15461 matches found
Microsoft Windows multiple security vulnerabilities
XML services information leakage, IPv6 DoS, Direct2D memory corruption, .Net privilege escalation, VBScript code execution...
Microsoft XML Core Services CVE-2014-0266 Information Disclosure Vulnerability
Description Microsoft XML Core Services MSXML is prone to an information-disclosure vulnerability. An attacker can leverage this issue to read files on the local file system or obtain sensitive information; this may aid in other attacks. Attackers can exploit this issue by enticing an unsuspectin...
Microsoft Windows Graphics Component CVE-2014-0263 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file or webpage. A successful exploit may allow arbitrary code to run in the context of the currently logged-in user. Failed...
Microsoft Windows TCP/IP IPv6 Router Advertisement Remote Denial of Service Vulnerability
Description Microsoft Windows TCP/IP IPv6 protocol implementation is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition. Technologies Affected Microsoft Windows 8 for 32-bit...
Asseco SEE iBank FX Client 2.0.9.3 - Local Privilege Escalation
Asseco SEE iBank FX Client 2.0.9.3 - Local Privilege Escalation Asseco SEE iBank FX Client = 2.0.9.3 Local Privilege Escalation Vulnerability Vendor: Asseco SEE Product web page: http://www.asseco.com Affected version: 2.0.9.3 Build 22.06.2011 - Desktop/Enterprise Edition 1.2 1.1.5.1270 Service...
Microsoft Windows Printer Spooler GetPrinterData Denial Of Service - Ver2 (CVE-2006-6296)
A denial-of-service vulnerability has been reported in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
NCH Software Inventoria 3.45 Cross Site Scripting Vulnerability
NCH Software Inventoria version 3.45 suffers from a cross site scripting vulnerability. NCH Software Inventoria 3.45 id param Reflected Cross-Site Scripting Vulnerability Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 3.45 Summary: Inventoria is a business...
NCH Software Inventoria 3.45 (id param) Reflected Cross-Site Scripting Vulnerability
Summary Inventoria is a business inventory management and stock control software that allows you to manage and monitor your inventory to help streamline your operations and boost profits. Description The application suffers from a reflected XSS issue due to a failure to properly sanitize...
Microsoft Windows WinVerifyTrust PE Validation Security Bypass (MS13-098; CVE-2013-3900)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way the WinVerifyTrust function handles Windows Authenticode signature verification for portable executable PE files. A remote attacker could trigger this flaw by sending a...
sstp-discover NSE Script
Check if the Secure Socket Tunneling Protocol is supported. This is accomplished by trying to establish the HTTPS layer which is used to carry SSTP traffic as described in: - Current SSTP server implementations: - Microsoft Windows Server 2008/Server 2012 - MikroTik RouterOS - SEIL Example...
CVE-2014-0262
The CVE-2014-0262 issue affects Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1, specifically the Win32k.sys kernel-mode driver. The vulnerability arises during the processing of window handles, where thread-owned objects are not properly considered, enabling local privilege escalation via...
Microsoft Windows Kernel-Mode Drivers Privilege Escalation Vulnerability (2913602)
This host is missing an important security update according to Microsoft Bulletin MS14-003 SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows security vulnerabilities
Privilege escalations via NDProxy and win32k...
Microsoft Windows Kernel-Mode Drivers Privilege Escalation Vulnerability (2913602)
This host is missing an important security update according to Microsoft Bulletin MS14-003 OpenVAS Vulnerability Test $Id: secpodms14-003.nasl 34348 2014-01-15 08:49:46Z jan$ Microsoft Windows Kernel-Mode Drivers Privilege Escalation Vulnerability 2913602 Authors: Antu Sanadi Copyright: Copyright...
Microsoft Windows Kernel 'Win32k.sys' CVE-2014-0262 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with escalated privileges. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Conferenci...
USB Malware Targeting Siemens Control Software (Update C)
Overview VirusBlokAda, an antivirus vendor based in Belarus, announcedVirusBlokAda, http://www.anti-virus.by/en/tempo.shtml, website last visited July 15, 2010. the discovery of malware that uses a zero-day vulnerability in Microsoft Windows processing of shortcut files. The malware utilizes this...
[MoonSols] Windows Memory Toolkit
MoonSols Windows Memory Toolkit is a powerful toolkit containing all the utilities needed to perform any kind of memory acquisition or conversion during an incident response, or a forensic analysis for Windows desktops, servers or virtualized environment. The version 2.0 is a refresh and updated...
Microsoft Indexing Service ActiveX Memory Corruption (MS09-057) - Ver2 (CVE-2009-2507)
The Microsoft Windows Indexing Service is a base service that extracts content from files and constructs an indexed catalog to facilitate efficient and rapid searching. A remote code execution vulnerability has been reported in the Microsoft Indexing Service. The vulnerability is caused by an...
Design/Logic Flaw
Microsoft Windows Movie Maker 2.1.4026.0 on Windows XP SP3 allows remote attackers to cause a denial of service application crash via a crafted .wav file, as demonstrated by movieMaker.wav...
CVE-2013-4858
CVE-2013-4858 affects Microsoft Windows Movie Maker 2.1.4026.0 on Windows XP SP3. A crafted WAV file can trigger an application crash, causing a denial of service. The vulnerability is described consistently across sources (NVD entry and OpenVAS NASL), citing the movieMaker.wav payload as the exp...