3092 matches found
JVN#72586781: ASP.NET vulnerable to cross-site scripting
ASP.NET contains an issue in the escape processes for string output. Web applications that use ASP.NET may contain a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the...
JVN#40382909: Microsoft Outlook read receipt function vulnerability
Microsoft Outlook contains a vulnerability in the read receipt function. A read receipt may be sent unintentionally, notifying the sender that the email was received. Impact A spam distributor may use this information to determine whether an email address is valid or not. Solution Upgrade the...
Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2545814)
This host is missing a critical security update according to Microsoft Bulletin MS11-036. OpenVAS Vulnerability Test $Id: secpodms11-036.nasl 6523 2017-07-04 15:46:12Z cfischer $ Microsoft Office PowerPoint Remote Code Execution Vulnerabilities 2545814 Authors: Antu Sanadi Copyright: Copyright c...
Microsoft Windows WINS Remote Code Execution Vulnerability (2524426)
This host is missing a critical security update according to Microsoft Bulletin MS11-035. OpenVAS Vulnerability Test $Id: secpodms11-035.nasl 7582 2017-10-26 11:56:51Z cfischer $ Microsoft Windows WINS Remote Code Execution Vulnerability 2524426 Authors: Sooraj KS Copyright: Copyright c 2011...
Windows Application CPE Detection (SMB Login)
SMB login-based collection of information about installed applications from a Microsoft Windows system. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
PT-2011-2975 · Microsoft · Windows Server 2003 +4
Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1...
PT-2011-2547 · Microsoft · Windows Server 2003 +4
Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1...
PT-2011-2552 · Microsoft · Windows Server 2003 +4
Name of the Vulnerable Software and Affected Versions: Windows XP versions SP2 through SP3 Windows Server 2003 version SP2 Windows Vista versions SP1 through SP2 Windows Server 2008 versions Gold through R2 SP1 Windows 7 versions Gold through SP1 Description: The issue allows local users to gain...
VUPEN Security Research - Microsoft Windows GDI+ Size Handling Integer Overflow Vulnerability
VUPEN Security Research - Microsoft Windows GDI+ Size Handling Integer Overflow Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Windows is a series of software operating systems and graphical user interfaces produced by Microsoft. Windows had...
Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2489283)
This host is missing a critical security update according to Microsoft Bulletin MS11-022. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft IE Developer Tools WMITools and Windows Messenger ActiveX Control Vulnerability (2508272)
This host is missing a critical security update according to Microsoft Bulletin MS11-027. OpenVAS Vulnerability Test $Id: secpodms11-027.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft IE Developer Tools WMITools and Windows Messenger ActiveX Control Vulnerability 2508272 Authors: Veerendra G...
PT-2011-2038 · Microsoft · Windows Server 2003 +5
Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through SP2 Microsoft Office version XP SP3 Description: The...
MS11-024: Vulnerability in Windows Fax Cover Page Editor could allow remote code execution: April 12, 2011
Resolves a vulnerability in Windows that could allow remote code execution if a user opened a specially crafted fax cover page file .cov by using Windows Fax Cover Page Editor.Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows,...
MS11-019: Vulnerabilities in SMB Client could allow remote code execution: April 12, 2011
None None...
MS11-026: Vulnerability in MHTML could allow information disclosure: April 12, 2011
None None...
Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-1234) Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel due to a NULL-pointer dereference. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete...
Description of the Office Online update: April 12, 2011
None None...
Microsoft Groove Remote Code Execution Vulnerability (2494047)
This host is missing a critical security update according to Microsoft Bulletin MS11-016. OpenVAS Vulnerability Test $Id: secpodms11-016.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Groove Remote Code Execution Vulnerability 2494047 Authors: Madhuri D Copyright: Copyright c 2011 SecPod,...
MS11-015: Vulnerability in Microsoft DirectShow could allow remote code execution: March 8, 2011
Resolves vulnerabilities in Windows Media Player and Windows Media Center that could allow remote code execution if a user opens a specially crafted Microsoft Digital Video Recording .dvr-ms file.Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security...