SNMP Protocol Community String Authentication Privilege Bypass Vulnerability in Lenovo NetroStar Smart-V Firewalls

Smart-V Firewall is a security appliance produced by Lenovo Nethub that combines ADSL dialing, routing, firewall, VPN, switch and other functions. Lenovo Smart-V Firewall has a SNMP protocol community string authentication privilege bypass vulnerability, which allows an attacker to bypass SNMP...

Microsoft Windows Hyper-V Remote Elevation of Privilege Vulnerability

Microsoft Windows is the popular computer operating system. A remote elevation of privilege vulnerability exists on the host server where Windows Hyper-V does not properly validate vSMB packets and a remote attacker elevates privileges...

Windows Hyper-V vSMB Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data. An attacker who successfully exploited these vulnerabilities could gain elevated privileges on a target operating system. This vulnerability by itself does not allow...

Siemens devices using the PROFINET Discovery and Configuration Protocol (Update H)

CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...

KB4016871: Windows 10 Version 1703 May 2017 Cumulative Update

The remote Windows 10 version 1703 host is missing security update KB4016871. It is, therefore, affected by multiple vulnerabilities : - A security bypass vulnerability exists in Internet Explorer due to an unspecified flaw. An unauthenticated, remote attacker can exploit this, by convincing a us...

KB4019472: Windows 10 Version 1607 and Windows Server 2016 May 2017 Cumulative Update

The remote Windows host is missing security update KB4019472. It is, therefore, affected by multiple vulnerabilities : - A security bypass vulnerability exists in Internet Explorer due to an unspecified flaw. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a...

KLA11009 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...

KB4019474: Windows 10 Version 1507 May 2017 Cumulative Update

The remote Windows 10 version 1507 host is missing security update KB4019474. It is, therefore, affected by multiple vulnerabilities : - A security bypass vulnerability exists in Internet Explorer due to an unspecified flaw. An unauthenticated, remote attacker can exploit this, by convincing a us...

Siemens PROFINET DCP (Update V)

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION : Exploitable from an adjacent network/low attack complexity Vendor : Siemens Equipment : Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerabilities : Uncontrolled Resource Consumption 2. UPDATE INFORMATION This updated advisory...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:1183-1)

The SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.58 to receive various security and bugfixes. Notable new/improved features : - Improved support for Hyper-V - Support for Matrox G200eH3 - Support for tcpwestwood The following security bugs were fixed : - CVE-2017-2671: The pingunhash...

SUSE-SU-2017:1183-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.58 to receive various security and bugfixes. Notable new/improved features: - Improved support for Hyper-V - Support for Matrox G200eH3 - Support for tcpwestwood The following security bugs were fixed: - CVE-2017-2671: The pingunhash...

FreeBSD : NSS -- multiple vulnerabilities (4cb165f0-6e48-423e-8147-92255d35c0f7)

Mozilla Foundation reports : An out-of-bounds write during Base64 decoding operation in the Network Security Services NSS library due to insufficient memory being allocated to the buffer. This results in a potentially exploitable crash. The NSS library has been updated to fix this issue to addres...

April 18, 2017—KB4015553 (Preview of Monthly Rollup)

None None...

Microsoft Windows Hyper-V Remote Denial of Service Vulnerability (CNVD-2017-05719)

Microsoft Windows is the popular computer operating system. A remote denial of service vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to cause the host computer to crash...

Microsoft Windows Hyper-V Information Disclosure Vulnerability (CNVD-2017-05360)

Microsoft Windows is the popular computer operating system. An information disclosure vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to access information on the host system...

Failed logon event generated by Veeam ONE on Windows computers

Challenge Repeated audit events for failed logon with bad username or password occur on Hyper V hosts and in Veeam Backup & Replication environment. The events appear to be initiated by Veeam ONE service account. Cause The behavior is described in this Microsoft KB article. Solution Behavior by...

Microsoft Windows Hyper-V Remote Code Execution Vulnerability (CNVD-2017-05755)

Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to execute arbitrary code on the host computer...

Microsoft Windows Hyper-V Remote Code Execution Vulnerability (CNVD-2017-05757)

Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to execute arbitrary code on the host computer...

Microsoft Windows Hyper-V Remote Denial of Service Vulnerability (CNVD-2017-05721)

Microsoft Windows is the popular computer operating system. A remote denial of service vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to cause the host computer to crash...

Microsoft Windows Hyper-V Remote Code Execution Vulnerability (CNVD-2017-05756)

Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to execute arbitrary code on the host computer...