msxml4-remediation

MSXML 4.0 Remediation PowerShell Microsoft XML Core Services MSXML 4.0 와 관련된 보안 결과를 수정하는 PowerShell 스크립트입니다. MSXML 4.0은 지원이 종료되었으며 취약점 스캐너에서 흔히 플래그됩니다. 이 스크립트는 MSXML 4의 .dll 파일을 등록 해제하고 이름을 변경합니다. 이렇게 하면 취약점이 수정되어 더 이상 Qualys 스캔에 나타나지 않습니다. 배경 MSXML 4.0은 EOL지원 종료 상태이며 현재는 주로 MSXML 6을 사용합니다. 이 스크립...

EUVD-2019-9640

Malware in sbrugna...

EUVD-2018-20325

Malware in sbrugna...

CVE-2019-1060

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'...

CVE-2019-0793

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0795...

CVE-2019-0791

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0792, CVE-2019-0793, CVE-2019-0795...

CVE-2019-0795

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0793...

Arbitrary Code Execution

HtmlUnit is vulnerable to Arbitrary Code Execution. The vulnerability exists in the transform function in XSLProcessor.java due to lack of enabling the FEATURESECUREPROCESSING configuration in the MSXML XSLProcessor which allows an attacker to inject and execute arbitrary code when visiting an...

GHSA-37VQ-HR2F-G7H7 HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL

Summary HtmlUnit 3.8.0 are vulnerable to Remote Code Execution RCE via XSTL, when browsing the attacker’s webpage Details Vulnerability code location: org.htmlunit.activex.javascript.msxml.XSLProcessortransformorg.htmlunit.activex.javascript.msxml.XMLDOMNode The reason for the vulnerability is th...

MS02-008: XMLHTTP Control in MSXML 2.6 Can Allow Access to Local Files

For additional information about this vulnerability, click the following article numbers to view the articles in the Microsoft Knowledge Base: 317244 MS02-008: XMLHTTP Control in MSXML 4.0 Can Allow Access to Local Files318203 MS02-008: XMLHTTP Control in MSXML 3.0 Can Allow Access to Local...

Remote code execution

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'...

CVE-2019-1060

Technical details for CVE-2019-1060 are not provided in the supplied documents. Public information about the MSXML RCE vulnerability is not included here; monitor for updates in the connected KB/MSRC sources.

CVE-2019-1060: Improper Restriction of XML External Entity Reference

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'...

Microsoft Windows Multiple Vulnerabilities (KB4520010)

This host is missing a critical security update according to Microsoft KB4520010 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2019-1057

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploited the vulnerability could run malicious code remotely to take control of the user’s system. To exploit the vulnerability, an attacker could hos...

Remote code execution

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'...

CVE-2019-1057

CVE-2019-1057 applies to the Microsoft XML Core Services MSXML parser. A remote code execution vulnerability occurs when the MSXML parser processes untrusted user input; an attacker could entice a user to visit a crafted website, triggering remote code execution and potentially take control of th...

CVE-2019-1057: Improper Restriction of XML External Entity Reference

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploited the vulnerability could run malicious code remotely to take control of the user’s system. To exploit the vulnerability, an attacker could hos...

Microsoft Windows Multiple Vulnerabilities (KB4493475)

This host is missing a critical security update according to Microsoft KB4493475 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4493509)

This host is missing a critical security update according to Microsoft KB4493509 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...