3969 matches found
CVE-2016-0009
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 10 Gold and 1511 allow remote attackers to execute arbitrary code via unspecified vectors, aka "Win32k Remote Code Execution Vulnerability."...
Remote code execution
Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."...
CVE-2016-0020
CVE-2016-0020 is a local privilege-elevation flaw in Microsoft Windows where DLL loading mishandling allows a crafted application to gain privileges on affected systems. Public documentation (MS16-007) indicates multiple Windows versions are affected, including Windows Vista SP2, Windows Server 2...
V5shop 在cart.aspx处的参数spikeid存在SQL注入漏洞
举例： 通过谷歌搜索inurl:productpic.aspx,因为cart.aspx是需要登录才可以正常访问，但是注入的时候毫无影响。 案例： http://www.wolifu.com/cart.aspx?act=spikebuy&spikeid=3 D:\sqlmappython sqlmap.py -u "http://www.wolifu.com/cart.aspx?act=spikebuy&spik eid=3" -p "spikeid" | | 1.0-dev-nongit-20150806 | -| . | | | .'| . | || |||||,| | || ||...
MS16-005: Security update for Windows kernel-mode drivers to address remote code execution: January 12, 2016
Resolves vulnerabilities in Windows that could allow remote code execution if a user visits a malicious website.SummaryTo learn more about the vulnerability, see Microsoft Security Bulletin MS16-005. More InformationImportant All future security and non-security updates for Windows RT 8.1, Window...
KLA10728 Obsolete Adobe Flash Player for Windows
Obsolete version of Adobe Flash Player was found in Microsoft Internet Explorer. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely. Technical details For further information look at KLA10727 Origina...
Microsoft security advisory: Update for vulnerabilities in Adobe Flash Player in Internet Explorer and Microsoft Edge: December 29, 2015
None None...
OpenSSH: Multiple vulnerabilities
Background OpenSSH is a complete SSH protocol implementation that includes an SFTP client and server support. Description Multiple vulnerabilities have been discovered in OpenSSH. Please review the CVE identifiers referenced below for details. Impact Workaround There is no known workaround at thi...
GLSA-201512-01 : Dnsmasq: Denial of Service
The remote host is affected by the vulnerability described in GLSA-201512-01 Dnsmasq: Denial of Service An out-of-bounds read vulnerability has been found in the tcprequest function in Dnsmasq. Impact : A remote attacker could send a specially crafted DNS request, possibly resulting in a Denial o...
CVE-2015-6132
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle library loading, which allows local users to gain privileges via a crafted application, aka...
CVE-2015-6130
Integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows remote attackers to execute arbitrary code via a crafted font, aka "Windows Integer Underflow Vulnerability."...
CVE-2015-6128
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Windows Library Loading Remote Code Execution Vulnerability."...
Integer overflow
Integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows remote attackers to execute arbitrary code via a crafted font, aka "Windows Integer Underflow Vulnerability."...
CVE-2015-6128
CVE-2015-6128 describes a Windows privilege-escalation flaw where local users can gain privileges by abusing how Windows loads libraries. Affected products include Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. The root cause is mishandling of library loading, enabling ...
CVE-2015-6130
CVE-2015-6130 is a Windows Uniscribe (USP10.DLL) vulnerability affecting Windows 7 SP1 and Windows Server 2008 R2 SP1. A specially crafted True Type Font (TTF) embedded in documents or web content can trigger an integer underflow in Uniscribe, allowing remote code execution. Microsoft issued MS15...
CVE-2015-6130
Integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows remote attackers to execute arbitrary code via a crafted font, aka "Windows Integer Underflow Vulnerability."...
Microsoft Windows Remote Code Execution Vulnerability (3116162)
This host is missing an important security update according to Microsoft Bulletin MS15-132. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows DNS Remote Code Execution Vulnerability (3100465)
This host is missing a critical security update according to Microsoft Bulletin MS15-127. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows Uniscribe Remote Code Execution Vulnerability (3108670)
This host is missing a critical security update according to Microsoft Bulletin MS15-130. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS15-130: Security Update for Microsoft Uniscribe to Address Remote Code Execution (3108670)
The remote Windows host is affected by a remote code execution vulnerability due to improper parsing of fonts by Uniscribe. A remote attacker can exploit this vulnerability by convincing a user to open a specially crafted document or visit an untrusted website that contains specially crafted...