CVE-2014-0254

The CVE-2014-0254 issue affects Microsoft Windows 8, Windows Server 2012, and Windows RT, where the IPv6 TCP/IP stack does not properly validate ICMPv6 Router Advertisement packets, allowing remote denial-of-service that can cause a system hang. Affected component: IPv6 implementation in Windows ...

Microsoft Windows Kernel 'Win32k.sys'本地权限提升漏洞(CVE-2013-3881)(MS13-081)

BUGTRAQ ID: 62830 CVECAN ID: CVE-2013-3881 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows内核模式驱动程序处理内存对象时存在本地权限提升漏洞，成功利用后可在内核模式中运行任意代码。 0 Microsoft Windows XP Microsoft Windows Windows Server 2012 Microsoft Windows Windows RT Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 200...

Microsoft Windows TCP/IP IPv6路由器广播数据包拒绝服务漏洞（MS14-006）

BUGTRAQ ID: 65409 CVECAN ID: CVE-2014-0254 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows内TCP/IP IPv6实现存在拒绝服务漏洞，成功利用后可造成受影响系统停止响应。如果用户发送大量的特制 IPv6数据包到受影响系统，该漏洞可造成拒绝服务。要利用此漏洞，攻击者的系统必须和目标系统属于同一个子网。 0 Microsoft Windows Windows Server 2012 Microsoft Windows RT Microsoft Windows 8 厂商补丁： Microsoft ---------...

Microsoft Windows Direct2D Remote Code Execution Vulnerability (2912390)

This host is missing a critical security update according to Microsoft Bulletin MS14-007. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft VBScript Remote Code Execution Vulnerability (2928390)

This host is missing a critical security update according to Microsoft Bulletin MS14-011. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security Update for Microsoft .NET Framework 3.5 on Windows 8 and Windows Server 2012 for x64-based Systems (KB2898866)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Security Update for Microsoft .NET Framework 4.5 on Windows 8 and Windows Server 2012 for x64-based Systems (KB2901119)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Security Update for Microsoft .NET Framework 4.5 on Windows 8 and Windows Server 2012 for x64-based Systems (KB2898865)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

MS14-007: Vulnerability in Direct2D could allow remote code execution: February 11, 2014

None None...

sstp-discover NSE Script

Check if the Secure Socket Tunneling Protocol is supported. This is accomplished by trying to establish the HTTPS layer which is used to carry SSTP traffic as described in: - Current SSTP server implementations: - Microsoft Windows Server 2008/Server 2012 - MikroTik RouterOS - SEIL Example...

DUO-PSA-2014-002: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2014-002 Publication Date: 2014-01-09 Status: Confirmed, Unfixed Document Revision: 3 Overview Duo Security has identified an issue in which it is possible to bypass second factor authentication of Remote Desktop Web Access and Remote Desktop...

Spoofing

Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to cause a denial of service reboot via a crafted TrueType font TTF file, aka "TrueType Font Parsing Vulnerability."...

Double free

portcls.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Port-Class Driver Double Fetch Vulnerability."...

Microsoft WinVerifyTrust Signature Validation Vulnerability (2893294)

This host is missing an critical security update according to Microsoft Bulletin MS13-098. OpenVAS Vulnerability Test $Id: secpodms13-098.nasl 6104 2017-05-11 09:03:48Z teissa $ Microsoft WinVerifyTrust Signature Validation Vulnerability 2893294 Authors: Shashi Kiran N Copyright: Copyright C 2013...

MS Windows Scripting Runtime Object Library RCE Vulnerability (2909158)

This host is missing an critical security update according to Microsoft Bulletin MS13-099. OpenVAS Vulnerability Test $Id: secpodms13-099.nasl 33665 2013-12-11 08:15:24Z dec$ MS Windows Scripting Runtime Object Library RCE Vulnerability 2909158 Authors: Shakeel Copyright: Copyright C 2013 SecPod,...

Microsoft Windows Kernel Local Privilege Escalation Vulnerabilities (2880430)

This host is missing an important security update according to Microsoft Bulletin MS13-101 OpenVAS Vulnerability Test $Id: secpodms13-101.nasl 33668 2013-12-11 08:49:46Z dec$ Microsoft Windows Kernel Local Privilege Escalation Vulnerabilities 2880430 Authors: Antu Sanadi Copyright: Copyright C 20...

CVE-2013-3903

Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to cause a denial of service reboot via a crafted TrueType font TTF file, aka "TrueType Font Parsing Vulnerability."...

MS KB2871690: Update to Revoke Non-compliant UEFI Modules

The remote host is missing Microsoft KB2871690, an update that revokes the digital signatures of nine third-party UEFI modules. This update prevents the modules from being loaded on systems where UEFI Secure Boot is enabled. C Tenable Network Security, Inc. include"compat.inc"; if description...

PT-2013-4731 · Microsoft · Windows Server 2012 +6

Name of the Vulnerable Software and Affected Versions: Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows Server 2012 Windows RT Description: An elevation of privilege issue exists in the way the Windows audio port-class driver handles objects in memory. This...

Veeam ONE v7 R2 update

Challenge Release Notes for Veeam ONE v7 R2 update Cause Please confirm you are running version 7.0.0.876 prior to installing this update. You can check this under Help | About in Veeam ONE Monitor Client. After upgrading, your build will be version 7.0.0.919. This update should be applied to...