4115 matches found
KLA10476 Code execution vulnerability in Microsoft products
Buffer overflow was found in Microsoft products. By exploiting this vulnerability malicious users execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packets related to Telnet service. Original advisories MS advisory CVE-2015-0014 Related products...
MS15-001: Vulnerability in Windows Application Compatibility cache could allow elevation of privilege: January 13, 2015
None None...
MS15-007: Vulnerability in Network Policy Server RADIUS implementation could cause denial of service: January 13, 2015
None None...
MS15-003: Vulnerability in Windows User Profile Service Could Allow Elevation of Privilege (3021674)
The remote Windows host is affected by a privilege escalation vulnerability due to improper validation of user privilege in the Windows User Profile Service ProfSvc. A local attacker, with a specially crafted application, can load registry hives associated with other user accounts to execute...
MS15-004: Description of the security update for Windows: January 13, 2015
None None...
Microsoft Windows VBScript Remote Code Execution Vulnerability (3016711)
This host is missing a critical security update according to Microsoft Bulletin MS14-084. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Issue with Hyper-V Reports in MP builds 7.0.0.1911 and 7.0.0.1913
Challenge The following Hyper-V reports show no performance data: Performance Forecast for Hyper-V Clusters Performance Forecast for Hyper-V Storage Host Failure Modelling What-If VM Deployment Planning model existing VMs What-If VM Deployment Planning manual resource entry Virtual Machines...
Microsoft SQL Server Multiple Vulnerabilities (MS14-044)
Microsoft SQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
HP Data Protector EXEC_INTEGUTIL Remote Code Execution
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = GreatRanking include Msf::Exploit::Remote::Tcp include...
openSUSE Security Update : sssd (openSUSE-SU-2014:1407-1)
sssd was updated to new upstream release 1.12.2 bugfix release, bnc900159 Changes : - Fixed a regression where the IPA provider did not fetch User Private Groups correctly - An important bug in the GPO access control which resulted in a wrong principal being used, was fixed. - Several new options...
Microsoft Windows Secure Channel Remote Code Execution Vulnerability (2992611)
This host is missing a critical security update according to Microsoft Bulletin MS14-066. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS14-066: Vulnerability in Schannel Could Allow Remote Code Execution (2992611)
The remote Windows host is affected by a remote code execution vulnerability due to improper processing of packets by the Secure Channel Schannel security package. An attacker can exploit this issue by sending specially crafted packets to a Windows server. C Tenable Network Security, Inc...
MS14-071: Vulnerability in Windows Audio Service Could Allow Elevation of Privilege (3005607)
The remote Windows host is affected by a vulnerability in the Windows Audio service component that allows privilege escalation. A remote attacker could exploit this vulnerability to elevate privileges but not execute code. C Tenable Network Security, Inc. include"compat.inc"; if description...
Microsoft Windows OLE Object Handling Code Execution Vulnerabilities (3011443)
This host is missing a critical security update according to Microsoft Bulletin MS14-064. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows Remote Desktop Protocol Security Feature Bypass Vulnerability (3003743)
This host is missing an important security update according to Microsoft Bulletin MS14-074. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Window Audio Service Privilege Escalation Vulnerability (3005607)
This host is missing an important security update according to Microsoft Bulletin MS14-071. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2014-4077
CVE-2014-4077: Microsoft IME (Japanese) privilege escalation via IMJPDCT.EXE, allowing sandbox bypass when processing crafted PDF files. Affected: Windows XP/Vista/2003/2008/7 with Office 2007/2010/2013 suites; exploited in the wild (2014). Mitigation: apply MS14-078 updates. Connected sources co...
MS14-076: Vulnerability in Internet Information Services (IIS) could allow security feature bypass: November 11, 2014
None None...