Microsoft SharePoint Business Productivity Server RCE Vulnerability (2904244)

This host is missing an important security update according to Microsoft Bulletin MS13-100. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft SharePoint Server Excel Services RCE Vulnerability (2904244)

This host is missing an important security update according to Microsoft Bulletin MS13-100. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft Office Web Apps Remote Code Execution vulnerability (2904244)

This host is missing an important security update according to Microsoft Bulletin MS13-100. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft SharePoint Server Remote Code Execution Vulnerability (2904244)

This host is missing an important security update according to Microsoft Bulletin MS13-100. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft ASP.NET Insecure Site Configuration Vulnerability (2905247)

This host is missing an important security update according to Microsoft advisory 2905247. OpenVAS Vulnerability Test $Id: gbmicrosoftsecurityadvisory2905247.nasl 6086 2017-05-09 09:03:30Z teissa $ Microsoft ASP.NET Insecure Site Configuration Vulnerability 2905247 Authors: Thanga Prakash S...

MS13-100: Vulnerabilities in Microsoft SharePoint Server Could Allow Remote Code Execution (2904244)

The versions of Office SharePoint Server, or Office Web Apps installed on the remote host are affected by code execution vulnerabilities. By sending specially crafted page content to a SharePoint server, a remote, authenticated attacker could execute arbitrary code on the remote host subject to t...

Microsoft SharePoint CVE-2013-5059 Multiple Remote Code Execution Vulnerabilities

Description Microsoft SharePoint is prone to multiple remote code-execution vulnerabilities. An attacker can leverage these issues to execute arbitrary code in the context of the W3WP service account user. Technologies Affected Microsoft Office Web Apps 2013 Microsoft SharePoint Server 2010 SP1...

Cisco Unified Communications Manager Administrative Web Interface Directory Traversal Vulnerability

A vulnerability in the administrative web interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to obtain the contents of arbitrary files on an affected device. The vulnerability is due to a failure to properly sanitize user-supplied input passed to a...

MS13-067: Description of the security update for Word Automation Services in SharePoint Server 2010: September 10, 2013

Resolves vulnerabilities in Microsoft Office Server software which could allow remote code execution in the context of the W3WP service account.View products that this article applies to.IntroductionThis security update resolves vulnerabilities in Microsoft Office Server software that could allow...

Microsoft Active Directory Federation Services information leakage

It's possible to obtain service account information to cause account locking via unsuccessful logon attempts...

Health Service dropped data

Challenge The following alerts can be seen in SCOM: Veeam Collector: Health Service dropped data Veeam Collector: Health Service workflows failed The settings of SCOM agent are correct please see KB1026, and clearing OpsMgr cache may help for a short amount of time. The OperationsManager log on...

Scheduled automatic dashboard delivery fails

Challenge In certaing scenarios, scheduled dashboard delivery in Veeam ONE Reporter fails and reports the 'Dashboard Capturing Failed' error in the reporting task session log. Cause This issue is usually related to the configured permissions of the Veeam ONE Service account, which makes the...

The user has not been granted the requested logon type on this computer

Challenge Although the nWorks service account has local administrator rights and is a member of the nWorks Enterprise Manager Accounts local group, nWorks Collector and Enterprise Manager cannot be installed, because the installer does not accept the specified service account. The following error...

How to Migrate the Veeam ONE Database

Article Applicability This article is specifically about relocating the Veeam ONE database to a different Microsoft SQL Server Instance and the Veeam ONE deployment remaining on the same machine. For information about relocating the Veeam ONE deployment, review: KB1801: How to Migrate Veeam ONE...

CVE-2012-0731

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not prevent service-account impersonation, which allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2012-0731

CVE-2012-0731 affects IBM Rational AppScan Enterprise 5.x and 8.x prior to 8.5.0.1. The root cause is failure to prevent service-account impersonation, which could allow remote authenticated users to read arbitrary files through unspecified vectors. The known impact is read access to arbitrary fi...

CVE-2012-0731

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not prevent service-account impersonation, which allows remote authenticated users to read arbitrary files via unspecified vectors...

Microsoft .NET Framework Parameter Validation Remote Code Execution Vulnerability

Description The .NET Framework is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code with the privileges of the currently logged-in user. Failed attacks will cause denial-of-service conditions. In a web hosting environment,...

VM Right-Sizing report fails with error "Query execution failed for dataset ‘AnalysisDS’"

Challenge VM Right-Sizing report fails with the following error: Query execution failed for dataset 'AnalysisDS'. Error converting data type varchar to numeric. Cause The error occurs because of unsupported decimal separator format on the Collector machine. A dot . is expected as the decimal...

Re: [DSECRG-11-018] Kaspersky administration Kit - Remote code execution via SMBRelay

It was closed only for relayng to the same host but it is imposible to close relayng on another host which run processes st the same account. And also smbrelay patch did not work on clusters http://dsecrg.blogspot.com/2011/01/passthehash-bible-1-attacking.html...