CVE-2016-5793

Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...

The vulnerability of the Windows operating system, which allows a hacker to crack the password

The vulnerability of the Windows operating system is related to incorrect checking of NTLM SSO requests for MSAs. Exploiting this vulnerability allows a malicious actor to select a password by using brute-force attacks on NTLM password hashes...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system is related to incorrect restrictions on the download of web content when the screen is blocked. Exploiting this vulnerability allows a local attacker to execute arbitrary code using a specially crafted Wi-Fi access point or broadband mobile device...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the SMBv1 server in Windows operating systems is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted packets...

The vulnerability of the Windows operating system, which allows a perpetrator to gain access from the administrator’s perspective

The vulnerability of the Windows operating system is related to incorrect access control. Exploiting this vulnerability can allow a local attacker to gain access from the administrator through a specially crafted DLL library...

Adobe AIR SDK & Compiler Information Disclosure Vulnerability

Adobe AIR SDK & Compiler is a standard development toolkit for Adobe AIR a cross-OS runtime environment from Adobe Adobe. An information disclosure vulnerability exists in Adobe AIR SDK & Compiler 22.0.0.153 and earlier versions for Windows-based platforms, which stems from the program not...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2016-07600)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An information disclosure vulnerability exists in Microsoft Windows, which can be exploited by an attacker with the help of a specially crafted application to obtain sensitive information on the target...

Microsoft SMBv1 Server Authenticated Remote Code Execution Vulnerability (3185879)

This host is missing an important security update according to Microsoft Bulletin MS16-114. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-116: Security update in OLE Automation for VBScript Scripting Engine: September 13, 2016

Resolves a vulnerability in Windows that could allow remote code execution if an attacker convinces a user of an affected system to visit a malicious or compromised website.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code executi...

UBUNTU-CVE-2016-5167

Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

The vulnerability of the Windows operating system, which allows a perpetrator to bypass the security mechanisms for secure downloads

The vulnerability of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass the security mechanisms for secure loading by using administrative or physical access to install a specially crafted loader...

The vulnerability of the Windows operating system allows a hacker to intercept network traffic or bypass the Enhanced Protected Mode (EPM) or application’s security mechanisms. As a result, unauthorized content can be displayed in the browser.

The vulnerability of the Windows operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to intercept network traffic or bypass the Enhanced Protected Mode EPM or application security mechanisms. As a result, unauthorized content can be...

The vulnerability of the Windows operating system allows a perpetrator to bypass the Secure Kernel Mode protection mechanism and obtain confidential information.

The vulnerability of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating locally, to bypass the security mechanisms of Secure Kernel Mode and obtain confidential information through a specially creat...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s print queue dispatcher service is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder, operating locally, to enhance their privileges through vectors related to file system writing operations...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system’s print queue dispatcher is related to security configuration errors. Exploiting this vulnerability allows a perpetrator performing a “man-in-the-middle” attack to execute arbitrary code using a specially crafted print driver during printer...

The vulnerability of the Microsoft Windows operating system, which allows a perpetrator to bypass the security mechanisms for secure downloads

The vulnerability of the Microsoft Windows operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious individual to bypass the security mechanisms for secure loading by using administrative privileges to install the necessary policies...

Microsoft Win32k Elevation of Privilege Vulnerability (CNVD-2016-06299)

Microsoft Windows is the popular computer operating system. Some versions of the Windows kernel-mode driver do not properly handle memory objects and an elevation of privilege vulnerability exists, which can be exploited by a local user with a constructed application...

Microsoft Netlogon elevation of privilege vulnerability (CNVD-2016-06260)

Microsoft Windows is the popular computer operating system. Windows Netlogon does not properly establish a secure channel to a domain controller and an elevation of privilege vulnerability exists that can be successfully exploited to run a constructed application on a domain-connected system...

Microsoft Windows Graphics Remote Code Execution Vulnerability (CNVD-2016-06272)

Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in Microsoft Windows due to a font library that does not properly handle constructed embedded fonts. This vulnerability could be exploited by an attacker to take full control of an affected...

CVE-2016-3237

Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows man-in-the-middle attackers to bypass authentication via vectors related to a fallback to NTLM...