shell command injection and arbitrary command execution when untrusted input is supplied...
Sql injection
Vastal I-Tech Agent Zone aka The Real Estate Script allows SQL Injection in searchCommercial.php via the propertytype, city, or postedby parameter, or searchResidential.php via the propertytype, city, or bedroom parameter, a different vulnerability than CVE-2008-3951, CVE-2009-3497, and...