3271 matches found
Worktime 10.20 Build 4967 Unquoted Service Path Vulnerability
Exploit Title: WorkTime 10.20 Build Build 4967 Unquoted Service Path Discovery by: Yehia Elghaly Vendor Homepage: https://www.worktime.com/ Software Link: https://www.worktime.com/download/worktimecorporate.exe Tested Version: 10.20 Build Build 4967 Vulnerability Type: Unquoted Service Path Teste...
[updated] You can update now: Microsoft patches 97 bugs including 6 zero-days and a wormable one
How time flies sometimes. Microsoft yesterday released the first patch Tuesday security updates of the year 2022. The update includes fixes for six zero-day vulnerabilities and a total of 97 bugs. This includes two Remote Code Execution RCE vulnerabilities affecting open source libraries. None of...
Description of the security update for SharePoint Enterprise Server 2016: January 11, 2022 (KB5002118)
None None...
Microsoft Windows Resilient File System 安全漏洞
Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Resilient File System ReFS. The following products and editions are affected: Windows Server 2012 R2,Windows Server 2012 R2 Server Core...
Microsoft Office 代码注入漏洞
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code injection vulnerability exists in Microsoft Office. The following products and version...
Microsoft Cryptographic 权限许可和访问控制问题漏洞
Microsoft Cryptographic is an encryption service from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Cryptographic Services with privilege permission and access control issues. The following products and versions are affected: Windows 7 for 32-bit Systems Service Pack...
Microsoft Windows 后置链接漏洞
Microsoft Windows Cleanup Manager is a cleanup manager from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Cleanup Manager. The following products and editions are affected:Windows Server 2012 R2 Server Core installation,Windows 10 Version 1809 for 32-bit...
Microsoft Windows Remote Procedure Call Runtime 缓冲区错误漏洞
Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Remote Procedure Call Runtime. The following products and editions are affected:Windows...
Microsoft Windows IKE Extension 安全漏洞
Microsoft Windows IKE Extension is a network key exchange extension from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows IKE Extension. The following products and editions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows 10...
Microsoft Exchange Server 安全漏洞
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides email access, storage, forwarding, voice mail, email filtering and screening. A security vulnerability exists in Microsoft Exchange Server. The following products and versions a...
Microsoft Windows Installer 安全漏洞
Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. The following products and versions are affected: Windows 10 Version 20...
Microsoft Windows Resilient File System 安全漏洞
Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Resilient File System ReFS. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version...
Microsoft Exchange Server 代码注入漏洞
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides email access, storage, forwarding, voicemail, email filtering and screening, and other features. A code injection vulnerability exists in Microsoft Exchange Server. The followin...
Microsoft Windows Kernel输入验证错误漏洞
Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Kernel. The following products and editions are affected: Windows 10 Version 21H1 for 32-bit Systems,Windows Server 2022,Windo...
Microsoft Windows Resilient File System 安全漏洞
Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Resilient File System ReFS. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version...
Microsoft Windows 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows Cluster Port Driver. The following products and versions are affected:Windows Server 2019,Windows Server 2019...
Windows Remote Desktop Protocol安全漏洞
Microsoft Windows Remote Desktop Protocol RDP is an application for connecting to remote Windows desktops from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Remote Desktop Protocol. The following products and versions are affected:Windows Server 2019 Server Core...
Microsoft Windows User Profile Service 后置链接漏洞
Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A backlink vulnerability exists in Microsoft Windows User Profile Service. The following products and...
KB5009546: Windows 10 Version 1607 and Windows Server 2016 Security Update (January 2022)
The remote Windows host is missing security update 5009546. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21849, CVE-2022-21850,...
HTTP Commander 3.1.9 Cross Site Scripting
Exploit Title: HTTP Commander 3.1.9 - Stored Cross Site Scripting XSS Date: 07/01/2022 Exploit Author: Oscar Sandén Vendor Homepage: https://www.element-it.com Software Link: https://www.element-it.com/downloads.aspx Version: 3.1.9 Tested on: Windows Server 2016 Description There is a stored XSS ...