657 matches found
Description of the security update for the vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: May 08, 2018
Description of the security update for the vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: May 08, 2018 Summary An elevation of privilege vulnerability and an information disclosure vulnerability exist in Windows when the Win32k component...
Description of the security update for vulnerabilities in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: May 08, 2018
Description of the security update for vulnerabilities in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: May 08, 2018 Summary An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. A remote code...
Description of the security update for the remote code execution vulnerability in Windows Server 2008: June 12, 2018
Description of the security update for the remote code execution vulnerability in Windows Server 2008: June 12, 2018 Summary A remote code execution vulnerability exists in the way that Windows handles objects in memory. To learn more about the vulnerability, go to CVE-2018-8136. More Information...
Description of the security update for the Windows common log file system driver elevation of privilege vulnerability in Windows Server 2008: May 08, 2018
Description of the security update for the Windows common log file system driver elevation of privilege vulnerability in Windows Server 2008: May 08, 2018 Summary An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memor...
openssl security update
1.0.2k-12.0.1 - sha256 is used for the RSA pairwise consistency test instead of sha1 1.0.2k-12 - fix CVE-2017-3737 - incorrect handling of fatal error state - fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus 1.0.2k-11 - fix deadlock in RNG in the FIPS mode in mariadb...
openssl security and bug fix update
1.0.2k-12.0.1 - sha256 is used for the RSA pairwise consistency test instead of sha1 1.0.2k-12 - fix CVE-2017-3737 - incorrect handling of fatal error state - fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus 1.0.2k-11 - fix deadlock in RNG in the FIPS mode in mariadb...
Description of the security update for the Microsoft graphics component denial of service vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: April 10, 2018
None None...
Description of the security update for the information disclosure vulnerability in Visual Studio 2012 Update 5: April 12, 2018
Description of the security update for the information disclosure vulnerability in Visual Studio 2012 Update 5: April 12, 2018 Notice Starting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS. Summary An information disclosure...
Description of the security update for vulnerabilities in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: April 10, 2018
Description of the security update for vulnerabilities in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: April 10, 2018 Summary A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affect...
mysql: sha256_password authentication DoS via hash with large rounds value
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Security : Privileges. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
mysql: sha256_password authentication DoS via long password
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Security : Privileges. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...
mysql: sha256_password authentication DoS via hash with large rounds value
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Security : Privileges. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
SANNY Malware Delivery Method Updated in Recently Observed Attacks
Introduction In the third week of March 2018, through FireEye’s Dynamic Threat Intelligence, FireEye discovered malicious macro-based Microsoft Word documents distributing SANNY malware to multiple governments worldwide. Each malicious document lure was crafted in regard to relevant regional...
Simple IOC and Incident Response Scanner: Loki
LOKI is a free and simple IOC scanner, a complete rewrite of main analysis modules of our full featured APT Scanner THOR. IOC stands for „Indicators of Compromise“. These indicators can be derived from published incident reports, forensic analyses or malware sample collections in your Lab. LOKI...
Description of the security update for the Windows Hyper-V denial of service vulnerability in Windows Server 2008: March 13, 2018
Description of the security update for the Windows Hyper-V denial of service vulnerability in Windows Server 2008: March 13, 2018 Summary A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a...
Description of the security update for the CredSSP remote code execution vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: March 13, 2018
None None...
Description of the security update for the Windows Wireless WPA pairwise encryption key reinstallation vulnerability in WES09 and POSReady 2009: March 13, 2018
None None...
Description of the security update for the Microsoft Video Control elevation of privilege vulnerability in WES09 and POSReady 2009: March 13, 2018
None None...
Threat Analysis: ROKRAT Malware
ROKRAT also referred to as DOGcall is a family of malware that has been used by attackers originating from North Korea. The family continues to evolve and adopt techniques from other families also used by the same attack group. The ROKRAT core payload is typically deployed by a loader, which has...
Description of the security update for the StructuredQuery remote code execution vulnerability in Windows Server 2008: February 13, 2018
Description of the security update for the StructuredQuery remote code execution vulnerability in Windows Server 2008: February 13, 2018 Summary A remote code execution vulnerability exists in StructuredQuery when the software fails to properly handle objects in memory. To learn more about the...