462 matches found
Microsoft Windows 'Win32k.sys' CVE-2013-1254 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges and to read arbitrary amounts of kernel memory. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5.0 Avaya...
Microsoft Windows 'Win32k.sys' CVE-2013-1248 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges and to read arbitrary amounts of kernel memory. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5.0 Avaya...
Aloaha Credential Provider Monitor 5.0.226 - Local Privilege Escalation
Aloaha Credential Provider Monitor 5.0.226 Local Privilege Escalation Vulnerability Vendor: Aloaha Software - Wrocklage Intermedia GmbH Product web page: http://www.aloaha.com Affected version: 5.0.226 Summary: Aloaha Credential Provider represents one of the most dramatic changes in the Windows...
phlyLabs phlyMail Lite 4.03.04 XSS / Path Disclosure
phlyLabs phlyMail Lite 4.03.04 Path Disclosure and Stored XSS Vulnerabilities input type="hidden" name="M...
phlyLabs phlyMail Lite 4.03.04 (go param) Open Redirect Vulnerability
Summary phlyMail offers you an interface in the browser to have access to your emails, contacts, appointments, tasks, files and bookmakrs from anyhwere, where you have internet access. This can be your home, workplace, train station, abroad, offroad, in the woods or your own backyard. Description...
PT-2013-2062
Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 and R2 SP1 Microsoft Windows 7 Gold and SP1 Description A remote code execution issue exists in the way that Microsoft Windows Print Spooler handles specially crafted print jobs, potentially allowing attackers ...
Microsoft Windows Print Spooler Remote Code Execution Vulnerability (2769369)
This host is missing a critical security update according to Microsoft Bulletin MS13-001. OpenVAS Vulnerability Test $Id: secpodms13-001.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Print Spooler Remote Code Execution Vulnerability 2769369 Authors: Veerendra G.G Copyright: Copyright c...
Microsoft Windows Security Feature Bypass Vulnerability (2785220)
This host is missing an important security update according to Microsoft Bulletin MS13-006. OpenVAS Vulnerability Test $Id: secpodms13-006.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Security Feature Bypass Vulnerability 2785220 Authors: Veerendra G.G Copyright: Copyright c 2013 SecPod...
Sony PC Companion 2.1 - 'Admin_RemoveDirectory()' Unicode Stack Buffer Overflow
Sony PC Companion 2.1 AdminRemoveDirectory Stack-based Unicode Buffer Overload SEH Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830 2.10.108 Production 26.1, Build 818 Summary: PC Companion is a computer...
Microsoft Windows TrueType Font (TTF)远程代码执行漏洞（MS12-078)
BUGTRAQ ID: 56842 CVECAN ID: CVE-2012-4786 Microsoft Windows是Microsoft开发的Windows是目前世界上用户最多、并且兼容性最强的操作系统。 Microsoft Windows未正确处理TrueType Font TTF文件而存在安全漏洞。通过诱使用户浏览恶意网站或打开恶意文件，未经身份验证的远程攻击者可利用此漏洞在内核态中执行任意代码。 0 Microsoft Windows RT Microsoft Windows 8 Microsoft Windows 7 Microsoft Windows XP...
Microsoft Windows DirectPlay Remote Code Execution Vulnerability (2770660)
This host is missing an important security update according to Microsoft Bulletin MS12-082. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
PT-2012-4097
Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP3 Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 Microsoft Windows 7 Gold and SP1 Description The issue is related to a use-after-free vulnerability in the win32k.sys...
Microsoft Windows Kernel Privilege Elevation Vulnerability (2724197)
This host is missing an important security update according to Microsoft Bulletin MS12-068. OpenVAS Vulnerability Test $Id: secpodms12-068.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Windows Kernel Privilege Elevation Vulnerability 2724197 Authors: Madhuri D Copyright: Copyright c 2012 SecPod,...
PT-2012-4095
Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 and R2 SP1 Microsoft Windows 7 Gold and SP1 Description A denial of service issue exists due to the improper handling of a specially crafted session by the Microsoft Kerberos implementation. This can cause the...
Smartfren Connex EC 1261-2 UI OUC Local Privilege Escalation Vulnerability
========================================================================== Smartfren Connex EC 1261-2 UI OUC Local Privilege Escalation Vulnerability ==========================================================================...
ViArt Shop Enterprise 4.1 Arbitrary Command Executio
?php / ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability Vendor: ViArt Software Product web page: http://www.viart.com Affected version: 4.1, 4.0.8, 4.0.5 Summary: Viart Shop is a PHP based e-commerce suite, aiming to provide everything you need to run a successful on-line...
xt:Commerce VEYTON 4.0.15 (products_name_de) Script Insertion Vulnerability
Exploit for php platform in category web applications xt:Commerce VEYTON 4.0.15 productsnamede Script Insertion Vulnerability form name="XSS" method="POST"...
web@all CMS 2.0 SQL Injection
web@all CMS 2.0 order SQL Injection Vulnerability Vendor: web@all Product web page: http://www.webatall.org Affected version: 2.0 Summary: web@all is a PHP content management system CMS. If you know about it,you nearly can use it to do anything. Desc: The application suffers from an SQL Injection...
KindEditor 4.1.2 (name parameter) Reflected XSS Vulnerability
Summary KindEditor online HTML editor is a set of open source, mainly for users on the site to get WYSIWYG editing effects, developers can replace the traditional multi-line text input box textarea KindEditor rich visualization text input box. Description KindEditor is prone to a reflected...