PVS Targets run chkdsk at boot after the vDisk has been modified

Every time a PVS Target Device boots from a vDisk the OS detects problems with the C: drive and automatically runs chkdsk at boot time. The following events might be observed in the Windows Event Log on the Target Device: Event Log: System Source: Ntfs Event ID: 55 Text: The file system structure...

Unifiltr EventID 3: Unidesk denied an attempt to rename a directory

Your software may report an error attempting to rename a directory, you may receive an error trying to move a folder to the Recycle Bin, and you may see an error in the Windows System event log on an IM that looks like this: Log Name: System Source: unifltr Date: 10/23/2013 9:58:30 PM Event ID: 3...

Python Windows Event Log Parser: python-evtx

Python Windows Event Log Parser python-evtx is a pure Python parser for recent Windows Event Log files those with the file extension “.evtx”. The module provides programmatic access to the File and Chunk headers, record templates, and event entries. For example, you can use python-evtx to review...

Windows Process Filtering System: ProcFilter

Windows Process Filtering System ProcFilter is a process filtering system for Windows with built-in YARA integration. YARA rules can be instrumented with custom meta tags that tailor its response to rule matches. It runs as a Windows service and is integrated with Microsoft’s ETW API , making...

CVE-2013-2278

Unspecified vulnerability in War FTP Daemon warftpd 1.82, when running as a Windows service, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors related to log messages and the "internal log handler to the Windows Event log."...

Code injection

Unspecified vulnerability in War FTP Daemon warftpd 1.82, when running as a Windows service, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors related to log messages and the "internal log handler to the Windows Event log."...

CVE-2013-2278

Unspecified vulnerability in War FTP Daemon warftpd 1.82, when running as a Windows service, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors related to log messages and the "internal log handler to the Windows Event log."...

CVE-2013-2278

CVE-2013-2278 affects War FTP Daemon (warftpd) 1.82 when run as a Windows service. The vulnerability allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to log messages and the internal log handler to the Windows Event log. ...

PT-2014-2577

Name of the Vulnerable Software and Affected Versions War FTP Daemon version 1.82 Description The issue is related to an unspecified vulnerability that can cause a denial of service crash and possibly allow the execution of arbitrary code. This is related to log messages and the internal log...

War FTP Daemon 1.82 Denial of Service

According to its banner, the version of War FTP Daemon installed on the remote host is 1.82. As such, it is potentially affected by a flaw in how log messages are logged to the Windows Event log. A remote, unauthenticated attacker could leverage this issue to cause a denial of service. Note that...

Failed Accessing Windows Event Log

Challenge SCOM reports a Warning: "Failed Accessing Windows Event Log...". and in the State Change Events description you can find: "The Windows Event Log Provider was unable to open the nworksEventLog event log on computer 'nodexxx' for reading. The provider will retry opening the log every 30...

CVE-2011-2779

Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770...

Cross site scripting

Cross-site scripting XSS vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file...

CVE-2011-0770

Cross-site scripting XSS vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file...

CVE-2011-0770

Cross-site scripting XSS vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file...

PT-2011-4083

Name of the Vulnerable Software and Affected Versions HP ArcSight Connector Appliance versions prior to 6.1 Description The issue concerns the Windows Event Log SmartConnector in HP ArcSight Connector Appliance, where it uses world-writable permissions for exported report files. This allows local...

CVE-2011-2779: Undefined Security Weakness

Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770...