Microsoft Windows AllJoyn API Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows AllJoyn API. An attacker has exploited the vulnerability to cause a denial of service on the system. The...

Microsoft Windows Kerberos Security Vulnerability

Microsoft Windows Kerberos is a software for authentication in network clusters from Microsoft Corporation.Kerberos also serves as a network authentication protocol designed to provide strong authentication services to client/server applications via a key system. A security vulnerability exists i...

KB5034171: Windows Server 2012 R2 Security Update (January 2024)

The remote Windows host is missing security update 5034171. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2024-20654 - Windows Kerberos Security Feature Bypass Vulnerability CVE-2024-20674 - Windows Group Policy Elevation of...

KB5034587: Servicing stack update for Windows Server 2012 R2: January 9, 2024

KB5034587: Servicing stack update for Windows Server 2012 R2: January 9, 2024 REMINDER Windows 8.1 reached end of support EOS on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows 8.1, we recommend upgrading them ...

Microsoft Hypervisor-Protected Code Integrity Security Vulnerability

Microsoft Hypervisor-Protected Code Integrity is a security feature of Windows from Microsoft Corporation USA that makes it difficult for malicious programs to hijack computers using low-level drivers. A security vulnerability exists in Microsoft Hypervisor-Protected Code Integrity. An attacker...

PT-2024-1153 · Microsoft · Windows Server Key Distribution Service +1

Name of the Vulnerable Software and Affected Versions: Windows Server Key Distribution Service affected versions not specified Description: The issue is related to errors in the certificate authentication procedure of the Windows Server Key Distribution Service. It allows a remote attacker to...

Microsoft Windows Themes Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Themes. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and...

Microsoft .NET Framework Security Vulnerabilities

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a development platform. The platform includes the C and Visual Basic programming languages, a public language runtime library, and an extensive class library. A security vulnerability...

Microsoft Windows Cryptographic Services Security Vulnerability

Microsoft Windows Cryptographic Services is an encryption service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services. An attacker exploiting this vulnerability could remotely execute code. The following products and edition...

KB5034176: Windows Server 2008 Security Update (January 2024)

The remote Windows host is missing security update 5034176. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2024-20654 - Windows Kerberos Security Feature Bypass Vulnerability CVE-2024-20674 - Windows Group Policy Elevation of...

KB5034119: Windows 10 Version 1607 and Windows Server 2016 Security Update (January 2024)

The remote Windows host is missing security update 5034119. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2024-20654 - BitLocker Security Feature Bypass Vulnerability CVE-2024-20666 - Windows Kerberos Security Feature Bypass...

Microsoft SQL Server Security Vulnerability

Microsoft SQL Server is a large commercial database system from Microsoft that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker could exploit the vulnerability to bypass certain functionality. The following products and versions are affected:...

KB5034588: Servicing stack update for Windows Server 2012: January 9, 2024

KB5034588: Servicing stack update for Windows Server 2012: January 9, 2024 REMINDER Windows Server 2012 reached end of support EOS on October 10, 2023. Extended Security Updates ESUs are available for purchase and will continue for three years, renewable on an annual basis, until the final date o...

KLA62827 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of...

Metasploit 2023 Annual Wrap-Up: Dec. 29, 2023

As 2023 winds down, we’re taking another look back at all the changes and improvements to the Metasploit Framework. This year marked the 20th anniversary since Metasploit version 1.0 was committed and the project is still actively maintained and improved thanks to a thriving community. Version 6....

Exploit for Incorrect Implementation of Authentication Algorithm in Microsoft

CVE 2023 29357 Informations - Cible SharePoint Windows Se...

PT-2023-9403 · Microsoft · Windows 11 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 affected versions not specified Description: A Denial of Service in the CLFS.sys driver allows a malicious authenticated low-privilege user to...

Microsoft Teams 2.1 supported for VDI/DaaS

Information Overview Microsoft has released new Teams for VDI in early December 2023. The new version of Teams has been re-implemented and promises improvements in performance, memory consumption, usability, and security. Here is a link to some information about the new Teams -...

Virtuozzo Hybrid Infrastructure 6.0 Hotfix 1 (6.0.0-247)

This update provides important stability fixes. Vulnerability id: VSTOR-59380 Prometheus does not show network traffic for the storage interface if RDMA is enabled. Vulnerability id: VSTOR-76816 A stability fix for the hypervisor. Vulnerability id: VSTOR-78893 Reading erasure coding files over RD...

Microsoft Windows Defender Antimalware Platform DoS Vulnerability (Dec 2023)

This host is missing a critical security update according to Microsoft Security Updates released for Microsoft Windows Defender Protection Engine dated 13-12-2023 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...