3044 matches found
KLA10591 Code injection in Microsoft Exchange Server
Multiple XSS vulnerabilities were found in Microsoft Exchange Server. By exploiting these vulnerabilities malicious users can inject arbitrary web script or spoof user interface. These vulnerabilities can be exploited remotely via a specially designed URL, msgParam or other unknown vectors...
KLA10473 Code execution vulnerability in Microsoft products
Lack of authentication control was found in Microsoft products. By exploiting this vulnerability malicious users execute arbitrary code. This vulnerability can be exploited remotely via a specially designed UNC share. Original advisories MS advisory CVE-2015-0008 Exploitation Public exploits exis...
KLA10454 PE vulnerabilities in MSCVMM
Improper user roles validating was found in MSCVMM. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a specially designed credentials. Original advisories MS bulletin CVE-2015-0012 Exploitation Related products...
KLA10605 Code execution vulnerability in Microsoft VBScript
An unspecified vulnerabilities were found in Microsoft VBScript engine. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed web site. Original advisories CVE-2014-6363 CVE-2014-0271 Exploitation...
Hyper-V backup or replication job with guest-processing fails after installing Windows Update KB3000853
After installing November roll-up update http://support.microsoft.com/kb/3000853 on 2012 Hyper-V hosts, VSS-enabled backups may be failing in any backup solution. In Veeam you will get "Unable t...
KLA10604 Multiple vulnerabilities in Microsoft SharePoint
Multiple serious vulnerabilities have been found in Microsoft SharePoint. Malicious users can exploit these vulnerabilities to gain privileges or execute arbitrary code. Below is a complete list of vulnerabilities 1. XSS vulnerability can be exploited remotely via a specially designed requests; 2...
KLA10615 Multiple vulnerabilities in Microsoft SQL Server
Multiple serious vulnerabilities have been found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to cause denial of service or inject arbitrary code. Below is a complete list of vulnerabilities 1. Lack of stack memory restrictions can be exploited remotely via a special...
Microsoft issues Emergency Windows Update to Block Fake SSL Certificates
Today, Microsoft has issued an emergency update for almost all versions of Windows and also for Microsoft devices running Windows Phone 8 and 8.1 to secure users from attacks that abuse the latest issued rogue SSL certificates, which could be used to impersonate Google and Yahoo! websites. A week...
July 8, 2014 update for Office Online (KB2878285)
None None...
MS14-037: Cumulative security update for Internet Explorer: July 8, 2014
Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage by using Internet Explorer.The update that this article describes has been replaced by a newer update. We recommend that you install the most current cumulative securit...
MS14-035: Cumulative security update for Internet Explorer: June 10, 2014
Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage by using Internet Explorer.The update that this article describes has been replaced by a newer update. We recommend that you install the most current cumulative securit...
MS14-031: Vulnerability in TCP protocol could allow denial of service: June 10, 2014
Resolves a vulnerability in Windows that could allow denial of service if an attacker sends a sequence of specially crafted packets to the target system.INTRODUCTIONMicrosoft has released security bulletin MS14-031. To learn more about this security bulletin: Home...
Microsoft .NET Framework 'RC4' Information Disclosure Vulnerability (2960358)
This host is missing an important security update according to Microsoft Security Advisory 2960358. OpenVAS Vulnerability Test $Id: gbmicrosoftsecurityadvisory2960358.nasl 5365 2017-02-20 13:46:09Z cfi $ Microsoft .NET Framework 'RC4' Information Disclosure Vulnerability 2960358 Authors: Thanga...
Microsoft Giving .NET Users The Option to Shed RC4
Microsoft didn’t beat around the bush when it warned customers to stay away from the deprecated RC4 algorithm last fall. Now it’s giving those who use its .NET software framework an option to disable the cipher in Transport Layer Security TLS as well. In a security advisory issued on its Security...
Microsoft Group Policy Preferences Privilege Elevation Vulnerability (2962486)
This host is missing an important security update according to Microsoft Bulletin MS14-025. OpenVAS Vulnerability Test $Id: gbms14-025.nasl 6692 2017-07-12 09:57:43Z teissa $ Microsoft Group Policy Preferences Privilege Elevation Vulnerability 2962486 Authors: Veerendra GG Copyright: Copyright C...
Microsoft Office Remote Code Execution Vulnerabilities (2961037)
This host is missing an important security update according to Microsoft Bulletin MS14-023. OpenVAS Vulnerability Test $Id: gbms14-023.nasl 6735 2017-07-17 09:56:49Z teissa $ Microsoft Office Remote Code Execution Vulnerabilities 2961037 Authors: Antu Sanadi Copyright: Copyright C 2014 Greenbone...
MS14-021: Security update for Internet Explorer: May 1, 2014
Resolves a vulnerability in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage by using Internet Explorer.The update that this article describes has been replaced by a newer update. We recommend that you install the most current cumulative securit...
Microsoft Office Word Viewer Remote Code Execution Vulnerabilities (2949660)
This host is missing a critical security update according to Microsoft Bulletin MS14-017. OpenVAS Vulnerability Test $Id: gbmswordviewms14-017.nasl 7000 2017-08-24 11:51:46Z teissa $ Microsoft Office Word Viewer Remote Code Execution Vulnerabilities 2949660 Authors: Antu Sanadi Copyright: Copyrig...
Microsoft Office Word Remote Code Execution Vulnerabilities (2949660)
This host is missing a critical security update according to Microsoft Bulletin MS14-017. OpenVAS Vulnerability Test $Id: gbmswinwordms14-017.nasl 6715 2017-07-13 09:57:40Z teissa $ Microsoft Office Word Remote Code Execution Vulnerabilities 2949660 Authors: Antu Sanadi Copyright: Copyright C 201...