Microsoft Windows Privilege Elevation Vulnerabilities (3060716)

This host is missing an important security update according to Microsoft Bulletin MS15-090. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Mount Manager Privilege Elevation Vulnerability (3082487)

This host is missing an important security update according to Microsoft Bulletin MS15-085. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS15-087: Vulnerability in UDDI services could allow elevation of privilege: August 11, 2015

Resolves a vulnerability in Windows that could allow elevation of privilege if an attacker engineered a cross-site scripting XSS scenario by inserting a malicious script into a webpage search parameter.Summary This security update resolves a vulnerability in Microsoft Windows. The vulnerability...

Microsoft SQL Server Privilege Vulnerability

Microsoft SQL Server is the United States Microsoft Microsoft company develops and maintains a set of applications in the Microsoft Windows system under the large commercial database system. An elevation of privilege vulnerability exists in Microsoft SQL Server, which can be exploited by an...

Microsoft ATM Font Driver Privilege Elevation Vulnerability (3077657)

This host is missing an important security update according to Microsoft Bulletin MS15-077. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel-Mode Driver Privilege Elevation Vulnerabilities (3070102)

This host is missing an important security update according to Microsoft Bulletin MS15-073. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Graphics Component Privilege Elevation Vulnerability (3069392)

This host is missing an important security update according to Microsoft Bulletin MS15-072. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows OLE Privilege Elevation Vulnerability (3072633)

This host is missing an important security update according to Microsoft Bulletin MS15-075. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Remote Procedure Call Privilege Elevation Vulnerability (3067505)

This host is missing an important security update according to Microsoft Bulletin MS15-076. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows NETLOGON Privilege Elevation Vulnerability (3068457)

This host is missing an important security update according to Microsoft Bulletin MS15-071. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

IBM WebSphere Application Server and WebSphere Virtual Enterprise Local Privilege Vulnerability

IBM WebSphere Application Server WAS and WebSphere Virtual Enterprise WVE are both products of IBM Corporation, U.S.A. WAS is an application server product; WVE is a set of application server virtualization solutions. The IBM WebSphere Application Server and WebSphere Virtual Enterprise local...

Orchard CMS 1.7.3/1.8.2/1.9.0 - Persistent Cross-Site Scripting

----------------- Background ----------------- Orchard is a free, open source, community-focused content management system written in ASP.NET platform using the ASP.NET MVC framework. Its vision is to create shared components for building ASP.NET applications and extensions, and specific...

Orchard CMS 1.9.0 / 1.8.2 / 1.7.3 Cross Site Scripting

----------------- Background ----------------- Orchard is a free, open source, community-focused content management system written in ASP.NET platform using the ASP.NET MVC framework. Its vision is to create shared components for building ASP.NET applications and extensions, and specific...

Ubuntu overlayfs privilege elevation

Added: 06/26/2015 CVE: CVE-2015-1328 BID: 75206 Background Overlayfs is a type of file system for Linux which implements a union mount. Problem In Ubuntu, overlayfs fails to correctly check file permissions when creating new files in the upper filesystem directory. This can be exploited by an...

Ubuntu overlayfs privilege elevation

Added: 06/26/2015 CVE: CVE-2015-1328 BID: 75206 Background Overlayfs is a type of file system for Linux which implements a union mount. Problem In Ubuntu, overlayfs fails to correctly check file permissions when creating new files in the upper filesystem directory. This can be exploited by an...

Ubuntu overlayfs privilege elevation

Added: 06/26/2015 CVE: CVE-2015-1328 BID: 75206 Background Overlayfs is a type of file system for Linux which implements a union mount. Problem In Ubuntu, overlayfs fails to correctly check file permissions when creating new files in the upper filesystem directory. This can be exploited by an...

Ubuntu overlayfs privilege elevation

Added: 06/26/2015 CVE: CVE-2015-1328 BID: 75206 Background Overlayfs is a type of file system for Linux which implements a union mount. Problem In Ubuntu, overlayfs fails to correctly check file permissions when creating new files in the upper filesystem directory. This can be exploited by an...

CVE-2015-1768

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 allows local users to gain privileges or cause a denial of service memory corruption via a crafted application, aka "Win32k Memory Corruption Elevation of Privilege Vulnerability."...

CVE-2015-1739

Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."...

MS15-063: Vulnerability in Windows Kernel Could Allow Elevation of Privilege (3063858)

The remote Windows host is affected by a privilege escalation vulnerability due to improper validation of user-supplied input to the Microsoft Windows LoadLibrary. A remote attacker can exploit this vulnerability by convincing a user to place a specially crafted dynamic linked library dll file in...