Privilege escalation

An elevation of privilege vulnerability exists in the Microsoft Server Message Block SMB Server when an attacker with valid credentials attempts to open a specially crafted file over the SMB protocol on the same machine, aka 'SMB Server Elevation of Privilege Vulnerability'...

CVE-2019-0821

An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0703, CVE-2019-0704...

PT-2019-1830

Name of the Vulnerable Software and Affected Versions Microsoft Server Message Block SMB Server affected versions not specified Windows Hyper-V affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Microsoft Server Message Block SMB...

CVE-2019-0786: Improper Input Validation

An elevation of privilege vulnerability exists in the Microsoft Server Message Block SMB Server when an attacker with valid credentials attempts to open a specially crafted file over the SMB protocol on the same machine, aka 'SMB Server Elevation of Privilege Vulnerability'...

VulnCheck KEV: CVE-2019-0703

An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server...

PT-2019-1601

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling requests in the Windows SMB protocol implementation, which can be exploited by a remote attacker to gain unauthorized access to protected informatio...

CVE-2019-0630

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 SMBv2 server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0633...

CVE-2019-0633: Undefined Security Weakness

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 SMBv2 server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0630...

CVE-2019-0630: Undefined Security Weakness

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 SMBv2 server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0633...

CVE-2019-0630

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 SMBv2 server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0633...

CVE-2019-0633

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 SMBv2 server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0630...

The vulnerability of the SMBv2 component of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the SMBv2 component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code by sending a specially crafted package to the SMBv2 server...

The vulnerability of LibreOffice and Apache OpenOffice office programs, related to the automatic initiation of SMB connections, allows attackers to gain access to protected information.

The vulnerability of LibreOffice and Apache OpenOffice office programs relates to the automatic initiation of SMB connections. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information using a specially crafted file...

Microsoft Windows Multiple Vulnerabilities (KB4487026)

This host is missing a critical security update according to Microsoft KB4487026 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4487018)

This host is missing a critical security update according to Microsoft KB4487018 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

PT-2019-1413

Name of the Vulnerable Software and Affected Versions Microsoft Server Message Block 2.0 SMBv2 affected versions not specified Description A remote code execution issue exists in the way the Microsoft Server Message Block 2.0 SMBv2 server handles certain requests. This issue is related to unsafe...

The vulnerability of the Solaris operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the Solaris operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures using the SMB protocol...

USN-3883-1 libreoffice vulnerabilities

It was discovered that LibreOffice incorrectly handled certain document files. If a user were tricked into opening a specially crafted document, a remote attacker could cause LibreOffice to crash, and possibly execute arbitrary code. CVE-2018-10119, CVE-2018-10120, CVE-2018-11790 It was discovere...

CVE-2018-5498

Clustered Data ONTAP versions 9.0 through 9.4 are susceptible to a vulnerability which allows remote authenticated attackers to cause a Denial of Service DoS in NFS and SMB environments. Exploitation of this vulnerability will allow a remote authenticated attacker to cause a Denial of Service DoS...

The vulnerability of the Samba networking communication software package lies in the absence of SMB traffic signatures, which allows attackers to execute a “man-in-the-middle” attack.

The vulnerability of the Samba networking communication package is related to the absence of SMB traffic signatures. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack and obtain protected information in text form...