Lucene search
K

604 matches found

Microsoft CVE
Microsoft CVE
added 2019/11/12 8:0 a.m.46 views

NetLogon Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel. An attacker who successfully exploited the vulnerability could downgrade aspects of the connection allowing for further modification of the transmission. To exploit the...

8.1CVSS2.9AI score0.02574EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2019/11/12 8:0 a.m.30 views

Microsoft Windows Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages. To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access...

9.9CVSS2.9AI score0.06112EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2019/11/12 12:0 a.m.2 views

PT-2019-3880

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A security feature bypass vulnerability exists in Microsoft Windows, related to the NETLOGON message, allowing an attacker to obtain the session key and sign messages. This can be...

9.9CVSS5.8AI score0.06112EPSS
Exploits0References8
Symantec
Symantec
added 2019/11/12 12:0 a.m.53 views

Microsoft Windows Netlogon CVE-2019-1424 Security Bypass Vulnerability

Description Microsoft Windows Netlogon is prone to a security bypass vulnerability. Successfully exploiting this issue may allow attackers to bypass certain security restrictions and perform unauthorized actions by conducting a man-in-the-middle attack. This may lead to other attacks. Technologie...

0.7AI score0.02574EPSS
Exploits0Affected Software3
Kaspersky
Kaspersky
added 2019/11/12 12:0 a.m.274 views

KLA11608 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, cause denial of service, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation...

9.9CVSS9.9AI score0.75859EPSS
Exploits33References87
Kaspersky
Kaspersky
added 2019/11/12 12:0 a.m.56 views

KLA11871 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, obtain sensitive information, bypass security restrictions. Below is a complete list of...

9.9CVSS10AI score0.75859EPSS
Exploits32References60
Tenable Nessus
Tenable Nessus
added 2019/11/12 12:0 a.m.62 views

KB4525232: Windows 10 November 2019 Security Update

The remote Windows host is missing security update 4525232. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system...

9.9CVSS8.2AI score0.75859EPSS
Exploits32References46
Tenable Nessus
Tenable Nessus
added 2019/11/12 12:0 a.m.68 views

KB4525233: Windows 7 and Windows Server 2008 R2 November 2019 Security Update

The remote Windows host is missing security update 4525233 or cumulative update 4525235. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an...

9.9CVSS8.2AI score0.75859EPSS
Exploits32References40
Tenable Nessus
Tenable Nessus
added 2019/11/12 12:0 a.m.65 views

KB4523205: Windows 10 Version 1809 and Windows Server 2019 November 2019 Security Update

The remote Windows host is missing security update 4523205. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel. An attacker who successfully exploited the vulnerability...

9.9CVSS8.2AI score0.75859EPSS
Exploits36References54
Tenable Nessus
Tenable Nessus
added 2019/11/12 12:0 a.m.60 views

KB4525237: Windows 10 Version 1803 November 2019 Security Update

The remote Windows host is missing security update 4525237. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel. An attacker who successfully exploited the vulnerability...

9.9CVSS8.2AI score0.75859EPSS
Exploits36References54
Tenable Nessus
Tenable Nessus
added 2019/11/12 12:0 a.m.76 views

KB4525236: Windows 10 Version 1607 and Windows Server 2016 November 2019 Security Update

The remote Windows host is missing security update 4525236. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating...

9.9CVSS8.2AI score0.75859EPSS
Exploits32References46
Tenable Nessus
Tenable Nessus
added 2019/11/12 12:0 a.m.69 views

KB4525253: Windows Server 2012 November 2019 Security Update

The remote Windows host is missing security update 4525253 or cumulative update 4525246. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an...

9.9CVSS8.3AI score0.75859EPSS
Exploits32References42
Tenable Nessus
Tenable Nessus
added 2019/11/12 12:0 a.m.95 views

KB4524570: Windows 10 Version 1903 and Windows 10 Version 1909 November 2019 Security Update

The remote Windows host is missing security update 4524570. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel. An attacker who successfully exploited the vulnerability...

9.9CVSS8.2AI score0.75859EPSS
Exploits36References54
Microsoft KB
Microsoft KB
added 2019/08/19 12:0 a.m.6 views

July 16, 2019—KB4507465 (OS Build 16299.1296 )

July 16, 2019—KB4507465 OS Build 16299.1296 Reminder: March 12 and April 9 will be the last two Delta updates for Windows 10, version 1709. Security and quality updates will continue to be available via the express and full cumulative update packages. For more information on this change please...

6.8AI score
Exploits0
Microsoft KB
Microsoft KB
added 2019/08/13 12:0 a.m.4 views

July 16, 2019—KB4507467 (OS Build 15063.1955)

July 16, 2019—KB4507467 OS Build 15063.1955 Reminder: March 12 and April 9 will be the last two Delta updates for Windows 10, version 1703. Security and quality updates will continue to be available via the express and full cumulative update packages. For more information on this change please...

6.7AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2019/06/27 12:0 a.m.3 views

The vulnerability of the Netlogon service in the Windows operating system allows a hacker to circumvent existing security restrictions.

The vulnerability of the Netlogon service in the Windows operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially crafted request...

8.5CVSS5.9AI score0.15115EPSS
Exploits2References3
NVD
NVD
added 2019/06/12 2:29 p.m.26 views

CVE-2019-1019

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages. To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access...

8.5CVSS7.7AI score0.15115EPSS
Exploits2References3
OSV
OSV
added 2019/06/12 2:29 p.m.2 views

CVE-2019-1019

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages. To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access...

8.5CVSS7.4AI score0.15115EPSS
Exploits2References3
CVE
CVE
added 2019/06/12 1:49 p.m.169 views

CVE-2019-1019

CVE-2019-1019 is a Windows security feature bypass in NTLM authentication that allows bypassing validation on NETLOGON messages, enabling an attacker to access a machine with their original user privileges after sending a crafted authentication request. Connected material confirms related exploit...

8.5CVSS7.1AI score0.15115EPSS
Exploits2References3Affected Software8
Cvelist
Cvelist
added 2019/06/12 1:49 p.m.35 views

CVE-2019-1019 Microsoft Windows Security Feature Bypass Vulnerability

...

8.5CVSS7.6AI score0.15115EPSS
Exploits2References1
Rows per page
Query Builder