1851 matches found
CVE-2018-0749
The Microsoft Server Message Block SMB Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability d...
Microsoft Windows Multiple Vulnerabilities (KB4056892)
This host is missing a critical security update according to Microsoft KB4056892. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2018-2785 · Microsoft · Windows 8.1 +8
Name of the Vulnerable Software and Affected Versions: Windows 7 SP1 Windows 8.1 and RT 8.1 Windows Server 2008 SP2 and R2 SP1 Windows Server 2012 and R2 Windows 10 versions 1511 through 1709 Windows Server 2016 Windows Server, version 1709 Description: The issue is related to errors in access...
CVE-2017-14385
An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21; EMC Data Domain Virtual Edition 2.0 family, all versions; EMC Data Domain Virtual...
DEBIAN-CVE-2017-14746
Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request...
ALPINE-CVE-2017-14746
Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request...
Important: Red Hat Security Advisory: samba security update
An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
samba: Use-after-free in processing SMB1 requests
A use-after-free flaw was found in the way samba servers handled certain SMB1 requests. An unauthenticated attacker could send specially-crafted SMB1 requests to cause the server to crash or execute arbitrary code...
Samba Memory Misreference Vulnerability
Samba is a set of free software developed by the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The program supports sharing printers, transferring data files to each other, and so on. A memory misreference...
Cisco Firepower System Software SNORT Detection Engine Security Bypass Vulnerability
Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco.SNORT detection engine is one of the intrusion detection engines. A security vulnerability exists in the SNORT detection engine in Cisco Firepower System Software, which stems from the program's failure to...
UBUNTU-CVE-2017-14746
Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request...
PT-2017-4074
Name of the Vulnerable Software and Affected Versions Samba versions 4.x before 4.7.3 Description The issue is related to a use-after-free vulnerability in the implementation of the SMB1 protocol in the Samba network interaction software package. This vulnerability can be exploited by a remote...
CVE-2017-12300
A vulnerability in the SNORT detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a file policy that is configured to block the Server Message Block Version 2 SMB2 protocol. The vulnerability is due to the incorrect detection of an SMB2 fil...
Arbitrary file deletion
A vulnerability in the SNORT detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a file policy that is configured to block the Server Message Block Version 2 SMB2 protocol. The vulnerability is due to the incorrect detection of an SMB2 fil...
PT-2017-12476 · Cisco · Cisco Firepower System
Name of the Vulnerable Software and Affected Versions: Cisco Firepower System Software affected versions not specified Description: A flaw in the SNORT detection engine could allow an unauthenticated, remote attacker to bypass a file policy configured to block the Server Message Block Version 2...
The vulnerability of the Microsoft Server Message Block (SMB) network protocol in the Windows operating system allows a hacker to cause a service failure.
The vulnerability of the Microsoft Server Message Block SMB network protocol in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted requests to the...
samba: Some code path don't enforce smb signing, when they should (incomplete fix of CVE-2017-12150)
It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...
The vulnerability of the Microsoft Windows Search component on Windows operating systems allows a perpetrator to execute arbitrary code or obtain confidential system information.
The vulnerability of the Microsoft Windows Search component in Windows operating systems is related to errors in processing objects in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code or obtain confidential system information through the SMB connection...
Microsoft Windows SMB Server (2017-10) Multiple Vulnerabilities (uncredentialed check)
The remote Windows host is affected by the following vulnerabilities : - A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to...
CVE-2017-11780
The Server Message Block 1.0 SMBv1 on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows a remote code execution vulnerability when it fails to properly...