3832 matches found
Security feature bypass
The Windows Error Reporting WER component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging...
CVE-2015-0001
The Windows Error Reporting WER component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging...
CVE-2015-0001
The Windows Error Reporting WER component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging...
KLA10476 Code execution vulnerability in Microsoft products
Buffer overflow was found in Microsoft products. By exploiting this vulnerability malicious users execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packets related to Telnet service. Original advisories MS advisory CVE-2015-0014 Related products...
Microsoft Windows CVE-2015-0002 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Avaya Aura...
Microsoft Windows CVE-2015-0004 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Avaya Aura...
Microsoft Windows Kernel 'mrxdav.sys' CVE-2015-0011 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to bypass impersonation security levels and gain elevated privileges on the affected system. Technologies Affected Avaya Aura Conferencing Standard Edition 6.0 Avaya...
MS15-004: Description of the security update for Windows: January 13, 2015
None None...
MS14-080: Description of the security update for VBScript 5.8: January 13, 2015
Describes an update package that contains VBScript 5.8 updates for Internet Explorer 10. Apply this update package after you install the December cumulative security update for Internet Explorer.SummaryThis package contains the VBScript 5.8 updates that are intended for Internet Explorer 10 in a...
MS14-064 Microsoft Windows OLE Package Manager Code Execution Through Python
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "MS14-064 Microsoft Windows OLE Package Manager Code Execution Through Python", 'Description' = %q This module exploits a vulnerabilit...
Microsoft Windows - OLE Package Manager Code Execution (MS14-064) (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "MS14-064 Microsoft Windows OLE Package Manager Code Execution", 'Description' = %q This module exploits a vulnerability found in...
Microsoft Windows - OLE Package Manager Code Execution (via Python) (MS14-064) (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "MS14-064 Microsoft Windows OLE Package Manager Code Execution Through Python", 'Description' = %q This module exploits a vulnerabilit...
Microsoft Secure Channel (Schannel) vulnerable to remote code execution via specially crafted packets
Overview A critical vulnerability in Microsoft Windows systems could allow a remote attacker to execute arbitrary code via specially crafted network packets. Description Microsoft Secure Channel Schannel is a security package that provides SSL and TLS on Microsoft Windows platforms. Due to a flaw...
openSUSE Security Update : sssd (openSUSE-SU-2014:1407-1)
sssd was updated to new upstream release 1.12.2 bugfix release, bnc900159 Changes : - Fixed a regression where the IPA provider did not fetch User Private Groups correctly - An important bug in the GPO access control which resulted in a wrong principal being used, was fixed. - Several new options...
Microsoft Windows Kernel-Mode Driver TrueType Font DoS Vulnerability (3002885)
This host is missing a moderate security update according to Microsoft Bulletin MS14-079. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS14-066: Vulnerability in Schannel Could Allow Remote Code Execution (2992611)
The remote Windows host is affected by a remote code execution vulnerability due to improper processing of packets by the Secure Channel Schannel security package. An attacker can exploit this issue by sending specially crafted packets to a Windows server. C Tenable Network Security, Inc...
MS14-064 Microsoft Windows OLE Package Manager Code Execution Through Python
This module exploits a vulnerability found in Windows Object Linking and Embedding OLE allowing arbitrary code execution, bypassing the patch MS14-060, for the vulnerability publicly known as "Sandworm", on systems with Python for Windows installed. Windows Vista SP2 all the way to Windows 8,...
Microsoft Windows OLE Object Handling Code Execution Vulnerabilities (3011443)
This host is missing a critical security update according to Microsoft Bulletin MS14-064. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows Remote Desktop Protocol Security Feature Bypass Vulnerability (3003743)
This host is missing an important security update according to Microsoft Bulletin MS14-074. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2014-4118
XML Core Services aka MSXML 3.0 in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of...