GRUB2 Vulnerability – AKA

No description provided...

Vulnerability Spotlight: Information disclosure in Windows 10 Kernel

Marcin Towalski of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered an information disclosure vulnerability in the Windows 10 kernel. An attacker could exploit this vulnerability by tricking the victim into opening a specially crafted executable,...

CVE-2019-1125

An information disclosure vulnerability exists when certain central processing units CPU speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability, an attacker would have to log on to an...

Microsoft emergency release CVE-2019-0708 vulnerability fixes-bug warning-the black bar safety net

2019 5 on 14 September, Microsoft is the emergency release for the Remote Desktop service Remote Desktop Service, RDP, previously known as Terminal Services remote code execution vulnerability CVE-2019-0708 fix, the vulnerability affects some older versions of Windows system such as Windows XP,...

2019-05 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB4494440)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Cyber Security Week in Review (March 15)

Welcome to this week's Cyber Security Week in Review, where Cisco Talos runs down all of the news we think you need to know in the security world. For more news delivered to your inbox every week, sign up for our Threat Source newsletter here. Top headlines this week The U.S. warned Germany that...

Microsoft Patch Tuesday, May 2018 Edition

Microsoft today released a bundle of security updates to fix at least 67 holes in its various Windows operating systems and related software, including one dangerous flaw that Microsoft warns is actively being exploited. Meanwhile, as it usually does on Microsoft's Patch Tuesday -- the second...

Microsoft Office 2016 Remote Code Execution Vulnerability (KB4011632)

This host is missing an important update for Microsoft Office Suite according to Microsoft security update KB4011632. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

MS16-131: Security Update for Microsoft Video Control (3199151)

The remote Windows host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in Microsoft Video Control due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this vulnerability by convincing a user to open a...

BadTunnel Super Vulnerability CVE-2 0 1 6-3 2 1 3 Technical Analysis and protection solution-vulnerability warning-the black bar safety net

2 0 1 6 6 1 5 November, Microsoft released 6 October Security Update, Microsoft fixes a Windows 9 5 to Windows 10 all editions of theoperating systemvulnerabilities that could become a Windows vulnerability in the history of the impact of the widest range of vulnerabilities. Do not panic, listen ...

MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check)

The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager SAM and Local Security Authority Domain Policy LSAD protocols due to improper authentication level negotiation over Remote Procedure Call RPC channels. A man-in-the-middle attacker able ...

MS15-114: Security Update for Windows Journal to Address Remote Code Execution (3100213)

The remote Windows host is affected by a remote code execution vulnerability in Windows Journal due to improper parsing of Journal files. An unauthenticated, remote attacker can exploit this, via a crafted Journal file, to execute arbitrary code in the context of the current user. C Tenable Netwo...

MS15-051: Vulnerabilities in Windows kernel-mode drivers could allow information disclosure: May 12, 2015

Resolves vulnerabilities in Windows that could allow remote code execution if a user opens a specially crafted document or could allow elevation of privilege if an attacker logs on locally and runs arbitrary code in kernel mode.SummaryThis security update resolves vulnerabilities in Windows, the...

Microsoft Office OneNote URL处理远程代码执行漏洞（MS08-055）

BUGTRAQ ID: 31067 CVE ID：CVE-2008-3007 CNCVE ID：CNCVE-20083007 Microsoft Office OneNote是一款Microsoft Office 系统的一个集成部分，用于帮助管理信息过载，更加轻松地共享信息，并且更加高效地与他人协作的程序。 Microsoft Office处理使用OneNote协议处理器onenote://的URL存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建特殊的onenote:// URL可触发此漏洞。目前没有详细漏洞细节提供。 Microsoft OneNote 2007...

Microsoft Windows Vista内核ALPC本地特权提升漏洞

Microsoft Windows Vista是一款微软开发的操作系统。 Microsoft Windows Vista内核包含的高级本地过程调用ALPC不正确处理部分访问请求，本地攻击者可以利用漏洞提升特权，获得系统管理员权限。 目前没有详细漏洞细节提供 Microsoft Windows Vista Ultimate 64-bit edition 0 Microsoft Windows Vista Home Premium 64-bit edition 0 Microsoft Windows Vista Home Basic 64-bit edition 0 Microsoft...

Microsoft Office Publisher未明远程代码执行漏洞

BUGTRAQ ID: 22702 CVE ID:CVE-2007-1754 CNCVE ID:CNCVE-20071754 Microsoft Office是一款微软开发的流行的文字处理软件。 Microsoft Office包含的Publisher 2007存在一个未明缺陷，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 Publisher 2007在当应用程序从磁盘写数据到内存时，不充分清楚内存资源，可导致非法内存应用而造成拒绝服务，存在任意代码执行可能。 Microsoft Publisher 2007 0 Microsoft Office 2007 0 +...

CVE-2005-1935

Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library MSASN1.DLL allows remote attackers to execute arbitrary code via nested constructed bit strings, which leads to a realloc of a non-null pointer and causes the function to overwrite previously freed memory, as...

Microsoft Windows Utility Manager launches applications with system privileges

Overview The Microsoft Windows 2000 Utility Manager allows authenticated local users to launch applications with SYSTEM privileges. Description The Microsoft Windows 2000 Utility Manager is a program that permits users to monitor and launch various accessibility applications. This program contain...

MS04-003: MDAC Buffer Overflow (832483)

The remote Microsoft Data Access Component MDAC server is vulnerable to a flaw that could allow an attacker to execute arbitrary code on this host, provided he can simulate responses from a SQL server. To exploit this flaw, an attacker would need to wait for a host running a vulnerable MDAC...

MS00-052: Relative Shell Path patch (269049)

The hotfix for the 'Relative Shell Path' vulnerability has not been applied. This vulnerability allows a malicious user who can write to the remote system root to cause the code of malicious user's choice to be executed by the users who will interactively log into this host. C Tenable Network...