22279 matches found
KB5006729: Windows 8.1 and Windows Server 2012 R2 Security Update (October 2021)
The remote Windows host is missing security update 5006729. It is, therefore, affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself i...
Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 and 4.6.2 for Windows Server 2008 SP2 (KB5006764)
Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 and 4.6.2 for Windows Server 2008 SP2 KB5006764 Applies to: Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 and 4.6.2 IMPORTANT Verify that you have installed...
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB5006762)
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB5006762 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...
October 12, 2021-KB5005538 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2
None None...
Microsoft Windows 安全特征问题特征问题漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Role: A security signature issue vulnerability exists in Windows Active Directory Server. The following products and versions are affected:Windows Server,...
Microsoft DNS Server 代码注入漏洞
Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected:Windows Server 2016,Windows Server 2016 Server Core installation,Windows Server 2008 for 32-bit Systems Service Pack...
Microsoft Windows AppX Deployment Extensions 权限许可和访问控制问题漏洞
Microsoft Windows AppX Deployment Extensions is an AppX Deployment Extension DLL from Microsoft Corporation USA that is part of the Microsoft Windows operating system. A vulnerability exists in the Microsoft Windows AppX Deployment Service with privilege permission and access control issues. The...
Microsoft DWM Core Library 权限许可和访问控制问题漏洞
Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation. A vulnerability exists in the Microsoft DWM Core Library due to permission and access control issues. The following products and editions are affected: Windows 10 Version 1909 for 32-bit Systems,Windows...
Microsoft Windows Print Spooler Components 安全漏洞
Microsoft Windows Print Spooler Components is a printing background processor component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Print Spooler Components. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Window...
Microsoft Hyper-V 代码注入漏洞
Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A code injection vulnerability exists in Microsoft Hyper-V. The following products and versions are affected:Windows 10 Version 1809 for x64-based...
Microsoft Windows Storage Spaces Controller 权限许可和访问控制问题漏洞
Microsoft Windows Storage Spaces Controller is an essential driver for providing storage space functionality from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Storage Spaces Controller with privilege permission and access control issues. The following products and editio...
Microsoft Active Directory Federation Services 安全特征问题漏洞
Microsoft Active Directory Federation Services is a software component of Microsoft Corporation that runs on the Windows Server operating system. It provides users with single sign-on access to systems and applications that cannot use Integrated Windows Authentication IWA through Active Directory...
Microsoft Active Directory Federation Services 安全漏洞
Microsoft Active Directory Federation Services is a software component of Microsoft Corporation that runs on the Windows Server operating system. It provides users with single sign-on access to systems and applications that cannot use Integrated Windows Authentication IWA through Active Directory...
Microsoft Windows 信息泄露漏洞
The Microsoft Windows Fastfat Driver is a file system driver for the Microsoft Windows operating system that supports the FAT File Allocation Table file system, an older file system format widely used in early DOS and Windows systems and still used in some embedded and removable storage devices...
October 12, 2021-KB5006765 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019
None None...
KB5006750: Servicing stack update for Windows Server 2008 SP2: October 12, 2021
KB5006750: Servicing stack update for Windows Server 2008 SP2: October 12, 2021 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU make sure that you have a robust and reliable servicing stack so...
KB5006749: Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: October 12, 2021
KB5006749: Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: October 12, 2021 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable...
AutomatedLab - A Provisioning Solution And Framework That Lets You Deploy Complex Labs On HyperV And Azure With Simple PowerShell Scripts
AutomatedLab AL enables you to setup test and lab environments on Hyper-v or Azure with multiple products or just a single VM in a very short time. There are only two requirements you need to make sure: You need the DVD ISO images and a Hyper-V host or an Azure subscription. Requirements Apart fr...
WhatsUpGold 21.0.3 - Stored Cross-Site Scripting Vulnerability
Exploit Title: WhatsUpGold 21.0.3 - Stored Cross-Site Scripting XSS Exploit Author: Andreas Finstad 4ndr34z Vendor Homepage: https://www.whatsupgold.com Version: v.21.0.3, Build 188 Tested on: Windows 2019 Server CVE : CVE-2021-41318 Reference: https://f20.be/cves/poc-cve-2021-41318 Description:...
ManageEngine ADAudit Plus Authenticated File Write RCE
This module exploits security issues in ManageEngine ADAudit Plus prior to 7006 that allow authenticated users to execute arbitrary code by creating a custom alert profile and leveraging its custom alert script component. The module first runs a few checks to test the provided credentials, retrie...