4440 matches found
VulnCheck KEV: CVE-2018-8621
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2012, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8477, CVE-2018-8622...
VulnCheck KEV: CVE-2018-8477
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012,...
Microsoft Windows Multiple Vulnerabilities (KB4598285)
This host is missing a critical security update according to Microsoft KB4598285 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
January 12, 2021—KB4598285 (Monthly Rollup)
None None...
Microsoft Windows Kernel Elevation of Privilege Vulnerability (CVE-2020-17008)
Microsoft Windows is prone to an elevation of privilege vulnerability. This VT has been deprecated and replaced by the following VTs covering the new CVE-2021-1648: - OID: 1.3.6.1.4.1.25623.1.0.817573 - OID: 1.3.6.1.4.1.25623.1.0.817569 - OID: 1.3.6.1.4.1.25623.1.0.817568 SPDX-FileCopyrightText:...
KB4598289: Windows 7 and Windows Server 2008 R2 January 2021 Security Update
The remote Windows host is missing security update 4598289 or cumulative update 4598279. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Microsoft Windows GDI+ Information Disclosure Vulnerability
Microsoft Windows GDI+ is a graphical device interface for the Windows operating system from Microsoft USA. The software is part of the .NET Framework and is responsible for drawing graphical images and displaying information on screens and printers. An information disclosure vulnerability exists...
Metasploit Wrap-Up
In case you missed it, this past weekend the Metasploit team hosted the latest Metasploit CTF. We saw 1903 users register in this round and some excellent writeups have been published on what they found. If you participated but haven’t had a chance to fill out our feedback survey you can find it...
Microsoft Windows Multiple Vulnerabilities (KB4592484)
This host is missing a critical security update according to Microsoft KB4592484 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
December 8, 2020—KB4592484 (Monthly Rollup)
None None...
Password is not masked in the Document Service table in Microsoft Dynamics NAV 2015 and NAV 2013 R2
Password is not masked in the Document Service table in Microsoft Dynamics NAV 2015 and NAV 2013 R2 Symptoms In Microsoft Dynamics NAV 2015 and Microsoft Dynamics NAV 2013 R2, the Password field is not masked in the Document Service table. Therefore, the field is visible during inspection. To lea...
December 8, 2020—KB4592471 (Monthly Rollup)
None None...
KB4592495: Windows 8.1 and Windows Server 2012 R2 December 2020 Security Update
The remote Windows host is missing security update 4592495 or cumulative update 4592484. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2020-17098, CVE-2020-17140 - ...
KB4592503: Windows 7 and Windows Server 2008 R2 December 2020 Security Update
The remote Windows host is missing security update 4592503 or cumulative update 4592471. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2020-17098, CVE-2020-17140 - ...
Sony BRAVIA Digital Signage 1.7.8 - Unauthenticated Remote File Inclusion
Exploit Title: Sony BRAVIA Digital Signage 1.7.8 - Unauthenticated Remote File Inclusion Date: 20.09.2020 Exploit Author: LiquidWorm Vendor Homepage: https://pro-bravia.sony.net Version: 1.7.8 Sony BRAVIA Digital Signage 1.7.8 Unauthenticated Remote File Inclusion Vendor: Sony Electronics Inc...
Multiple CDATA product security breaches
Shenzhen C-Data Shenzhen C-Data 72408A and so on are the products of Shenzhen C-Data Company in China.Shenzhen C-Data 72408A is a kind of terminal equipment for connecting fiber optic trunks.Shenzhen C-Data FD1002S is a kind of terminal equipment for connecting fiber optic trunks.Shenzhen C-Data...
Security breaches in multiple CDATA products
Shenzhen C-Data Shenzhen C-Data 72408A and so on are the products of Shenzhen C-Data Company in China.Shenzhen C-Data 72408A is a kind of terminal equipment for connecting fiber optic trunks.Shenzhen C-Data FD1002S is a kind of terminal equipment for connecting fiber optic trunks.Shenzhen C-Data...
Multiple CDATA product trust management issue vulnerabilities
Shenzhen C-Data Shenzhen C-Data 72408A and so on are the products of Shenzhen C-Data Company in China.Shenzhen C-Data 72408A is a kind of terminal equipment for connecting fiber optic trunks.Shenzhen C-Data FD1002S is a kind of terminal equipment for connecting fiber optic trunks.Shenzhen C-Data...
Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: December 8, 2020
Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: December 8, 2020 Applies to Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service...
ZeroLogon - Netlogon Elevation of Privilege Exploit
Exploit Title: ZeroLogon - Netlogon Elevation of Privilege Date: 2020-10-04 Exploit Author: West Shepherd Vendor Homepage: https://www.microsoft.com Version: Microsoft Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2 Tested on: Microsof...