937 matches found
KLA12549 RCE vulnerability in Microsoft Windows
A remote code execution vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2022-30190 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware...
KLA12532 Elevation of privilege in Microsoft Products (ESU)
Elevation of privilege was found in Microsoft Products Extended Security Update. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-30138 Related products Microsoft-Windows Microsoft-Windows-Server Microsoft-Windows-7 Microsoft-Windows-Server-2008 CVE...
KLA12533 Elevation of privilege in Microsoft Windows
Elevation of privilege vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-30138 Related products Microsoft-Windows Microsoft-Windows-Server Microsoft-Windows-Server-2012 Microsoft-Windows-8 Windows-RT...
KLA12527 Elevation of privilege vulnerability in Microsoft Server Software
Elevation of privilege vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-21978 Related products Microsoft-Exchange-Server CVE list CVE-2022-21978 critical KB list 5014261 5014260 Solution Install...
KLA12535 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in .NET and Visual Studio can be exploited...
CVE-2022-27852
Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities in KB Support WordPress plugin = 1.5.5 versions...
Cross site scripting
Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities in KB Support WordPress plugin = 1.5.5 versions...
CVE-2022-27852
The CVE-2022-27852 entry concerns the WordPress plugin KB Support (
CVE-2022-27852
Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities in KB Support WordPress plugin = 1.5.5 versions...
WordPress KB Support – WordPress Help Desk plugin <= 1.5.5 - Multiple Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilities
Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered by Ngo Van Thien Patchstack Alliance in WordPress KB Support – WordPress Help Desk plugin versions = 1.5.5. Solution Update the WordPress KB Support plugin to the latest available version at least 1.5.6...
WordPress plugin KB Support 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
KB Support <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting
The plugin does not sanitise and escape multiple parameters, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks...
KLA12504 Remote code execution vulnerability in Microsoft Dynamics
A remote code execution vulnerability was found in Microsoft Dynamics 365. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2022-23259 Related products Microsoft-Dynamics-365 CVE list CVE-2022-23259 critical KB list 5012731 5012732 Solution Install...
March 8, 2022—KB5011487 (OS Builds 19042.1586, 19043.1586, and 19044.1586)
None None...
KLA12478 Multiple vulnerabilities in Microsoft Exchange Server
Multiple vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely to...
KLA12481 Multiple vulnerabilities in Microsoft System Center
Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Defender for IoT c...
KLA12452 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Dynamics GP can be...
KLA12421 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in .NET Framework can be exploited remotely to cause...
KLA12420 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, spoof user interface. Below is a complete list of vulnerabilities: 1. Cross-site scripting XSS vulnerability in Microsoft Dynamics 365 Customer...
