22281 matches found
KB5010403: Windows Server 2008 Security Update (February 2022)
The remote Windows host is missing security update 5010403. It is, therefore, affected by multiple vulnerabilities - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-21993, CVE-2022-21998 - A denial of service DoS...
KB5010422: Windows 7 and Windows Server 2008 R2 Security Update (February 2022)
The remote Windows host is missing security update 5010422. It is, therefore, affected by multiple vulnerabilities - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-21998 - A denial of service DoS vulnerability. An...
Microsoft Windows User Profile Service 资源管理错误漏洞
The Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A resource management error vulnerability exists in Microsoft Windows User Account Profile. The...
Microsoft Windows Named Pipe File System 数字错误漏洞
Microsoft Windows Named Pipe File System is a named pipe file system from Microsoft Corporation USA. A numeric error vulnerability exists in Microsoft Windows Named Pipe File System. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 180...
KB5010395: Windows 8.1 and Windows Server 2012 R2 Security Update (February 2022)
The remote Windows host is missing security update 5010395. It is, therefore, affected by multiple vulnerabilities - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-21998 - A denial of service DoS vulnerability. An...
Microsoft Windows Print Spooler Components 后置链接漏洞
Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Print Spooler Components. The following products and versions are affected:Windows 10 for x64-based Systems,Windows 10 Version 16...
KB5010354: Windows Server 2022 Security Update (February 2022)
The remote Windows host is missing security update 5010354. It is, therefore, affected by multiple vulnerabilities - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-21993, CVE-2022-21998 - A denial of service DoS...
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB5010582)
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB5010582 Applies to:Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...
KB5010452: Servicing stack update for Windows Server 2008 SP2: February 8, 2022
KB5010452: Servicing stack update for Windows Server 2008 SP2: February 8, 2022 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU make sure that you have a robust and reliable servicing stack so...
The Bug Report - January 2022 Edition
The Bug Report - January 2022 By Trellix · February 2, 2022 This story was written by Kevin McGrath Your Cybersecurity Comic Relief Image courtesy of https://toggl.com/ Why am I here? Omicron is the 15th letter in the Greek alphabet, used by Donald Knuth to denote Big-O notation, represented zero...
Oracle WebLogic Server 14.1.1.0.0 - Local File Inclusion
Exploit Title: Oracle WebLogic Server 14.1.1.0.0 - Local File Inclusion Date: 25/1/2022 Exploit Author: Jonah Tan @picar0jsu Vendor Homepage: https://www.oracle.com Software Link: https://www.oracle.com/middleware/technologies/weblogic-server-installers-downloads.html Version: 12.1.3.0.0,...
January 27, 2022 Servicing stack update (KB5009640)
None None...
Oracle WebLogic Server 14.1.1.0.0 - Local File Inclusion Vulnerability
Exploit Title: Oracle WebLogic Server 14.1.1.0.0 - Local File Inclusion Exploit Author: Jonah Tan @picar0jsu Vendor Homepage: https://www.oracle.com Software Link: https://www.oracle.com/middleware/technologies/weblogic-server-installers-downloads.html Version: 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0...
January 25, 2022-KB5009823 Cumulative Update Preview for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019
None None...
KLA12432 RCE vulnerability in Microsoft Products (ESU)
Remote code execution vulnerability was found in Microsoft Products Extended Security Update. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2013-3900 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Windows...
KLA12431 RCE vulnerability in Microsoft Windows
Remote code execution vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2013-3900 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Windows Microsoft-Windows-Server...
[Security Nation] Mike Hanley of GitHub on the Log4j Vulnerability
!\Security Nation\ Mike Hanley of GitHub on the Log4j Vulnerabilityhttps://blog.rapid7.com/content/images/2022/01/securitynationlogo.jpg In our first episode of Security Nation Season 5, Jen and Tod chat with Mike Hanley, Chief Security Officer at GitHub, all about the major vulnerability in...
WorkTime 10.20 Build 4967 - Unquoted Service Path
Exploit Title: WorkTime 10.20 Build 4967 - Unquoted Service Path Discovery by: Yehia Elghaly Date: 30-12-2021 Vendor Homepage: https://www.worktime.com/ Software Link: https://www.worktime.com/download/worktimecorporate.exe Tested Version: 10.20 Build Build 4967 Vulnerability Type: Unquoted Servi...
