Preventing Automatic Updates on Windows 10 for Unidesk Desktops

If there are issues with your Desktops after Windows 10 Automatic Updates, you can disable automatic updates of Unidesk Desktops using a local GPO set on the Gold image or Operating System Layer...

Ipswitch WhatsUp Gold < 16.5.0 WrFreeFormText.asp sUniqueID Parameter Blind SQLi (credentialed)

According to its self-reported version number, the Ipswitch WhatsUp Gold application installed on the remote host is prior to 16.5.0. It is, therefore, affected by a SQL injection vulnerability within file WrFreeFormText.asp due to improper sanitization of user-supplied input to the 'sUniqueID'...

gold-gay.com XSS vulnerability

Vulnerable URL: http://gold-gay.com/s.php?search="&Submit.x;=17&Submit.y;=14 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 48321 VIP website status:| Yes Check gold-gay.com SSL...

Gold Christmas Tree - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Gold Christmas Tree published at the 'play' market has multiple vulnerabilities...

Panda Gold Protection 2014 (7.01.01) Privilege Escalation Vulnerability (CVE-2014-3450) - Windows

Panda Products is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Panda Gold Protection 2014 Privilege Escalation Vulnerability (CVE-2014-3450) - Windows

Panda Gold Protection 2014 is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WP eCommerce <= 3.11.3 - SQL Injection in sessionid

From vendor: "This vulnerability only affects users who use eWay as their payment gateway, have Gold Cart activated, and are using the as-of-yet-unreleased Theme Engine 2.0. We believe the number of users affected is likely close to zero, due to these conditions – but still, we highly recommend...

CVE-2016-7226

Virtual Hard Disk Driver in Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation of Privilege Vulnerability."...

CVE-2016-7248

CVE-2016-7248 affects Microsoft Windows Video Control in Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 (versions 1507–1607). The vulnerability allows remote attackers to execute arbitrary code by rendering a crafted file; the issue stems from the Microsoft Video Co...

Ipswitch WhatsUp Gold SQL Injection Vulnerability (CNVD-2016-10073)

Ipswitch WhatsUp Gold is a suite of unified infrastructure and application monitoring software from Ipswitch USA. A SQL injection vulnerability exists in the sUniqueID parameter of the WrFreeFormText.asp script in Ipswitch WhatsUp Gold version 16.4.1, which can be exploited by remote attackers to...

Remote code execution

Video Control in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Video Control Remote Code Execution Vulnerability."...

CVE-2016-7188

The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."...

CVE-2016-1000000

Ipswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection...

CVE-2016-1000000

Ipswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection...

Sql injection

Ipswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection...

CVE-2016-1000000

CVE-2016-1000000 concerns a SQL injection in Ipswitch WhatsUp Gold, specifically in the web page WrFreeFormText.asp via the sUniqueID parameter (and related fields). The vulnerability is described as a Blind SQL Injection in version 16.4.1, with potential for an authenticated, remote attacker to ...

CVE-2016-1000000

Ipswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection...

PT-2016-4489 · Ipswitch · Ipswitch Whatsup Gold

Name of the Vulnerable Software and Affected Versions: Ipswitch WhatsUp Gold version 16.4.1 Description: The issue is related to a Blind SQL Injection in the sUniqueID parameter of the WrFreeFormText.asp page. This allows for potential unauthorized access to database information. Recommendations:...

Microsoft Windows Kernel Local Information Disclosure Vulnerability (CNVD-2016-07923)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Secure Kernel Mode is one of the kernel function modules. An information disclosure vulnerability exists in the kernel mode functionality in Microsoft Windows 10 Gold and 1511 versions, which stems fr...

Microsoft Windows Denial of Service Vulnerability (CNVD-2016-07748)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A denial of service vulnerability exists in Microsoft Windows 10 Gold and 1511 versions. An attacker can exploit this vulnerability to cause the target system to stop responding, resulting in a denial o...