2946 matches found
MS15-035: Vulnerability in Microsoft graphics component could allow remote code execution: April 14, 2015
None None...
KLA10557 Security bypass vulnerability in Active Directory
Improper logoff handling was found in Microsoft Active Directory. By exploiting this vulnerability malicious users can bypass security restrictions. This vulnerability can be exploited remotely via workstation manipulations. Original advisories MS15-040 CVE-2015-1638 Related products...
MS15-038: Description of the security update for Windows: April 14, 2015
None None...
KLA10468 Multiple vulnerabilities in Microsoft products
Multiple critical vulnerabilities have been found in Microsoft products. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information or execute arbitrary code. Below is a complete list of vulnerabilities 1. Improper memory allocation and some other...
KLA10591 Code injection in Microsoft Exchange Server
Multiple XSS vulnerabilities were found in Microsoft Exchange Server. By exploiting these vulnerabilities malicious users can inject arbitrary web script or spoof user interface. These vulnerabilities can be exploited remotely via a specially designed URL, msgParam or other unknown vectors...
KLA10459 Security bypass vulnerability in Microsoft Windows
Improper TLS restriction was found in Microsoft products. By exploiting this vulnerability malicious users bypass security. This vulnerability can be exploited remotely via a specially designed TLS traffic. Original advisories MS bulletin CVE-2015-1637 Related products Microsoft-Windows-Vista...
KLA10473 Code execution vulnerability in Microsoft products
Lack of authentication control was found in Microsoft products. By exploiting this vulnerability malicious users execute arbitrary code. This vulnerability can be exploited remotely via a specially designed UNC share. Original advisories MS advisory CVE-2015-0008 Related products...
MS15-020: Description of the security update for Windows shell: March 10, 2015
None None...
KLA10454 PE vulnerabilities in MSCVMM
Improper user roles validating was found in MSCVMM. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a specially designed credentials. Original advisories MS bulletin CVE-2015-0012 Related products...
KLA10605 Code execution vulnerability in Microsoft VBScript
An unspecified vulnerabilities were found in Microsoft VBScript engine. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed web site. Original advisories CVE-2014-6363 CVE-2014-0271 Exploitation...
Hyper-V backup or replication job with guest-processing fails after installing Windows Update KB3000853
After installing November roll-up update http://support.microsoft.com/kb/3000853 on 2012 Hyper-V hosts, VSS-enabled backups may be failing in any backup solution. In Veeam you will get "Unable t...
KLA10604 Multiple vulnerabilities in Microsoft SharePoint
Multiple serious vulnerabilities have been found in Microsoft SharePoint. Malicious users can exploit these vulnerabilities to gain privileges or execute arbitrary code. Below is a complete list of vulnerabilities 1. XSS vulnerability can be exploited remotely via a specially designed requests; 2...
KLA10615 Multiple vulnerabilities in Microsoft SQL Server
Multiple serious vulnerabilities have been found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to cause denial of service or inject arbitrary code. Below is a complete list of vulnerabilities 1. Lack of stack memory restrictions can be exploited remotely via a special...
Microsoft issues Emergency Windows Update to Block Fake SSL Certificates
Today, Microsoft has issued an emergency update for almost all versions of Windows and also for Microsoft devices running Windows Phone 8 and 8.1 to secure users from attacks that abuse the latest issued rogue SSL certificates, which could be used to impersonate Google and Yahoo! websites. A week...
MS14-037: Cumulative security update for Internet Explorer: July 8, 2014
Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage by using Internet Explorer.The update that this article describes has been replaced by a newer update. We recommend that you install the most current cumulative securit...
July 8, 2014 update for Office Online (KB2878285)
None None...
MS14-031: Vulnerability in TCP protocol could allow denial of service: June 10, 2014
Resolves a vulnerability in Windows that could allow denial of service if an attacker sends a sequence of specially crafted packets to the target system.INTRODUCTIONMicrosoft has released security bulletin MS14-031. To learn more about this security bulletin: Home...
MS14-035: Cumulative security update for Internet Explorer: June 10, 2014
Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage by using Internet Explorer.The update that this article describes has been replaced by a newer update. We recommend that you install the most current cumulative securit...
Microsoft .NET Framework 'RC4' Information Disclosure Vulnerability (2960358)
This host is missing an important security update according to Microsoft Security Advisory 2960358. OpenVAS Vulnerability Test $Id: gbmicrosoftsecurityadvisory2960358.nasl 5365 2017-02-20 13:46:09Z cfi $ Microsoft .NET Framework 'RC4' Information Disclosure Vulnerability 2960358 Authors: Thanga...
Microsoft Giving .NET Users The Option to Shed RC4
Microsoft didn’t beat around the bush when it warned customers to stay away from the deprecated RC4 algorithm last fall. Now it’s giving those who use its .NET software framework an option to disable the cipher in Transport Layer Security TLS as well. In a security advisory issued on its Security...