Microsoft Windows Common Log File System CVE-2019-1214 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based...

KLA11554 Multiple vulnerabilities in Microsoft Developer tools

Multiple vulnerabilities were found in Microsoft Developer tools. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation...

KB4516051: Windows Server 2008 September 2019 Security Update

The remote Windows host is missing security update 4516051 or cumulative update 4516026. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who...

Servicing stack update for Windows 10 version 1703: September 10, 2019

None None...

Servicing stack update for Windows 10 version 1607: September 10, 2019

None None...

Servicing stack update for Windows 10 version 1709: September 10, 2019

None None...

Servicing stack update for Windows 10 version 1803: September 10, 2019

None None...

KB4512578: Windows 10 Version 1809 and Windows Server 2019 September 2019 Security Update

The remote Windows host is missing security update 4512578. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...

Microsoft Windows and Microsoft Windows Server Privilege Mobilization Vulnerability (CNVD-2019-37190)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the way unistore.dll handles memory...

KB4516062: Windows Server 2012 September 2019 Security Update

The remote Windows host is missing security update 4516062 or cumulative update 4516055. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who...

Microsoft Windows Network Connectivity Assistant CVE-2019-1287 Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain the elevated privileges on the system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based System...

Microsoft Windows JET Database Engine CVE-2019-1246 Remote Code Execution Vulnerability

Description Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Office 2010 32-bit edition SP2 Microsoft Office 2010 64-bit editi...

Microsoft Windows JET Database Engine CVE-2019-1247 Remote Code Execution Vulnerability

Description Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10...

Design/Logic Flaw

In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12, a vulnerability has been identified where existing access privileges are not restricted in coordination with the expiration of access based on active directory user account...

CVE-2019-13517

CVE-2019-13517 affects BD Pyxis ES and Pyxis Enterprise Server. Affected versions: Pyxis ES 1.3.4–1.5.3 (and 1.6.1 noted in some entries) with Windows Server 4.4–4.12 for Pyxis Enterprise Server. Vulnerability type: session fixation (CWE-384) where existing access privileges are not restricted in...

CVE-2019-13517

In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12, a vulnerability has been identified where existing access privileges are not restricted in coordination with the expiration of access based on active directory user account...

CVE-2019-13517: Session Fixation

In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12, a vulnerability has been identified where existing access privileges are not restricted in coordination with the expiration of access based on active directory user account...

U.S. Dept Of Defense: Improper Neutralization of Input During Web Page Generation

Summary: Cross-site scripting XSS vulnerabilities occur when: 1. Untrusted data enters a web application, typically from a web request. 2. The web application dynamically generates a web page that contains this untrusted data. Description: Impact Once the malicious script is injected, the attacke...

Servicing stack update for Windows Server 2012: September 10, 2019

Servicing stack update for Windows Server 2012: September 10, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Key changes include: Addressed an issue in which adding vulnerable boot level components to the Secure Bo...

Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: September 10, 2019

Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: September 10, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Key changes include: Addressed an issue in which adding vulnerable boot level...