CVE-2017-8450

CVE-2017-8450 concerns Elastic Stack: Elastic Kibana X-Pack 5.1.1. The issue is an information-disclosure vulnerability where document and field level security were not properly enforced for multi-search and multi-get requests, potentially allowing users without access to certain documents/fields...

CVE-2017-8449

CVE-2017-8449 affects Elastic X-Pack Security 5.2.x (Elasticsearch/Kibana). When field-level security rules for the same index are merged with a mix of grant and exclude rules, a user could see more fields than permitted. This has been documented by SUSE and OpenVAS plugins, with CVSS base scores...

CVE-2017-8451

Kibana with X-Pack is affected by CVE-2017-8451, exposing an open redirect on the login page in versions before 5.3.1. The vulnerability details and exact remediation are not fully described in the provided documents; upgrade information beyond “before 5.3.1” is not specified here.

CVE-2016-10364

With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any authenticated user could make requests to those services regardless of their own permissions...

CVE-2016-10364

CVE-2016-10364 affects Elastic Kibana with X-Pack. The vulnerability is described as an improper authentication/insufficient access restriction in Kibana 5.0.0 and 5.0.1, where any authenticated user could issue requests to the advanced settings and short URL services regardless of permissions. T...

Microsoft Project Server 2013 XSS Vulnerability (KB3203399)

This host is missing an important security update according to Microsoft KB3203399 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Office Compatibility Pack RCE Vulnerability (KB3127894)

This host is missing an important security update according to Microsoft Update KB3127894. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft SharePoint Server Multiple RCE Vulnerabilities (KB3172445)

This host is missing an important security update according to Microsoft KB3172445 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft SharePoint Enterprise Server Remote Code Execution Vulnerability (KB3203430)

This host is missing an important security update according to Microsoft KB3203430. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Web-camera redirection not working with Windows N and KN editions

Customers have reported to Citrix Technical Support that web-cameras are not being redirected into ICA sessions if the VDA is of type: Windows 7 N, Windowns 8 N or Windows 10 N or KN. What is Windows N and KN? https://support.microsoft.com/en-ie/help/11529/what-is-a-windows-7-n-edition- Labeled "...

Microsoft Office Web Apps 2010 Multiple Vulnerabilities (KB3203466)

This host is missing an important security update according to Microsoft KB3203466 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Windows LNK Remote Code Execution Vulnerability (KB4021903)

This host is missing a critical security update according to Microsoft KB4021903 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Office 2013 Service Pack 1 Multiple Vulnerabilities (KB3203386)

This host is missing an important security update according to Microsoft KB3203386 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB4022722)

This host is missing a critical security update according to Microsoft KB4022722 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows TDX Elevation of Privilege Vulnerability (KB4021923)

This host is missing an important security update according to Microsoft KB4021923 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Outlook 2007 Service Pack 3 Multiple Vulnerabilities (KB3191898)

This host is missing an important security update according to Microsoft KB3191898 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Outlook 2013 Service Pack 1 Multiple Vulnerabilities (KB3191938)

This host is missing an important security update according to Microsoft KB3191938 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft SharePoint Enterprise Server Excel Services Multiple Vulnerabilities (KB3203390)

This host is missing an important security update according to Microsoft KB3203390 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Office 2007 Service Pack 3 Multiple Vulnerabilities (KB3203436)

This host is missing an important security update according to Microsoft KB3203436 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office Remote Code Execution Vulnerability (KB3118304)

This host is missing an important security update according to Microsoft KB3118304 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...