SIEMENS Solid Edge ST4/ST5 WebPartHelper - ActiveX RFMSsvs!JShellExecuteEx Remote Code Execution

SIEMENS Solid Edge ST4/ST5 WebPartHelper ActiveX Control RFMSsvs!JShellExecuteEx Remote Command Execution Tested against: Microsoft Windows Server 2003 r2 sp2 Microsoft Windows XP sp3 Microsoft Windows 7 Internet Explorer 8 Software description: http://en.wikipedia.org/wiki/SolidEdge vendor site:...

ActFax RAW Server Stack Buffer Overflow

Added: 04/12/2013 BID: 57789 OSVDB: 89944 Background ActFax is a Windows-based software package that sends, receives and electronically stores faxes. Problem The ActFax RAW server is vulnerable to a boundary error when processing the @F000 data field, which could result in stack-based buffer...

Microsoft Windows Kernel本地权限提升漏洞(CVE-2013-1294)(MS13-031)

BUGTRAQ ID: 58862 CVECAN ID: CVE-2013-1294 Microsoft Windows是微软公司推出的一系列操作系统。 如果 Windows 内核不正确地处理内存中的对象，则存在一个特权提升漏洞。成功利用此漏洞的攻击者可以获得更高的特权和读取任意多次内核内存。 0 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2003 Microsoft Windows 8 Microsoft Windows 7...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2829996)

This host is missing an important security update according to Microsoft Bulletin MS13-036. OpenVAS Vulnerability Test $Id: secpodms13-036.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities 2829996 Authors: Arun Kallavi Copyright:...

MS Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability (2820917)

This host is missing an important security update according to Microsoft Bulletin MS13-033. OpenVAS Vulnerability Test $Id: secpodms13-033.nasl 5346 2017-02-19 08:43:11Z cfi $ MS Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability 2820917 Authors: Arun Kallavi Copyright:...

Microsoft Windows Active Directory Denial of Service Vulnerability (2830914)

This host is missing an important security update according to Microsoft Bulletin MS13-032. OpenVAS Vulnerability Test $Id: secpodms13-032.nasl 8276 2018-01-03 12:29:18Z asteins $ Microsoft Windows Active Directory Denial of Service Vulnerability 2830914 Authors: Antu Sanadi Copyright: Copyright ...

Microsoft Windows CSRSS CVE-2013-1295 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that exists in the Client/Server Run-time Subsystem CSRSS. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete...

Microsoft Windows Kernel CVE-2013-1284 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges and read arbitrary amounts of kernel memory. Technologies Affected Avaya CallPilot Avaya Communication Server 1000 Telephony Manager Avaya...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2807986)

This host is missing an important security update according to Microsoft Bulletin MS13-027. OpenVAS Vulnerability Test $Id: secpodms13-027.nasl 5339 2017-02-18 16:28:22Z cfi $ Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities 2807986 Authors: Arun Kallavi Copyright:...

Null pointer dereference

The NFS server in Microsoft Windows Server 2008 R2 and R2 SP1 and Server 2012 allows remote attackers to cause a denial of service NULL pointer dereference and reboot via an attempted renaming of a file or folder located on a read-only share, aka "NULL Dereference Vulnerability."...

Design/Logic Flaw

The Client/Server Run-time Subsystem CSRSS in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Reference Count Vulnerability."...

Microsoft Windows NFS Server Denial of Service Vulnerability (2790978)

This host is missing an important security update according to Microsoft Bulletin MS13-014. OpenVAS Vulnerability Test $Id: secpodms13-014.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows NFS Server Denial of Service Vulnerability 2790978 Authors: Antu Sanadi Copyright: Copyright c 2013...

PT-2013-3007 · Microsoft · Windows Xp +8

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Microsoft...

Microsoft Windows CSRSS CVE-2013-0076 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Technologies...

Microsoft Windows Print Spooler Remote Code Execution Vulnerability (2769369)

This host is missing a critical security update according to Microsoft Bulletin MS13-001. OpenVAS Vulnerability Test $Id: secpodms13-001.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Print Spooler Remote Code Execution Vulnerability 2769369 Authors: Veerendra G.G Copyright: Copyright c...

Microsoft Windows TrueType Font (TTF)远程代码执行漏洞（MS12-078)

BUGTRAQ ID: 56842 CVECAN ID: CVE-2012-4786 Microsoft Windows是Microsoft开发的Windows是目前世界上用户最多、并且兼容性最强的操作系统。 Microsoft Windows未正确处理TrueType Font TTF文件而存在安全漏洞。通过诱使用户浏览恶意网站或打开恶意文件，未经身份验证的远程攻击者可利用此漏洞在内核态中执行任意代码。 0 Microsoft Windows RT Microsoft Windows 8 Microsoft Windows 7 Microsoft Windows XP...

Microsoft Windows DirectPlay Remote Code Execution Vulnerability (2770660)

This host is missing an important security update according to Microsoft Bulletin MS12-082. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Novell NetIQ Privileged User Manager modifyAccounts Security Bypass

Added: 12/07/2012 BID: 56535 OSVDB: 87335 Background Novell NetIQ Privileged User Manager NPUM allows IT administrators to work on systems without exposing superuser administrator or supervisor passwords or root-account credentials to the administrator. Problem NetIQ Privileged User Manager 2.3.1...

TurboSoft TurboFTP Server PORT Command Buffer Overflow

Added: 11/05/2012 BID: 55764 OSVDB: 85887 Background TurboSoft TurboFTP Server is a MS Windows based file transfer server that provides FTP, FTP over SSL/TLS, and SFTP over SSH services. Problem TurboFTP Server 1.30.826 is vulnerable to a stack based buffer overflow that could allow remote code...

Microsoft Windows Kernel Privilege Elevation Vulnerability (2724197)

This host is missing an important security update according to Microsoft Bulletin MS12-068. OpenVAS Vulnerability Test $Id: secpodms12-068.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Windows Kernel Privilege Elevation Vulnerability 2724197 Authors: Madhuri D Copyright: Copyright c 2012 SecPod,...