8125 matches found
KB5014742: Windows 7 and Windows Server 2008 R2 Security Update (June 2022)
The remote Windows host is missing security update 5014742. It is, therefore, affected by multiple vulnerabilities - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-3016...
Microsoft Hyper-V 竞争条件问题漏洞
Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. Microsoft Hyper-V is vulnerable to a competitive conditions issue. The following products and versions are affected:Windows 10 Version 21H2 for...
KB5014678: Windows Server 2022 Security Update (June 2022)
The remote Windows host is missing security update 5014678. It is, therefore, affected by multiple vulnerabilities - Windows Kerberos Elevation of Privilege Vulnerability CVE-2022-30165 - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability CVE-2022-30139,...
KB5014710: Windows 10 LTS 1507 Security Update (June 2022)
The remote Windows host is missing security update 5014710. It is, therefore, affected by multiple vulnerabilities - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability CVE-2022-30139, CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-3015...
The vulnerability of the Windows Hyper-V hardware virtualization system for Windows operating systems arises from synchronization errors when using shared resources (“Race Conditions”). This allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Windows Hyper-V hardware virtualization system for Windows operating systems arises from synchronization errors when using shared resources (“Race Conditions”). This allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Fedora: Security Advisory for cups (FEDORA-2022-09a89bc265)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: cups-2.4.2-1.fc36
CUPS printing system provides a portable printing layer for UNIX=EF=BF=BD=EF=BF=BD operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...
What Counts as “Good Faith Security Research?”
The U.S. Department of Justice DOJ recently revised its policy on charging violations of the Computer Fraud and Abuse Act CFAA, a 1986 law that remains the primary statute by which federal prosecutors pursue cybercrime cases. The new guidelines state that prosecutors should avoid charging securit...
The vulnerability of the skip_range() function implementation in the Vim text editor allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the skiprange function in the Vim text editor is related to the use of an invalid pointer with the “V:” parameter in the Ex mode. Exploiting this vulnerability could allow a attacker to execute arbitrary code or cause a service failure using a specially created file...
bbs-go 跨站脚本漏洞
bbs-go is an open source community system built using the Go language. bbs-go 3.3.0 and earlier versions have a cross-site scripting vulnerability that stems from the lack of filtering and escaping of user data in the v-html tag of vue used by the application. An attacker could use this...
Multiple vulnerabilities in Fuji Electric V-SFT
Overview Multiple vulnerabilities listed below exist in the simulator module contained in the graphic editor "V-SFT" provided by FUJI ELECTRIC CO., LTD. Out-of-bounds Write CWE-787 - CVE-2022-30538 Out-of-bounds Read CWE-125 - CVE-2022-30546 Heap-based Buffer Overflow CWE-122 - CVE-2022-26302 Use...
Multiple vulnerabilities in Fuji Electric V-SFT, V-Server and V-Server Lite
Overview Multiple vulnerabilities listed below exist in the simulator module contained in the graphic editor "V-SFT" and the remote monitoring software "V-Server" and "V-Server Lite" provided by FUJI ELECTRIC CO., LTD. Out-of-bounds Read in V-SFT CWE-125 - CVE-2022-29506 Out-of-bounds Read in...
Fuji Electric V-Server 缓冲区错误漏洞
Fuji Electric V-Server and Fuji Electric V-Server Lite are both products of Fuji Electric, Japan.Fuji Electric V-Server is a suite of software for collecting and managing real-time field data.Fuji Electric V-Server Lite is a remote monitoring software for industrial environments. Server Lite is a...
The vulnerability of Windows Hyper-V’s hardware virtualization technology allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...
The vulnerability of Windows Hyper-V’s hardware virtualization technology allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...
CVE-2018-7640
An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a Monochrome case, aka case 1...
NVIDIA nvwgf2umx_cfg.dll shader DCL_RESOURCE_STRUCTURED memory corruption vulnerability
Summary A memory corruption vulnerability exists in the shader DCLRESOURCESTRUCTURED functionality of NVIDIA D3D10 Driver, version 496.76, 30.0.14.9676. A specially-crafted executable/shader file can lead to an out-of-bounds write. This vulnerability potentially could be triggered from guest...
NVIDIA nvwgf2umx_cfg.dll shader DCL_UNORDERED_ACCESS_VIEW_STRUCTURED memory corruption vulnerability
Summary A memory corruption vulnerability exists in the shader DCLUNORDEREDACCESSVIEWSTRUCTURED functionality of NVIDIA D3D10 Driver version 496.76, 30.0.14.9676. A specially-crafted executable / shader file can lead to memory corruption. This vulnerability potentially could be triggered from gue...
