2579 matches found
Microsoft Windows Codecs 代码注入漏洞
Microsoft Windows Codecs is an operating system from Microsoft. It provides a multitasking graphical user interface. A code injection vulnerability exists in Microsoft Windows Codecs. The following products and editions are affected:Windows Server 2016,Windows Server 2016 Server Core...
Microsoft Windows Cryptographic Services 信息泄露漏洞
Microsoft Windows Cryptographic Services is an encryption service provider program from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Cryptographic Services. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...
Microsoft Windows Event Tracing 权限许可和访问控制问题漏洞
Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. Microsoft Windows Event Tracing is vulnerable to privilege permission and access control issues. The...
KLA12244 Microsoft Advisory for Active Directory Certificate Services
Microsoft is aware of PetitPotam which can potentially be used in an attack on Windows domain controllers or other Windows servers.To prevent NTLM Relay Attacks on networks with NTLM enabled, domain administrators must ensure that services that permit NTLM authentication make use of protections...
KLA12248 Microsoft Advisory (ESU) for Active Directory Certificate Services
Microsoft is aware of PetitPotam which can potentially be used in an attack on Windows domain controllers or other Microsoft Products Extended Security Update.To prevent NTLM Relay Attacks on networks with NTLM enabled, domain administrators must ensure that services that permit NTLM authenticati...
2021-07 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5004238)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
KB5004238: Windows 10 Version 1607 / Windows Server 2016 Security Update (July 2021)
The remote Windows host is missing security update 5004238. It is, therefore, affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself i...
Microsoft Scripting Engine 缓冲区错误漏洞
Microsoft Scripting Engine is a tool from Microsoft Corporation USA that provides a scripting engine for JScript and VBScript. A buffer error vulnerability exists in Microsoft Scripting Engine. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...
2021-07 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5004948)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Exploit for CVE-2021-34527
CVE-2021-34527 - PrintNightmare LPE PowerShell Caleb Stew...
Exploit for CVE-2021-1675
CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewa...
Microsoft SharePoint Unsafe Control And ViewState Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'http://microsoft.com/sharepoint/webpartpages', 'soap' = 'http://www.w3.org/2003/05/soap-envelope', 'xsi' =...
Microsoft SharePoint Unsafe Control And ViewState Remote Code Execution Exploit
The EditingPageParser.VerifyControlOnSafeList method fails to properly validate user supplied data. This can be leveraged by an attacker to leak sensitive information in rendered-preview content. This module will leak the ViewState validation key and then use it to sign a crafted object that will...
Microsoft Windows Defender Multiple Vulnerabilities (Jun 2021)
This host is missing a critical security update according to Microsoft Security Updates released for Microsoft Windows Defender Protection Engine dated 08-06-2021. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
2021-06 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5003638)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Windows Installer 权限许可和访问控制问题漏洞
Microsoft Windows is a desktop operating system from Microsoft Corporation USA. A security vulnerability exists in Windows Installer. The following products and versions are affected:Windows 10 Version 1607 for 32-bit Systems,Windows 10 Version 1607 for x64-based Systems,Windows Server 2016,Windo...
Microsoft Hyper-V 缓冲区错误漏洞
Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A buffer error vulnerability exists in Microsoft Hyper-V. The following products and versions are affected:Windows 10 Version 1809 for x64-based...
June 8, 2021-KB5003542 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016
None None...
2021-05 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5003197)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Microsoft Bluetooth Driver 安全漏洞
Microsoft Bluetooth Driver is an American Microsoft application that provides native connectivity from Windows, Linux and macOS to Microsoft SQL Server and Microsoft Azure SQL databases. A security vulnerability exists in Microsoft Bluetooth Driver. The following products and versions are...