3251 matches found
Microsoft Windows VMSwitch Information Disclosure Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows VMSwitch. The following products and editions are affected:Windows 10 Version 1803 for x64-based Systems,Windows 10...
PhreeBooks 5.2.3 Remote Code Execution
Exploit Title: PhreeBooks 5.2.3 - Remote Code Execution Date: 22 Jan 2021 Exploit Author: Kr0ff Vendor Homepage: https://www.phreesoft.com/ Software Link: https://sourceforge.net/projects/phreebooks/ Version: 5.2.3 Tested on: Windows Server 2016 !/usr/bin/env python3 ''' DESCRIPTION: - PhreeBooks...
Security Updates for Microsoft SharePoint Server 2016 (January 2021)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-1641,...
Microsoft Windows Multiple Vulnerabilities (KB4598243)
This host is missing a critical security update according to Microsoft KB4598243 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Update for Microsoft SharePoint Enterprise Server 2016 (KB4493163) farm-deployment
A security vulnerability exists in Microsoft SharePoint Enterprise Server 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Description of the security update for SharePoint Enterprise Server 2016: January 12, 2021
None None...
Microsoft Diagnostics Hub Standard Collector Service Control Error Vulnerability
Microsoft Diagnostics Hub Standard Collector Service is a Win32 service from Microsoft USA. It is used to collect real-time ETW events and process them. An access control error vulnerability exists in Microsoft Diagnostics Hub Standard Collector Service. The following products and versions are...
Microsoft Hyper-V Security Vulnerability
Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A security vulnerability exists in Microsoft Hyper-V. The following products and editions are affected:Windows Server 2012 R2 Server Core...
Microsoft Windows Print Spooler Components Access Control Error Vulnerability
Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Windows Print Spooler Components. The following products and editions are affected:Windows Server 2012 R2 Server Core...
Microsoft Graphics Component Information Disclosure Vulnerability
Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Graphics Component. The following products and versions are affected:Windows Server 2016 Server Core installation,Windows Server 2016,Windows 10...
Microsoft Windows Bluetooth Service Security Vulnerability
Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Bluetooth Service. The following products and versions are affected:Windows Server, version 1909 Server Core installation,Windows 10 Version 1909 for...
Microsoft SQL Server SQL Injection Vulnerability
Microsoft SQL Server is a large commercial database system from Microsoft that is used under Microsoft Windows. A SQL injection vulnerability exists in Microsoft SQL Server. The following products and versions are affected:Microsoft SQL Server 2019 for x64-based Systems GDR,Microsoft SQL Server...
Microsoft Windows Remote Procedure Call Runtime Security Vulnerability
Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Remote Procedure Call Runtime. The following products and editions are affected:Windows...
Microsoft Windows Kernel Elevation of Privilege Vulnerability (CVE-2020-17008)
Microsoft Windows is prone to an elevation of privilege vulnerability. This VT has been deprecated and replaced by the following VTs covering the new CVE-2021-1648: - OID: 1.3.6.1.4.1.25623.1.0.817573 - OID: 1.3.6.1.4.1.25623.1.0.817569 - OID: 1.3.6.1.4.1.25623.1.0.817568 SPDX-FileCopyrightText:...
KB4598243: Windows 10 Version 1607 and Windows Server 2016 January 2021 Security Update
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...
Wynis - Audit Windows Security With Best Practice
Just a powershell scripts for auditing security with CIS BEST Practices Windows 10 and Window Server 2016 You just need to run the script, it will create a directory named : AUDITCONF%DATE% The directory output will contain the files belows: -Antivirus-%COMPUTERNAME% : List installed Antivirus...
Patch Tuesday, Good Riddance 2020 Edition
Microsoft today issued its final batch of security updates for Windows PCs in 2020, ending the year with a relatively light patch load. Nine of the 58 security vulnerabilities addressed this month earned Microsofts most-dire "critical" label, meaning they can be abused by malware or miscreants to...
2020-12 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4593226)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Security Update for Microsoft SharePoint Enterprise Server 2016 (KB4486721) farm-deployment
A security vulnerability exists in Microsoft SharePoint Enterprise Server 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...