Microsoft Windows CVE-2020-0635 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Window...

Microsoft Windows Search Indexer CVE-2020-0631 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for...

Microsoft Windows Search Indexer CVE-2020-0625 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for...

Microsoft Windows Remote Desktop Protocol CVE-2020-0610 Remote Code Execution Vulnerability

Description Microsoft Windows Remote Desktop Protocol is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition. Technologies...

Microsoft Windows GDI+ Component CVE-2020-0643 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

KB4534288: Windows Server 2012 January 2020 Security Update

The remote Windows host is missing security update 4534288 or cumulative update 4534283. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target...

CVE-2012-4750

The only concrete details available concern Ezhometech EzServer 7.0. A memory corruption/Code Execution vulnerability stems from memcpy being fed an uncontrolled size while processing AMF requests in the RTMP path after the handshake, enabling a remote attacker to potentially crash or execute cod...

CVE-2012-4761

A Privilege Escalation vulnerability exists in the unquoted Service Binary in SDPAgent or SDBAgent in Safend Data Protector Agent 3.4.5586.9772, which could let a local malicious user obtain privileges...

CVE-2012-4761

Summary: CVE-2012-4761 affects Safend Data Protector Agent 3.4.5586.9772. The vulnerability arises from an unquoted Service Binary for SDPAgent/SDBAgent, enabling a local attacker to escalate privileges. What’s vulnerable: the Windows service path containing spaces (SDBAgent.exe/SDPAgent.exe) and...

CVE-2012-4760

CVE-2012-4760 and CVE-2012-4761 pertain to Safend Data Protector Agent 3.4.5586.9772. The issues involve the SDBAgent/SDPAgent components: (1) WRITE_DAC privileges granted to all local users on the SDBAgent.exe file, enabling a local user to rewrite ACLs and potentially gain full local admin priv...

CVE-2012-4603

Citrix XenApp Online Plug-in for Windows 12.1 and earlier, and Citrix Receiver for Windows 3.2 and earlier could allow remote attackers to execute arbitrary code by convincing a target to open a specially crafted file from an SMB or WebDAV fileserver...

CVE-2012-3822

creationtimestamp| type| source ---|---|--- 2020-01-10 20:32:52+00:00| seen| https://t.me/cibsecurity/9120...

CVE-2012-3823

creationtimestamp| type| source ---|---|--- 2020-01-10 20:32:51+00:00| seen| https://t.me/cibsecurity/9119...

CVE-2012-4603

CVE-2012-4603 affects Citrix XenApp Online Plug-in for Windows (12.1 and earlier) and Citrix Receiver for Windows (3.2 and earlier). Reported vulnerability allows remote code execution when a user opens a specially crafted file from an SMB or WebDAV fileserver. The initial description does not sp...

CVE-2012-4603

Citrix XenApp Online Plug-in for Windows 12.1 and earlier, and Citrix Receiver for Windows 3.2 and earlier could allow remote attackers to execute arbitrary code by convincing a target to open a specially crafted file from an SMB or WebDAV fileserver...

CVE-2012-4284

A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHelper binary, which could let a remote malicious user execute arbitrary code...

CVE-2012-3821

A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field...

DSquare Exploit Pack: D2SEC_VISCOSITY

Name| d2secviscosity ---|--- CVE| CVE-2012-4284 Exploit Pack| D2ExploitPack Description| d2secviscosity Notes|...

CVE-2012-3821

CVE-2012-3821 affects Arial Software Campaign Enterprise prior to or up to version 11.0.551, with a Security Bypass in the activate.asp page that could allow a remote attacker to modify the SerialNumber field. The trusted impact stated in sources is that this bypass enables unauthorized modificat...

CVE-2012-4284

A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHelper binary, which could let a remote malicious user execute arbitrary code...