Microsoft Windows Kernel Information Disclosure Vulnerability (KB4022883)

This host is missing an important security update according to Microsoft KB4022883 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have t...

Windows GDI Information Disclosure Vulnerability

A Win32k information disclosure vulnerability exists when the Windows GDI component improperly discloses kernel memory addresses. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker...

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...

PT-2017-10499 · Microsoft · Windows Gdi +2

Name of the Vulnerable Software and Affected Versions: Windows GDI component affected versions not specified Description: The issue is related to an information disclosure problem where the Windows GDI component improperly discloses its memory contents. This could allow an attacker to obtain...

CVE-2017-5003

EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 all patch levels; RSA Via Lifecycle and Governance version 7.0 all patch levels; and RSA Identity Management and Governance IMG version 6.9.1 all patch levels have Reflected Cross Site Scripting vulnerabilities that could potentially...

CVE-2017-4978

EMC RSA Adaptive Authentication On-Premise versions prior to 7.3 P2 exclusive contains a fix for a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-8930

Multiple cross-site request forgery CSRF vulnerabilities in Simple Invoices 2013.1.beta.8 allow remote attackers to hijack the authentication of admins for requests that can 1 create new administrator user accounts and take over the entire application, 2 create regular user accounts, or 3 change...

Veritas Backup Exec Agent for Windows/Linux and Mac Memory Corruption Vulnerability

Veritas Backup Exec Agent is a suite of backup and recovery solutions from Veritas Technologies, USA. A memory corruption vulnerability exists in Veritas Backup Exec Agent for Windows, Linux, and Mac-based platforms. A remote attacker could exploit the vulnerability to cause the agent to crash or...

Adobe Flash Player Code Execution Vulnerability (CNVD-2017-06316)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A code execution vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to execute arbitrary code to compromise an affected system...

Adobe Flash Player Code Execution Vulnerability (CNVD-2017-06320)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A code execution vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to execute arbitrary code to compromise an affected system...

Microsoft Win32k Information Disclosure (CVE-2017-0245)

An information disclosure vulnerability exists in Microsoft Windows. The vulnerability is due to the win32k component improperly providing kernel information. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system of the user...

Microsoft Edge CVE-2017-0266 Remote Code Execution Vulnerability

Description Microsoft Edge is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the affected...

EMC Mainframe Enablers ResourcePak Base Local Elevation of Privilege Vulnerability

EMC Mainframe Enablers ResourcePak Base is a set of mainframe enabler components from EMC Corporation. A security vulnerability exists in EMC Mainframe Enablers ResourcePak Base. An attacker could exploit this vulnerability to compromise a vulnerable system...

Microsoft Issues Emergency Patch For Critical RCE in Windows Malware Scanner

Microsoft's own antivirus software made Windows 7, 8.1, RT and 10 computers, as well as Windows Server 2016 more vulnerable. Microsoft has just released an out-of-band security update to patch the crazy bad bug discovered by a pair of Google Project Zero researchers over the weekend. Security...

CVE-2017-4983

EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0 is affected by a privilege escalation vulnerability that may potentially be exploited by attackers to compromise the affected system...

Magento Arbitrary File Upload Vulnerability

Magento Web E-Commerce Platform is prone to an arbitrary file upload vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Design/Logic Flaw

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...

Design/Logic Flaw

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Console Design. Supported versions that are affected are 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HT...

Information disclosure

An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, a.k.a. "Scripting Engine...