CVE-2017-1000221

In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will handle the access control incorrectly so that users only need to match part of the user name used for the access restriction. For example, a user with the role...

Microsoft Windows Search Remote Code Execution (CVE-2017-11771)

A remote code execution vulnerability exists in the Windows Search service of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target system...

Microsoft Windows Search Information Disclosure (CVE-2017-11772)

An information disclosure exists in the Search component of Microsoft Windows. The vulnerability is due to how Windows Search handles objects in memory. A remote attacker can exploit this vulnerability by sending specially crafted messages to the Windows Search service...

October Patch Tuesday: 28 Critical Microsoft Vulnerabilities

Today Microsoft released patches covering 62 vulnerabilities as part of October’s Patch Tuesday update, with 30 of them affecting Windows. Patches covering 28 of these vulnerabilities are labeled as Critical, and 33 can result in Remote Code Execution. According to Microsoft, a vulnerability in...

Microsoft Windows Search Type Confusion (CVE-2017-8620)

A remote code execution vulnerability exists in the Windows Search service of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target system...

August Patch Tuesday: 25 critical Microsoft vulnerabilities, 43 for Adobe

Today Microsoft released patches covering 48 vulnerabilities as part of August’s Patch Tuesday update, with 15 of them affecting Windows. Patches covering 25 of these vulnerabilities are labeled as Critical, and 27 can result in Remote Code Execution. According to Microsoft, none of these...

KB4034658: Windows 10 Version 1607 and Windows Server 2016 August 2017 Cumulative Update

The remote Windows host is missing security update 4034658. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when Microsoft Windows improperly handles NetBIOS packets. An attacker who successfully exploited this vulnerability could cause a target...

Adobe, Microsoft Push Critical Security Fixes

It's Patch Tuesday, again. That is, if you run Microsoft Windows or Adobe products. Microsoft issued a dozen patch bundles to fix at least 54 security flaws in Windows and associated software. Separately, Adobe's got a new version of its Flash Player available that addresses at least three...

July Patch Tuesday: 19 Critical Vulnerabilities from Microsoft, plus Critical Adobe Patches

Today Microsoft released patches covering 54 vulnerabilities as part of July’s Patch Tuesday update, with 26 of them affecting Windows. Patches covering 19 of these vulnerabilities are labeled as Critical, all of which can result in Remote Code execution. According to Microsoft, none of these...

The vulnerability of the Windows Search service in the Windows operating system allows a perpetrator to execute arbitrary code and gain unlimited access to the system.

The vulnerability of the Windows Search service in the Windows operating system is related to code errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and gain unrestricted access to the system by sending a specially crafted SMB message to the Windows Search...

Microsoft Windows Search Remote Code Execution Vulnerability

Windows Search Service WSS is a basic service enabled by default in windows. It allows users to search across multiple Windows services and clients. A remote code execution vulnerability exists in Windows Search, which can be exploited by an attacker to elevate privileges and take control of a...

skynet.be XSS vulnerability

Vulnerable URL: http://www.skynet.be/services/recherche/google?cx=partner-pub-9744292032263079:5461966790alert/OPENBUGBOUNTY/...

EarthStation 5 Search Service Remote File Deletion Vulnerabililty

No description provided by source. source: http://www.securityfocus.com/bid/8753/info It has been reported that EarthStation 5 is prone to a file deletion vulnerability that may allow a remote attacker to delete arbitrary files on a vulnerable system. The problem is reported to exist in the Searc...

EarthStation 5 - Search Service Remote File Deletion

EarthStation 5 - Search Service Remote File Deletion source: https://www.securityfocus.com/bid/8753/info It has been reported that EarthStation 5 is prone to a file deletion vulnerability that may allow a remote attacker to delete arbitrary files on a vulnerable system. The problem is reported to...