3956 matches found
August 10, 2021—KB5005089 (Security-only update)
None None...
August 10, 2021—KB5005106 (Security-only update)
None None...
Microsoft Windows Codecs 代码注入漏洞
Microsoft Windows Codecs is an operating system from Microsoft. It provides a multitasking graphical user interface. A code injection vulnerability exists in Microsoft Windows Codecs. The following products and editions are affected:Windows Server 2016,Windows Server 2016 Server Core...
KB5005106: Windows 8.1 and Windows Server 2012 R2 Security Update (August 2021)
The remote Windows host is missing security update 5005106 or cumulative update 5005076. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-26425, CVE-2021-26426, CVE-2021-34483,...
KB5005391: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows 8.1 or Windows Server 2012 R2
KB5005391: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows 8.1 or Windows Server 2012 R2 Summary This update addresses the following issue: Temporarily addresses an issue with devices that do not comply with section 3.2.1 of the RFC 4556...
Metasploit Wrap-Up
Eternal Blue improvements Prior to this release Metasploit offered two separate exploit modules for targeting MS17-010, dubbed Eternal Blue. The Ruby module previously only supported Windows 7, and a separate ms17010eternalbluewin8 Python module would target Windows 8 and above. Now Metasploit...
Microsoft Windows Multiple Vulnerabilities (KB5004289)
This host is missing a critical security update according to Microsoft KB5004289 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
July 13, 2021—KB5004289 (Monthly Rollup)
None None...
July 13, 2021—KB5004285 (Security-only update)
None None...
July 13, 2021—KB5004307 (Security-only update)
None None...
Microsoft Scripting Engine 缓冲区错误漏洞
Microsoft Scripting Engine is a tool from Microsoft Corporation USA that provides a scripting engine for JScript and VBScript. A buffer error vulnerability exists in Microsoft Scripting Engine. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...
KB5004298: Windows 8.1 and Windows Server 2012 R2 Security Update (July 2021)
The remote Windows host is missing security update 5004298. It is, therefore, affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself i...
KB5004958: Windows Server 2012 R2 OOB Security Update RCE (July 2021)
A remote command execution vulnerability exists in Windows Print Spooler service improperly performs privileged file operations. An authenticated, remote attacker can exploit this to bypass and run arbitrary code with SYSTEM privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
July 6, 2021—KB5004951 (Security-only update) Out-of-band
None None...
July 6, 2021—KB5004953 (Monthly Rollup) Out-of-band
None None...
July 6, 2021—KB5004958 (Security-only update) Out-of-band
None None...
Microsoft Windows Multiple Vulnerabilities (KB5003667)
This host is missing a critical security update according to Microsoft KB5003667 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
June 8, 2021—KB5003694 (Security-only update)
None None...