15592 matches found
Microsoft Windows TCP Protocol Denial of Service Vulnerability (2962478)
This host is missing an important security update according to Microsoft Bulletin MS14-031. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows Graphics Component Multiple Vulnerabilities (2967487)
This host is missing a critical security update according to Microsoft Bulletin MS14-036. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows TCP/IP Protocol CVE-2014-1811 Remote Denial of Service Vulnerability
Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected system to become unresponsive, resulting in a denial-of-service condition. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura...
Microsoft Windows Graphics Component CVE-2014-1817 Memory Corruption Vulnerability
Description Microsoft Windows is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura Conferencing 6.0 SP1...
Microsoft XML Core Services CVE-2014-1816 Information Disclosure Vulnerability
Description Microsoft XML Core Services MSXML is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks. Technologies Affected Avaya Aura Conferencing 6.0 Avaya Aura Conferencing 6.0 SP1 Standar...
MS14-036: Description of the security update for Windows 8.1 and Windows Server 2012 R2: June 10, 2014
Resolves vulnerabilities in Microsoft Windows, Microsoft Office, and Microsoft Lync that could allow remote code execution if a user opens a specially crafted file or webpage.IntroductionThis security update resolves vulnerabilities in Microsoft Windows, Microsoft Office, and Microsoft Lync that...
Microsoft Windows Remote Desktop Protocol CVE-2014-0296 Security Bypass Vulnerability
Description Microsoft Windows Remote Desktop Protocol is prone to a security-bypass vulnerability. Successful exploits may allow an attacker to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Windows...
Microsoft Windows Graphics Component CVE-2014-1818 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura Conferencing 6.0 SP1...
Microsoft Windows Known Bad AutoRuns / Scheduled Tasks Deprecated
This feature is no longer part of the malware service provided by Tenable. Binary data windowsautorunsmalware.nbin...
VMware ESXi patches address a guest privilege escalation (VMSA-2014-0005)
VMware Workstation, Player, Fusion, and ESXi patches address a vulnerability in VMware Tools which could result in a privilege escalation on Microsoft Windows 8.1. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
VMSA-2014-0005: VMware Workstation, Player, Fusion, and ESXi patches address a guest privilege escalation
VMware Workstation, Player, Fusion, and ESXi patches address a vulnerability in VMware Tools which could result in a privilege escalation on Microsoft Windows 8.1. OpenVAS Vulnerability Test $Id: gbVMSA-2014-0005.nasl 6995 2017-08-23 11:52:03Z teissa $ VMSA-2014-0005: VMware Workstation, Player,...
VMSA-2014-0005 : VMware Workstation, Player, Fusion, and ESXi patches address a guest privilege escalation
a. Guest privilege escalation in VMware Tools A kernel NULL dereference vulnerability was found in VMware Tools running on Microsoft Windows 8.1. Successful exploitation of this issue could lead to an escalation of privilege in the guest operating system. VMware would like to thank Tavis Ormandy...
Microsoft Windows - Touch Injection API Local Denial of Service
// source: https://www.securityfocus.com/bid/67742/info Microsoft Windows is prone to a local denial-of-service vulnerability. A local attacker can exploit this issue to crash the affected computer, denying service to legitimate users. ifndef WIN32NOSTATUS define WIN32NOSTATUS endif include inclu...
Microsoft Windows - Touch Injection API Local Denial of Service
Microsoft Windows - Touch Injection API Local Denial of Service // source: https://www.securityfocus.com/bid/67742/info Microsoft Windows is prone to a local denial-of-service vulnerability. A local attacker can exploit this issue to crash the affected computer, denying service to legitimate user...
Microsoft Windows iSCSI Target Denial of Service (MS14-028; CVE-2014-0255)
A denial-of-service vulnerability exists in Microsoft Windows Servers where the iSCSI target role is enabled. The vulnerability is due to memory exhaustion when handling iSCSI packets. A remote, unauthenticated attacker could exploit this vulnerability by sending a large number of specially craft...
Intel Ideo Video 4.5 Memory Corruption
Exploit Title: Intel Ideo video 4.5 ir4132.ax version 4.51.16.3 Memory Corruption Date: 2014/05/12 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.microsoft.com Software Link: http://www.dll4you.com/files/ir4132.ax.html Version:...
Update to Improve Credentials Protection and Management (2871997)
This host is missing a critical security update according to Microsoft security advisory 2871997 SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
Immunity Canvas: MS14_025
Name| ms14025 ---|--- CVE| CVE-2014-1812 Exploit Pack| CANVAS Description| ms14025 Notes| CVE Name: CVE-2014-1812 VENDOR: Microsoft Commandline: runmodule ms14-025 References: https://technet.microsoft.com/library/security/ms14-025 CVE Url:...
Privilege escalation
The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly handle distribution of passwords, which allows remote authenticated users to obtain sensitive credential...
Arbitrary file deletion
The ShellExecute API in Windows Shell in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly implement file associations, which allows local...