PT-2016-1237

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services ADFS 3.0 in Microsoft Windows Server 2012 R2 Description The issue is related to the forms-based authentication implementation in Active Directory Federation Services ADFS, which allows remote attackers to...

PT-2016-1238

Name of the Vulnerable Software and Affected Versions Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows 10 Description The issue is related to the Remote Desktop Protocol RDP implementation, which allows remote authenticated users to execute...

PT-2016-1172

Name of the Vulnerable Software and Affected Versions Windows Reader versions in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Description The issue is related to insufficient data validation in the Windows Reader component, allowing remote attackers to execute arbitrary...

CVE-2015-6125: Undefined Security Weakness

Use-after-free vulnerability in the DNS server in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests, aka "Windows DNS Use After Free Vulnerability."...

PT-2015-2957

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 SP1 Microsoft Windows Server 2012 Gold Microsoft Windows Server 2012 R2 Description The issue is related to a use-after-free vulnerability in the DNS server of Microsoft Window...

Microsoft Windows Winsock Elevation of Privilege Vulnerability (3104521)

This host is missing an important security update according to Microsoft Bulletin MS15-119. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2015-2683

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Description The issue is caused by a buffer overflow in the Network Driver Interface Standard NDIS implementation, allowing local users to gain...

Microsoft Windows JScript and VBScript Remote Code Execution Vulnerability (3089659)

This host is missing a critical security update according to Microsoft Bulletin MS15-108. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

KLA10674 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improper information...

Denial of service

Active Directory in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service service outage by creating multiple machine accounts, aka "Active Directory Denial of Service Vulnerability."...

CVE-2015-2535

Active Directory in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service service outage by creating multiple machine accounts, aka "Active Directory Denial of Service Vulnerability."...

CVE-2015-2535

CVE-2015-8467 affects Samba 4.x servers configured as AD DCs. The flaw in dsdb/samdb/ldb_modules/samldb.c allows remote authenticated users to bypass administrative privileges when creating machine accounts, by exploiting a domain that contains both a Samba DC and a Windows DC. This is related to...

CVE-2015-2535: Undefined Security Weakness

Active Directory in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service service outage by creating multiple machine accounts, aka "Active Directory Denial of Service Vulnerability."...

Microsoft Windows Kernel Mode Driver CVE-2015-2517 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Avaya Meeting Exchange - Client Registration Server 6.0 Avaya Meeting Exchange -...

PT-2015-2001

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows Server 2012 Gold and R2 Description The issue is related to errors in the code of the Active Directory service in Windows. It allows a remote authenticated user to cause a denial o...

Cross site scripting

Cross-site scripting XSS vulnerability in uddi/search/frames.aspx in the UDDI Services component in Microsoft Windows Server 2008 SP2 and BizTalk Server 2010, 2013 Gold, and 2013 R2 allows remote attackers to inject arbitrary web script or HTML via the search parameter, aka "UDDI Services Elevati...

CVE-2015-2475

Cross-site scripting XSS vulnerability in uddi/search/frames.aspx in the UDDI Services component in Microsoft Windows Server 2008 SP2 and BizTalk Server 2010, 2013 Gold, and 2013 R2 allows remote attackers to inject arbitrary web script or HTML via the search parameter, aka "UDDI Services Elevati...

PT-2015-5768

Name of the Vulnerable Software and Affected Versions Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 affected versions not specified Description The issue concerns an untrusted search path vulnerability in the client in Remote Desktop Protocol RDP that allows local users to gain privilege...

CVE-2015-2475: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in uddi/search/frames.aspx in the UDDI Services component in Microsoft Windows Server 2008 SP2 and BizTalk Server 2010, 2013 Gold, and 2013 R2 allows remote attackers to inject arbitrary web script or HTML via the search parameter, aka "UDDI Services Elevati...

CVE-2015-2473: Undefined Security Weakness

Untrusted search path vulnerability in the client in Remote Desktop Protocol RDP through 8.1 in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp...