Microsoft Kerberos Privilege Escalation Vulnerabilities (2496930)

This host is missing a critical security update according to Microsoft Bulletin MS11-013. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability (2476687)

This host is missing a critical security update according to Microsoft Bulletin MS11-010. OpenVAS Vulnerability Test $Id: secpodms11-010.nasl 5362 2017-02-20 12:46:39Z cfi $ Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability 2476687 Authors: Sooraj KS Copyright: Copyright ...

Microsoft Kerberos Privilege Escalation Vulnerabilities (2496930)

This host is missing a critical security update according to Microsoft Bulletin MS11-013. OpenVAS Vulnerability Test $Id: secpodms11-013.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Kerberos Privilege Escalation Vulnerabilities 2496930 Authors: Antu Sanadi Updated by: Antu Sanadi on 2011-03-17...

Microsoft Windows LSASS Privilege Escalation Vulnerability (2478960)

This host is missing a critical security update according to Microsoft Bulletin MS11-014. OpenVAS Vulnerability Test $Id: secpodms11-014.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows LSASS Privilege Escalation Vulnerability 2478960 Authors: Antu Sanadi Copyright: Copyright c 2011 SecPod,...

MS11-014: Vulnerability in Local Security Authority Subsystem Service Could Allow Local Elevation of Privilege (2478960)

The remote host allows elevation of privileges through its Local Security Authority Subsystem Service LSASS due to a failure to properly process specially crafted authentication requests. An attacker who has the ability to log on to the affected host can leverage this issue to gain full...

OemPro 3.6.4 - Multiple Vulnerabilities

OemPro 3.6.4 - Multiple Vulnerabilities Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure:...

OemPro 3.6.4 SQL Injection / Shell Upload

Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure: http://localhost/clibounce.php FCKEditor 2.3.2...

Microsoft IIS 6 parsing directory “x.asp” Vulnerability

Microsoft IIS 6 parsing directory Vulnerability Discovered by: Pouya daneshmand whhiranATyahooDOTcom http://securitylab.ir/blog Introduction: Using this vulnerability you can bypass some Security filters, for example a file with “.jpg” or “.rar” extension can be executed as an asp Active Server...

Microsoft Active Directory Denial of Service Vulnerability (953235)

This host is missing a critical security update according to Microsoft Bulletin MS08-035. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft XML Core Services Remote Code Execution Vulnerability (936227)

This host is missing a critical security update according to Microsoft Bulletin MS07-042. OpenVAS Vulnerability Test $Id: gbms07-042.nasl 6235 2017-05-29 13:45:48Z cfi $ Microsoft XML Core Services Remote Code Execution Vulnerability 936227 Authors: Madhuri D Copyright: Copyright c 2011 Greenbone...

Vulnerability in RPC Could Allow Denial of Service (933729)

This host is missing a critical security update according to Microsoft Bulletin MS07-058. OpenVAS Vulnerability Test $Id: gbms07-058.nasl 5362 2017-02-20 12:46:39Z cfi $ Vulnerability in RPC Could Allow Denial of Service 933729 Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks Gmb...

Microsoft Internet Information Services Privilege Elevation Vulnerability (942831)

This host is missing a critical security update according to Microsoft Bulletin MS08-005. OpenVAS Vulnerability Test $Id: gbms08-005.nasl 6605 2017-07-07 11:22:07Z cfischer $ Microsoft Internet Information Services Privilege Elevation Vulnerability 942831 Authors: Madhuri D Updated by : Antu Sana...

Microsoft Pragmatic General Multicast (PGM) DoS Vulnerability (950762)

This host is missing a critical security update according to Microsoft Bulletin MS08-036. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Routing and Remote Access Privilege Escalation Vulnerability (2440591)

This host is missing an important security update according to Microsoft Bulletin MS10-099. OpenVAS Vulnerability Test $Id: secpodms10-099.nasl 5361 2017-02-20 11:57:13Z cfi $ Routing and Remote Access Privilege Escalation Vulnerability 2440591 Authors: Veerendra GG Copyright: Copyright c 2010...

Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (2296199)

This host is missing an important security update according to Microsoft Bulletin MS10-091. OpenVAS Vulnerability Test $Id: secpodms10-091.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability 2296199 Authors: Veerendra GG...

Microsoft Media Decompression Remote Code Execution Vulnerability (2447961)

This host is missing a critical security update according to Microsoft Bulletin MS10-094. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS10-099: Vulnerability in Routing and Remote Access Could Allow Elevation of Privilege (2440591)

The Routing and Remote Access NDProxy component of the remote Windows host does not properly validate user-supplied input when passing data from user mode to the kernel. An attacker who can log on locally to the affected system can exploit this to run arbitrary code in kernel mode. C Tenable...

MS10-094: Vulnerability in Windows Media Encoder Could Allow Remote Code Execution (2447961)

The remote Windows host contains a version of Windows Media Encoder that incorrectly restricts the path used for loading external libraries. If an attacker can trick a user on the affected system into opening a specially crafted Windows Media Profile .prx file located in the same network director...

Routing and Remote Access Privilege Escalation Vulnerability (2440591)

This host is missing an important security update according to Microsoft Bulletin MS10-099. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS10-104 Microsoft Office SharePoint Server 2007 Remote Code Execution

This module exploits a vulnerability found in SharePoint Server 2007 SP2. The software contains a directory traversal, that allows a remote attacker to write arbitrary files to the filesystem, sending a specially crafted SOAP ConvertFile request to the Office Document Conversions Launcher Service...