1526 matches found
Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2016-00254)
Microsoft Windows is a popular operating system. Microsoft Windows fails to properly load DLL files, allowing attackers to exploit the vulnerability to build special files that can be tricked into being parsed by users to elevate privileges...
CVE-2016-0014
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL...
Microsoft Windows DLL Load Privilege Elevation Vulnerability
Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows. Due to the program failing to properly validate input before loading a dynamic link library DLL file. A local attacker could exploit...
Microsoft Windows Excel Viewer Remote Code Execution Vulnerability (3124585)
This host is missing a critical security update according to Microsoft Bulletin MS16-004. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Hacking Team Android browser attacks during the vulnerability analysis Stage4-vulnerability warning-the black bar safety net
A, vulnerability introduction: Hacking team of the year broke out for android4. 0. x-4.3. x android browser vulnerabilities to attack the use of the code. The exploit code, by successive use of a plurality of browser and kernel vulnerabilities, is done through Javascript to the virtual memory wri...
Microsoft Windows Excel Viewer Remote Code Execution Vulnerability (3104540)
This host is missing an important security update according to Microsoft Bulletin MS15-116. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Siemens APOGEE Insight Database Conversion Tool DLL Hijacking Vulnerability
Insight is the monitoring and configuration software used in the Siemens building automation system APOGEE. A DLL hijacking vulnerability exists in the Siemens APOGEE Insight Database Conversion Tool. Because Insight's Database Conversion component, the Convert.exe program, does not securely load...
Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities (3096440)
This host is missing an important security update according to Microsoft Bulletin MS15-110. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Cisco AnyConnect Secure Mobility Client Search Path Handling Vulnerability
The Cisco AnyConnect Secure Mobility Client is a set of next-generation VPN clients. The client enables remote users to securely connect to Cisco ASA 5500 devices over SSL VPN. The 'CMainThread::launchDownloader' function in the vpndownloader.exe file of the Cisco AnyConnect Secure Mobility Clien...
Microsoft RDP DLL Loading Remote Code Execution Vulnerability
Microsoft Remote Desktop Protocol RDP, Remote Desktop Protocol is an American Microsoft Microsoft company based on the Windows system in the multi-channel multi-channel protocol, it can be remotely connected to and control the server or computer. A remote code execution vulnerability exists in...
Microsoft Windows Untrusted Search Path Vulnerability
Microsoft Windows is a series of operating systems designed for personal computer and server users from the American company Microsoft. An untrustworthy search path vulnerability exists in Microsoft Windows. Allows local users to gain privileges via a Trojan horse DLL in the current working...
Microsoft Excel Untrusted Search Path Vulnerability
Microsoft Excel is one of the components of Microsoft office, the office software of Microsoft Corporation Microsoft. An untrusted search path vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel Viewer 2007 SP3,Office Compatibility Pack SP3 allows local users to gain privileges via a...
Microsoft Office Compatibility Pack Multiple Vulnerabilities (3072620)
This host is missing an important security update according to Microsoft Bulletin MS15-070. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS15-069: Description of the security update for Windows: July 14, 2015 (KB3061512)
None None...
Microsoft Excel DLL Remote Code Execution (MS15-070; CVE-2015-2378)
A remote code execution vulnerability exists in Microsoft Excel. The vulnerability is due to the way that Microsoft Excel improperly handles the loading of dynamic link library DLL files. An attacker could trigger this flaw by convincing a victim to load a malicious DLL file...
Microsoft Windows Kernel DLL Path Error Elevation of Privilege Vulnerability
Microsoft Windows is a popular operating system. A security vulnerability in the Microsoft windows kernel allows a local attacker to place a specially crafted dll file in a system directory or on a network share, which can be loaded by the target user to execute arbitrary code...
Schneider Electric OPC Factory Server DLL Load Arbitrary Code Execution Vulnerability
Schneider Electric OPC Factory Server OFS is a set of data communication editing software. The software supports access to important information, open page design, transparent architecture and interoperability to enable good processes and communication. A security vulnerability exists in the...
WordPress Link Library Plugin <= 5.0.8 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Vulnerable parameter "id". Solution Update the plugin...