3993 matches found
Microsoft Windows 10: Accounts: Rename administrator account
The Accounts: Rename administrator account policy setting determines whether a different account name is associated with the security identifier SID for the administrator account. Because the administrator account exists on all Windows 10 for desktop editions Home, Pro, Enterprise, and Education,...
CVE-2018-10680
Z-BlogPHP 1.5.2 has a stored Cross Site Scripting Vulnerability exploitable by an administrator who navigates to "Web site settings -- Basic setting -- Website title" and enters an XSS payload via the zbsystem/cmd.php ZCBLOGNAME parameter. NOTE: the vendor disputes the security relevance, noting ...
Microsoft Windows 10: Change the time zone
This policy setting determines which users can adjust the time zone that is used by the device for displaying the local time, which includes the device OpenVAS Vulnerability Test $Id: win10changetimezone.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Change the time zone WMI Authors:...
Microsoft Windows 10: Restore files and directories
This security setting determines which users can bypass file, directory, registry, and other persistent object permissions when they restore backed up files and directories, and it determines which users can set valid security principals as the owner of an object. OpenVAS Vulnerability Test $Id:...
Microsoft Windows 10: Replace a process level token
This policy setting determines which parent processes can replace the access token that is associated with a child process. Specifically, the Replace a process level token setting determines which user accounts can call the CreateProcessAsUser application programming interface API so that one...
Microsoft Windows 10: Act as part of the operating system
The Act as part of the operating system policy setting determines whether a process can assume the identity of any user and thereby gain access to the resources that the user is authorized to access. OpenVAS Vulnerability Test $Id: win10actaspartofos.nasl 11532 2018-09-21 19:07:30Z cfischer $ Che...
Microsoft Windows 10: Modify firmware environment values
This security setting determines who can modify firmware environment values. Firmware environment values are settings that are stored in the nonvolatile RAM of non-x86-based computers. The effect of the setting depends on the processor. On all computers, this user right is required to install or...
CVE-2018-10430
An issue was discovered in DiliCMS aka DiligentCMS 2.4.0. There is a Stored XSS Vulnerability in the fourth textbox of "System setting-site setting" of admin/index.php...
CVE-2018-10430
DiliCMS 2.4.0 has a Stored XSS vulnerability in the admin/index.php, specifically in the fourth textbox of System setting → site setting. The issue is described across multiple connected sources as a stored XSS; no exploit details are provided in the documents. The root cause and impact are limit...
Microsoft Windows: Maximum password age
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winpasswdmaxage.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Maximum password age WMI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
Microsoft Windows: Reset account lockout counter after
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winresetaccountlockoutcounter.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Reset account lockout counter after WMI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...
Microsoft Windows: Prevent the usage of OneDrive for file storage
This policy setting lets you prevent apps and features from working with files on OneDrive. If you enable this policy setting: - Users can SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Microsoft Windows 8.1: Automatically send memory dumps for OS-generated error reports
This policy setting controls whether memory dumps in support of OS-generated error reports can be sent to Microsoft automatically. This policy does not apply to error reports generated by 3rd-party products, or additional data other than memory dumps. If you enable or do not configure this policy...
Microsoft Windows: Join Microsoft MAPS
This policy setting allows you to join Microsoft MAPS. Microsoft MAPS is the online community that helps you choose how to respond to potential threats. The community also helps stop the spread of new malicious software infections. You can choose to send basic or additional information about...
CVE-2018-10235
POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php 'index' function because an attacker can control the value of $cache'setting''ucssocfg' in diy\module\member\models\Membermodel.php and write this code into the...
Code injection
POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php 'index' function because an attacker can control the value of $cache'setting''ucssocfg' in diy\module\member\models\Membermodel.php and write this code into the...
CVE-2018-10235
POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php 'index' function because an attacker can control the value of $cache'setting''ucssocfg' in diy\module\member\models\Membermodel.php and write this code into the...
Buffer overflow
There is a buffer overflow in the Hikvision Camera DS-2CD9111-S of V4.1.2 build 160203 and before, and this vulnerability allows remote attackers to launch a denial of service attack service interruption via a crafted network setting interface request...
CVE-2018-6413
There is a buffer overflow in the Hikvision Camera DS-2CD9111-S of V4.1.2 build 160203 and before, and this vulnerability allows remote attackers to launch a denial of service attack service interruption via a crafted network setting interface request...
