98 matches found
Microsoft Windows Multiple Vulnerabilities (KB4103718)
This host is missing a critical security update according to Microsoft KB4103718 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4103725)
This host is missing a critical security update according to Microsoft KB4103725 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4103723)
This host is missing a critical security update according to Microsoft KB4103723 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-8174
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka “Windows VBScript Engine Remote Code Execution Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1,...
Microsoft Windows Multiple Vulnerabilities (KB4103731)
This host is missing a critical security update according to Microsoft KB4103731 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
May Patch Tuesday Fixes Two Bugs Under Active Attack
Microsoft’s May Patch Tuesday fixes include two critical remote code-execution vulnerabilities, both of which are under active attack. The most serious of the two is tied to a Windows 10 VBScript engine and can be triggered when a victim visits a malicious website. “A user need only visit a...
Microsoft Patch Tuesday, May 2018 Edition
Microsoft today released a bundle of security updates to fix at least 67 holes in its various Windows operating systems and related software, including one dangerous flaw that Microsoft warns is actively being exploited. Meanwhile, as it usually does on Microsoft's Patch Tuesday -- the second...
May 2018 Patch Tuesday – Medium Weight, However One Active Exploit Needs Attention
This May's Patch Tuesday has quite a few Microsoft fixes for both the OS and browsers. In all, 67 unique CVEs are addressed in 17 KB articles, with 21 CVEs marked Critical. 32 of these CVEs reference Remote Code Execution, 19 of which are Critical. Those who use Hyper-V have some updates to pay...
KB4103731: Windows 10 Version 1703 May 2018 Security Update
The remote Windows host is missing security update 4103731. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard. An attacker who successfully exploited this vulnerability...
Microsoft Internet Explorer 11.371.16299.0 (Windows 10) - Denial Of Service
Microsoft Internet Explorer 11.371.16299.0 Windows 10 - Denial Of Service ''' + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-INTERNET-EXPLORER-Win-10-DENIAL-OF-SERVICE.txt + ISR: ApparitionSec Vendor: =======...
Microsoft Internet Explorer VBScript Engine CVE-2018-8174 Arbitrary Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to an unspecified arbitrary code-execution vulnerability. Attackers can exploit this vulnerability to execute arbitrary code in the context of the affected application. Note: This issue was previously titled 'Microsoft Internet Explorer Unspecified...
CVE-2017-8174
Huawei USG6300 V100R001C30SPC300 and USG6600 with software of V100R001C30SPC500,V100R001C30SPC600,V100R001C30SPC700,V100R001C30SPC800 have a weak algorithm vulnerability. Attackers may exploit the weak algorithm vulnerability to crack the cipher text and cause confidential information leaks on th...
CVE-2017-8174
CVE-2017-8174 affects Huawei USG6300/USG6600 firewall lines (firmware V100R001C30SPC300 and V100R001C30SPC500/600/700/800). The issue is a weak algorithm vulnerability that could allow an attacker to crack ciphertext and cause confidential information leaks on transmission links. Affected product...
CVE-2014-8174
eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files...
CVE-2014-8174
eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files...
CVE-2014-8174
CVE-2014-8174 relates to Red Hat eDeploy where an attacker can achieve remote code execution by abusing eDeploy’s handling of HTTP downloads. The linked sources explicitly describe eDeploy as a tool that facilitates remote code execution when files are downloaded over HTTP, enabling an attacker t...
SuSE 10 Security Update : gtk2 (ZYPP Patch Number 8174)
The following issue has been fixed : - Specially crafted GIF and XBM files could have crashed gtk2. CVE-2012-2370 / CVE-2011-2485 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
