Design/Logic Flaw

Incorrect Access Controls of Security Officer SO in PKCS11 R2 provider that ships with the Utimaco CryptoServer HSM product package allows an SO authenticated to a slot to retrieve attributes of keys marked as private keys in external key storage, and also delete keys marked as private keys in...

2019-04 Security Update for Adobe Flash Player for Windows Server 2012 R2 for x64-based Systems (KB4493478)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

CVE-2018-19589

The CVE-2018-19589 describes incorrect access controls in the PKCS11 R2 provider shipping with Utimaco CryptoServer HSM. An SO authenticated to a slot can retrieve attributes of keys marked as private in external key storage and can delete such keys, potentially compromising availability of all e...

CVE-2018-19589

Incorrect Access Controls of Security Officer SO in PKCS11 R2 provider that ships with the Utimaco CryptoServer HSM product package allows an SO authenticated to a slot to retrieve attributes of keys marked as private keys in external key storage, and also delete keys marked as private keys in...

KB4493448: Windows 7 and Windows Server 2008 R2 April 2019 Security Update

The remote Windows host is missing security update 4493448 or cumulative update 4493472. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls ...

CVE-2018-19006

CVE-2018-19006 relates to OSIsoft PI Vision 2017 and PI Vision 2017 R2. The vulnerability is a cross-site scripting (XSS) flaw in displays that reference AF elements/attributes containing JavaScript, which can be triggered when an authorized AF user stores JavaScript in AF elements/attributes. Th...

Veeam Agent for Microsoft Windows CBT driver installation fails with "Unable to install Veeam change block tracking driver: Microsoft Windows Security Update KB3033929 is missing."

Challenge When attempting to deploy or install the Veeam CBT driver on a machine running Windows Server 2008 R2 SP1, the following error occurs: Microsoft Windows Security Update KB3033929 is missing Copy When attempting to install the Veeam CBT Driver for a standalone Veeam Agent for Microsoft...

Microsoft SHA-2 Code Sign Support Defense in Depth (KB4474419)

This host is missing a defense-in-depth update according to Microsoft KB4474419 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

2019-03 Security Update for Adobe Flash Player for Windows Server 2012 R2 for x64-based Systems (KB4489907)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2019-03 Security Update for Windows Server 2008 R2 for Itanium-based Systems (KB4474419)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2019-03 Security Update for Windows Server 2008 R2 for x64-based Systems (KB4474419)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

SHA-2 Code Sign Support Advisory

Microsoft is announcing the release of SHA-2 code sign support for Windows 7 SP1, Windows Server 2008 R2 SP1 and Windows Server 2008 SP2. Please see 2019 SHA-2 Code Signing Support requirement for Windows and WSUS for more information...

Security Update for Adobe Flash Player: March 12, 2019

None None...

SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: September 23, 2019

SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: September 23, 2019 Notice This security update was released March 12, 2019 for Windows 7 SP1 and Windows Server 2008 R2 SP1. This security update was updated May 14, 2019 to add support for Windows...

Microsoft Windows Kernel CVE-2019-0782 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

Microsoft Windows Win32k CVE-2019-0797 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Failed exploit attempts may result in a denial of service condition. Technologies Affected Microsoft Windows 10 Version 1607...

Microsoft Windows Active Directory CVE-2019-0683 Remote Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows Server 2008 R2 for...

Microsoft Windows 7 / Server 2008 R2 Unsupported Version Detection

Microsoft Windows 7 or Server 2008 R2 is running on the remote host. Microsoft ended support for Windows 7 and Server 2008 R2 on 1/14/2020. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security...

January 2019 Preview of the Quality Rollups for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 7 SP1 and Server 2008 R2 SP1 (KB 4481488)

January 2019 Preview of the Quality Rollups for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 7 SP1 and Server 2008 R2 SP1 KB 4481488 Applies to: Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET...

OSIsoft PI Cross-Site Scripting Vulnerability

OSIsoft PI is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, USA. The platform supports data acquisition, analysis and visualization. A cross-site scripting vulnerability exists in OSIsoft PI version 2017 and 2017 R2, which can be exploited by...