Microsoft DCOM RPC CVE-2015-2370 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevate privileges on a targeted system. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5.1.0 Avaya Meeting Exchange - Client...

Fedora Update for rt FEDORA-2015-4698

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : kernel-rt (RHSA-2015:1139)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1139 advisory. - Kernel: fs: isofs: infinite loop in CE record entries CVE-2014-9420 - kernel: use-after-free during key garbage collection CVE-2014-9529 -...

Airties RT-210 Multiple Parameter Cross-Site Scripting Vulnerability

Airties RT-210 is a router product from Turkey. The Airties RT-210's web interface ddns.stm file fails to adequately filter the 'ddnsdomainame' and 'ddnsaccount' parameters, allowing remote attackers to exploit vulnerabilities to inject malicious script or HTML code, which can be used to obtain...

CVE-2015-4679

Multiple cross-site scripting XSS vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the 1 ddnsdomainame or 2 ddnsaccount parameter to ddns.stm...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the 1 ddnsdomainame or 2 ddnsaccount parameter to ddns.stm...

CVE-2015-4679

CVE-2015-4679 affects the Airties RT-210 router, where the web interface ddns.stm fails to properly filter the parameters ddns_domainame and ddns_account, enabling multiple cross-site scripting (XSS) vulnerabilities. Exploitation allows remote attackers to inject arbitrary script/HTML via the aff...

CVE-2015-4679

Multiple cross-site scripting XSS vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the 1 ddnsdomainame or 2 ddnsaccount parameter to ddns.stm...

CVE-2015-1719

The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to obtain sensitive information from kernel memory...

Design/Logic Flaw

Use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows user-assisted remote attackers to execute arbitrary code via a...

Design/Logic Flaw

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges...

Design/Logic Flaw

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges...

Null pointer dereference

The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to gain privileges or cause a denial of service NUL...

Design/Logic Flaw

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges...

Design/Logic Flaw

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges...

CVE-2015-1725

Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafte...

CVE-2015-1770

Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability."...

CVE-2015-1770

Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka “Microsoft Office Uninitialized Memory Use Vulnerability.” Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

PT-2015-1365 · Microsoft · Windows 8 +8

Name of the Vulnerable Software and Affected Versions: Windows Server 2003 versions SP2 and R2 SP2 Windows Vista version SP2 Windows Server 2008 versions SP2 and R2 SP1 Windows 7 version SP1 Windows 8 Windows 8.1 Windows Server 2012 versions Gold and R2 Windows RT versions Gold and 8.1 Descriptio...

Microsoft Windows Kernel Mode Driver CVE-2015-1720 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1 Microsof...