142 matches found
CVE-2019-0948 Windows Event Viewer Information Disclosure Vulnerability
...
CVE-2019-0948
CVE-2019-0948 is an information-disclosure vulnerability in Windows Event Viewer (eventvwr.msc) where XML input containing an external entity reference is improperly parsed. An authenticated user can be persuaded to import a crafted XML file, allowing an attacker to read arbitrary files via an XM...
Microsoft Windows Multiple Vulnerabilities (KB4503292)
This host is missing a critical security update according to Microsoft KB4503292 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Windows Event Viewer Information Disclosure Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Event Viewer is one of the event viewers. An information disclosure vulnerability...
June 11, 2019—KB4503276 (Monthly Rollup)
None None...
June 11, 2019—KB4503290 (Security-only update)
None None...
June 11, 2019—KB4503287 (Security-only update)
None None...
June 11, 2019—KB4503293 (OS Build 18362.175)
None None...
Windows Event Viewer Information Disclosure Vulnerability
An information disclosure vulnerability exists in the Windows Event Viewer eventvwr.msc when it improperly parses XML input containing a reference to an external entity. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity XXE declaration...
June 11, 2019—KB4503291 (OS Build 10240.18244)
None None...
KLA11493 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...
KB4503291: Windows 10 June 2019 Security Update
The remote Windows host is missing security update 4503291. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC. An attacker who successfully exploited this...
KB4503293: Windows 10 Version 1903 June 2019 Security Update
The remote Windows host is missing security update 4503293. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges...
KLA11874 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...
Microsoft Windows Multiple Vulnerabilities (KB4489878)
This host is missing a critical security update according to Microsoft KB4489878 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
March 12, 2019—KB4489891 (Monthly Rollup)
None None...
March 12, 2019—KB4489884 (Security-only update)
None None...
February 12, 2019—KB4486563 (Monthly Rollup)
None None...