124 matches found
Microsoft Web Media Extensions (Windows SMB Login)
SMB login-based detection of Microsoft Web Media Extensions. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Web Media Extensions RCE Vulnerability (Oct 2024)
Microsoft Web Media Extensions is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Ajax.NET Professional Cross-Site Scripting Vulnerability
Ajax.NET Professional was one of the first AJAX frameworks available for Microsoft ASP.NET. A cross-site scripting vulnerability exists in versions of Ajax.NET Professional prior to 21.12.22.1, which is vulnerable to cross-site scripting attacks...
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file
...
Microsoft Windows Codecs Library 代码注入漏洞
The Web Media Extensions package extends Microsoft Edge and Windows 10 to support open source formats commonly found on the Web.A remote code execution vulnerability exists in Microsoft Web Media Extensions. An attacker could exploit this vulnerability to execute code on the target host...
Microsoft ASP.NET Core 输入验证错误漏洞
Microsoft ASP.NET Core is a framework of cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web applications, Internet of Things applications, and mobile backends. An input validation error vulnerability exists in Microsoft ASP.NET...
Microsoft ASP.NET Core and Visual Studio Security Vulnerabilities
Microsoft ASP.NET Core is a framework of cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web applications, Internet of Things applications, and mobile backends. A security vulnerability exists in Microsoft ASP.NET Core and Visua...
The vulnerability of the ASP.NET Core software platform, related to errors in request processing, allows a hacker to cause a service failure.
The vulnerability of the ASP.NET Core software platform is related to errors in request processing. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending specially crafted requests to the ASP.NET Core application...
CVE-2020-0645
A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server Tampering Vulnerability'...
Microsoft ASP.NET Core Elevation of Privilege Vulnerability (CNVD-2018-00899)
Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft Corporation USA. The framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. An elevation of privilege vulnerability exists in Microsoft ASP.NET Core versio...
Microsoft ASP.NET Core Spoofing Vulnerability
Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web One applications, IoT applications, and mobile backends. A spoofing vulnerability exists in Microsoft ASP.NET Core, which stems from the program...
Microsoft Office Web Apps Remote Code Execution Vulnerability (3032328)
This host is missing an important security update according to Microsoft Bulletin MS15-012. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
Microsoft Office Web Apps Remote Code Execution Vulnerabilities (3017301)
This host is missing a critical security update according to Microsoft Bulletin MS14-081. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Multiple Microsoft web applications crossite scripting
Insufficient HTML sanitization...
Microsoft Web Services on Devices API Remote Code Execution Vulnerability (973565)
This host is missing a critical security update according to Microsoft Bulletin MS09-063. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Windows Live Spaces A Fake Pharma Target
Cybercrime affiliates of unlicensed pharmaceutical websites have begun moving on from attacks purely designed to poison Google search engine results, and are now targeting Microsoft’s web properties. Read the full article. The Register...
MS09-037: Description of the security update for Windows Media Player: August 11, 2009
None None...
Microsoft IIS 3.0/4.0 / Microsoft Personal Web Server 2.0/3.0/4.0 - ASP Alternate Data Streams
source: https://www.securityfocus.com/bid/149/info Microsoft IIS and other NT webservers contain a vulnerability that allows remote users to obtain the source code for an ASP file. When one appends ::$DATA to an asp being requested, the ASP source will be returned, instead of executing the ASP. F...
