Microsoft Windows Multiple Vulnerabilities (KB4480963)

This host is missing an important security update according to Microsoft KB4480963 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

January 8, 2019—KB4480973 (OS Build 15063.1563)

None None...

December 11, 2018—KB4471324 (OS Build 17134.471)

None None...

PT-2018-18162

Name of the Vulnerable Software and Affected Versions Pulse Secure Client versions 5.3RX through 5.3R4 Pulse Secure Client version 9.0R1 Description The issue allows attackers to bypass Windows authentication and execute commands on the system with the privileges of Pulse Secure Client. This can ...

May 17, 2018—KB4103722 (OS Build 15063.1112)

None None...

Session fixation

Philips ISCV application prior to version 2.3.0 has an insufficient session expiration vulnerability where an attacker could reuse the session of a previously logged in user. This vulnerability exists when using ISCV together with an Electronic Medical Record EMR system, where ISCV is in KIOSK mo...

CVE-2018-5438

Philips ISCV application prior to version 2.3.0 has an insufficient session expiration vulnerability where an attacker could reuse the session of a previously logged in user. This vulnerability exists when using ISCV together with an Electronic Medical Record EMR system, where ISCV is in KIOSK mo...

CVE-2018-5438

Philips ISCV application prior to version 2.3.0 has an insufficient session expiration vulnerability where an attacker could reuse the session of a previously logged in user. This vulnerability exists when using ISCV together with an Electronic Medical Record EMR system, where ISCV is in KIOSK mo...

CVE-2018-5438

The CVE-2018-5438 vulnerability affects Philips IntelliSpace Cardiovascular System (ISCV) prior to version 2.3.0. The issue is an insufficient session expiration that can allow reuse of a previously authenticated session when ISCV is used with an EMR in kiosk mode across multiple users using Wind...

CVE-2018-5438: Insufficient Session Expiration

Philips ISCV application prior to version 2.3.0 has an insufficient session expiration vulnerability where an attacker could reuse the session of a previously logged in user. This vulnerability exists when using ISCV together with an Electronic Medical Record EMR system, where ISCV is in KIOSK mo...

PT-2018-16957

Name of the Vulnerable Software and Affected Versions Philips ISCV versions prior to 2.3.0 Description The issue is related to insufficient session expiration, allowing an attacker to reuse a previously logged-in user's session. This occurs when the ISCV application is used with an Electronic...

February 13, 2018—KB4074588 (OS Build 16299.248)

None None...

The vulnerability of the OpenVPN package arises from the improper handling of client connections to HTTP proxies, allowing a hacker to execute arbitrary code.

The vulnerability of the OpenVPN package exists due to improper handling of client connections to HTTP proxies with NTLMv authentication. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

NTLM buffer overflow via integer overflow

libcurl contains a buffer overrun flaw in the NTLM authentication code. The internal function Curlntlmcoremkntlmv2hash sums up the lengths of the username + password = SUM and multiplies the sum by two = SIZE to figure out how large storage to allocate from the heap. The SUM value is subsequently...

The vulnerability of the Windows operating system’s network authentication protocol, NT LAN Manager (NTLM), allows a hacker to access user password hashes.

The vulnerability of the Windows operating system’s Network Authentication Protocol NTLM exists due to the incorrect implementation of the NTLM authentication algorithm. Exploiting this vulnerability allows a malicious actor to obtain access to user password hashes through a specially crafted SCF...

How to Deploy Veeam Configuration Database in SQL AlwaysOn Availability Group

Multi-subnet SQL AlwaysOn clusters are not supported for hosting the Veeam Backup & Replication or Veeam Backup Enterprise Manager configuration databases. Purpose This article provides information on using a SQL AlwaysOn Availability Group to host the Veeam Backup & Replication and/or Veeam Back...

November 2016 Security Only Quality Update for Windows 8.1, and Windows Server 2012 R2

November 2016 Security Only Quality Update for Windows 8.1, and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1 and Windows Server 2012 R2: MS16-142 Cumulative security update for Internet Explorer: November 8, 2016 MS16-140 Security updat...

Cumulative update for Windows 10: November 8, 2016

None None...

MS16-137: Description of the security update for Windows authentication methods: November 8, 2016

None None...

MS16-137: Security update for Windows authentication methods: November 8, 2016

Resolves a vulnerability in Windows that could allow elevation of privilege.SummaryThis security update resolves vulnerabilities in Microsoft Windows. The more severe of the vulnerabilities could allow elevation of privilege. To exploit this vulnerability, the attacker would first have to...