CVE-2018-2452

The logon application of SAP NetWeaver AS Java 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 does not sufficiently encode user-controlled inputs, resulting in a cross-site scripting XSS vulnerability...

F5 BIG-IP APM Client Privilege Vulnerability

F5 BIG-IP APM client is the client software in a suite of access and security solutions from F5 USA. The software focuses on providing unified access to business-critical applications and networks. A security vulnerability exists in the Windows Logon Integration feature in versions of the F5 BIG-...

Microsoft Windows: Audit Credential Validation

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincredentialvalidation.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Credential Validation Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft Windows: Audit Group Membership

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wingroupmembership.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Group Membership Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Audit Logon

Audit Logon determines whether the operating system generates audit events when a user attempts to log on to a computer. These events are related to the creation of logon sessions and occur on the computer that was accessed. For an interactive logon, events are generated on the computer that was...

Microsoft Windows: Audit Special Logon

Audit Special Logon determines whether the operating system generates audit events under special sign on or log on circumstances. This subcategory allows you to audit events generated by special logons such as the following: - The use of a special logon, which is a logon that has...

CVE-2018-5547

Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses a SYSTEM account to establish network access. This feature displays a certificate user interface dialog box which contains the link to the certificate policy...

CVE-2018-5547

CVE-2018-5547 affects the Windows client for F5 BIG-IP APM. The Windows Logon Integration feature, before version 7.1.7.1, by default runs in Legacy logon mode using a SYSTEM account to establish network access. This can present a certificate policy link in a UI dialog; clicking the link may open...

CVE-2018-5547

Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses a SYSTEM account to establish network access. This feature displays a certificate user interface dialog box which contains the link to the certificate policy...

Design/Logic Flaw

Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses a SYSTEM account to establish network access. This feature displays a certificate user interface dialog box which contains the link to the certificate policy...

CVE-2018-5547

Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses a SYSTEM account to establish network access. This feature displays a certificate user interface dialog box which contains the link to the certificate policy...

Microsoft Windows DirectX Graphics Kernel Local Elevation of Privilege Vulnerability (CNVD-2018-19381)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. DirectX Graphics Kernel is one of the graphics kernel drivers. A local elevation of privilege vulnerability exists in Microsoft Windows DirectX Graphics Kernel, which arises from the...

Microsoft Windows: Do not display network selection UI

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnetworkselectionui.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Do not display network selection UI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progra...

CVE-2018-5544

When the F5 BIG-IP APM 13.0.0-13.1.1 or 12.1.0-12.1.3 renders certain pages pages with a logon agent or a confirm box, the BIG-IP APM may disclose configuration information such as partition and agent names via URI parameters...

Unable to join second StoreFront server after upgrade, with error "Error getting replication keys"

Follow are the symptoms: 1 StoreFront join operation fails with following error: 2 If we enable Audit for logon failure and success, you will observer following event on the Joiner: Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: XXXXXXXXXXXXXXXXXXX Event ID: 4625 Task...

CVE-2018-3089

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3088

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3005

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-2924

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: API frameworks. The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Sun...

CVE-2018-2892

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Availability Suite Service. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to...