4639 matches found
CVE-2015-1645
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to execute arbitrary code via a crafted Enhanced Metafile EMF image, aka "EMF Processing Remote Code Execution Vulnerability."...
CVE-2015-1643
Microsoft Windows Server 2003 R2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly constrain impersonation levels, which allows local users to gain privileges via a crafted...
CVE-2015-1638
Microsoft Active Directory Federation Services AD FS 3.0 on Windows Server 2012 R2 does not properly handle logoff actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation, aka "Active Directory Federation Services Information Disclosur...
Privilege escalation
Task Scheduler in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges by triggering application execution by an invalid task, aka "Task Scheduler Elevation of Privilege Vulnerability."...
Design/Logic Flaw
Virtual Machine Manager VMM in Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 allows guest OS users to cause a denial of service VMM functionality loss via a crafted application, aka "Windows Hyper-V DoS Vulnerability."...
Information disclosure
Microsoft Active Directory Federation Services AD FS 3.0 on Windows Server 2012 R2 does not properly handle logoff actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation, aka "Active Directory Federation Services Information Disclosur...
CVE-2015-1643
CVE-2015-1643 affects multiple Windows versions (Vista to Server 2012/R2, RT/RT 8.1, etc.). The root cause is NtCreateTransactionManager type confusion that fails to properly constrain impersonation levels, enabling a local unprivileged user to escalate to higher privileges via a crafted applicat...
CVE-2015-1647
Virtual Machine Manager VMM in Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 allows guest OS users to cause a denial of service VMM functionality loss via a crafted application, aka "Windows Hyper-V DoS Vulnerability."...
CVE-2015-1638
Microsoft Active Directory Federation Services AD FS 3.0 on Windows Server 2012 R2 does not properly handle logoff actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation, aka "Active Directory Federation Services Information Disclosur...
Microsoft Windows Hyper-V CVE-2015-1647 Remote Denial of Service Vulnerability
Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Microsoft Windows 8.1 for 64-bit Systems Microsoft Windows Server 2012 R2 Recommendations Block external access at t...
CVE-2015-1647: Improper Input Validation
Virtual Machine Manager VMM in Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 allows guest OS users to cause a denial of service VMM functionality loss via a crafted application, aka "Windows Hyper-V DoS Vulnerability."...
CVE-2015-0098: Undefined Security Weakness
Task Scheduler in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges by triggering application execution by an invalid task, aka "Task Scheduler Elevation of Privilege Vulnerability."...
PT-2015-1070
Name of the Vulnerable Software and Affected Versions Hyper-V versions in Microsoft Windows 8.1 and Windows Server 2012 R2 Description The issue is related to errors that occur when running a specially crafted application on a virtual machine, which can lead to a denial of service, causing the lo...
PT-2015-1065
Name of the Vulnerable Software and Affected Versions Microsoft Windows 7 SP1 Microsoft Windows Server 2008 R2 SP1 Description The issue allows local users to gain privileges by triggering application execution by an invalid task. An attacker who successfully exploits this could cause the Task...
PT-2015-1064
Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Description The issue is related to the improper processing of specially crafted Enhanced Metafile EMF image...
KLA10555 Denial of service vulnerability in Hyper-V
An unspecified vulnerability was found in Microsoft products. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed application. Original advisories MS advisory CVE-2015-1647 Exploitation Related product...
MS KB3045755: Update to Improve PKU2U Authentication
The remote Windows host is missing a security update that improves the authentication used by the Public Key Cryptography User-to-User PKU2U security support provider SSP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid82779; scriptversion"1.3"; scriptcvsdate"Date:...
MS15-040: Vulnerability in Active Directory Federation Services Could Allow Information Disclosure (3045711)
The remote Windows host is affected by an information disclosure vulnerability in Active Directory Federation Services AD FS due to a failure to properly log off a user. A local attacker, by reopening an application from which a user has logged off, can exploit this to obtain user information to...
HP Intelligent Provisioning Information Disclosure Vulnerability
HP Intelligent Provisioning is the server configuration tool. An information disclosure vulnerability exists in HP Intelligent Provisioning versions 1.40-1.60 on Windows 2008 R2 and Windows 2012 platforms. The vulnerability could be exploited by an attacker to obtain sensitive information...
