217 matches found
CVE-2017-2327
A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to consume large amounts of system resources leading to a cascading denial of services...
CVE-2017-2328
An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to elevate their permissions through reading unprivileged information stored in the NorthStar controller...
CVE-2017-2324
A command injection vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to cause a denial of service condition...
Updated capabilities to upgrade Windows 8.1 and Windows 7
Updated capabilities to upgrade Windows 8.1 and Windows 7 About this update This update adds capabilities to some computers that lets users easily learn about Windows 10 or start an upgrade to Windows 10. Before you install this update, see the Prerequisites section. For more information about...
CVE-2017-0087
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0072,...
Reliability Rollup 3179930 for the .NET Framework 4.5.2 on Windows Vista SP2, Windows 7 SP1, Windows Server 2008 SP2, and Windows Server 2008 R2 SP1
Reliability Rollup 3179930 for the .NET Framework 4.5.2 on Windows Vista SP2, Windows 7 SP1, Windows Server 2008 SP2, and Windows Server 2008 R2 SP1 This article describes the reliability rollup 3179930 for the Microsoft .NET Framework on Windows Vista Service Pack 2 SP2, Windows 7 SP1, Windows...
Description of an update rollup that resolves interoperation issues in Windows Server 2008 SP2, Windows 7 SP1, and Windows Server 2008 R2 SP1
Description of an update rollup that resolves interoperation issues in Windows Server 2008 SP2, Windows 7 SP1, and Windows Server 2008 R2 SP1 INTRODUCTION This article introduces an update rollup that resolves interoperation issues between a computer that is running Windows 8 or Windows Server 20...
Windows Server 2008 R2 domain controller crashes when two threads use the same LDAP connection
Windows Server 2008 R2 domain controller crashes when two threads use the same LDAP connection Summary This update fixes an access violation on the LSASS.exe process. This issue occurs because the Lightweight Directory Access Protocol LDAP connection is disconnected and reset from another thread...
Multiple vulnerabilities in ZOHO WebNMS Framework (CNVD-2016-06372)
ZOHO WebNMS Framework is the United States ZhuoHao ZOHO company's set of framework for building network management applications. A directory traversal vulnerability, an information disclosure vulnerability, and a user impersonation vulnerability exist in versions 5.2 and 5.2 SP1 of the ZOHO WebNM...
May 3, 2016, update for InfoPath 2013 (KB3114946)
None None...
openSUSE SUSE Linux Enterprise Server Information Disclosure Vulnerability
openSUSE SUSE Linux Enterprise Server is an easy-to-install enterprise server version of the SUSE Linux operating system. An information disclosure vulnerability exists in openSUSE SUSE Linux Enterprise Server 11 SP 1, which allows local users to obtain sensitive information by reading files in a...
PT-2016-3439
Name of the Vulnerable Software and Affected Versions Flexera InstallShield through 2015 SP1 AVEVA Edge InstallShield affected versions not specified Description The issue is related to an untrusted search path vulnerability that allows local users to gain privileges via a Trojan horse DLL in the...
Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2016-01170)
SharePoint Server is an integrated suite of server capabilities that provides comprehensive content management and enterprise search, accelerates shared business processes and simplifies information sharing across boundaries. Microsoft SharePoint Foundation 2013 SP1 has a cross-site scripting...
CVE-2016-0030
Cross-site scripting XSS vulnerability in Outlook Web Access OWA in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, and 2016 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Exchange Spoofing Vulnerability."...
Unspecified Vulnerability in Microsoft Windows
Microsoft Windows 7 SP1 is the latest Service Pack SP for the Windows 7 operating system released by Microsoft Corporation in the U.S. SP is a Windows update usually combined with a previously released update that helps improve the reliability of Windows. A security vulnerability exists in...
Siemens SIMATIC and SIMATIC WinCC HMI Comfort Panels Denial of Service Vulnerability
Siemens SIMATIC WinCC is a complete Supervisory Control and Data Acquisition SCADA solution for industry, ranging from single-user systems to multi-user systems supporting redundant servers and remote Web client solutions. A security vulnerability in Siemens SIMATIC HMI Comfort Panels WinCC TIA...
Siemens SIMATIC WinCC TIA Portal Man-in-the-Middle Information Disclosure Vulnerability
Siemens SIMATIC WinCC is the monitoring control and data acquisition SCADA and HMI system. An information disclosure vulnerability exists in Siemens SIMATIC WinCC V13 SP1, which can be exploited by an attacker to obtain sensitive information via a man-in-the-middle attack...
VulnCheck KEV: CVE-2012-0159
Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview; Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Silverlight 4 before 4.1.10329; and Silverlight 5 before 5.1.104...