4155 matches found
KLA11548 Obsolete Adobe Flash Player for Windows
Microsoft released update to address vulnerabilities in Flash Player. For details look at KLA11547. Original advisories ADV190022 Related products Adobe-Flash CVE list KB list 4516115 Solution Install necessary updates from the KB section, that are listed in your Windows Update Windows Update...
KLA11164 Multiple vulnerabilities in VMware products
Multiple serious vulnerabilities have been found in VMware products. Malicious users can exploit these vulnerabilities to cause privelege escalation, cross site scripting and arbitrary code execution. 1. A vulnerability, related with using VNC can be exploited remotely via sending specipic VNC...
KLA10922 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Windows Graphics Component can be exploited...
KLA10517 Privilege escalation in Foxit Reader
Search path vulnerability was found in Foxit Reader Cloud plugin. By exploiting this vulnerability malicious users gain privileges. This vulnerability can be exploited locally via files manipulation. Original advisories Foxit bulletins Exploitation Public exploits exist for this vulnerability...
KLA10472 Multiple vulnerabilities in Internet Explorer
Multiple critical vulnerabilities have been found in Internet Explorer. Malicious users can exploit these vulnerabilities to gain privilleges, execute arbitrary code, cause denial of service, inject arbitrary code or bypass security restrictions. Below is a complete list of vulnerabilities 1. XSS...
KLA10507 Multiple vulnerabilities in Oracle products
An unspecified vulnerabilities were found in Oracle products. By exploiting these vulnerabilities malicious users can affect integrity, confidentiality and availability. This vulnerability can be exploited remotely via an unknown vectors related to JavaFX, JMX, Security, Deployment, Serviceabilit...
KLA91153 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...
KLA90926 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information, cause denial of service, spoof user interface. Below is a...
KLA82270 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Inappropriate implementation vulnerability in Custom Tabs can b...
KLA79193 PE vulnerabilities in Oracle VirtualBox
An elevation of privilege vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to gain privileges. Original advisories Oracle Virtualization Risk Matrix Related products Oracle-VirtualBox CVE list CVE-2025-21571 high CVE-2025-21533 high Solution Updat...
KLA77341 DoS vulnerability in Google Chrome
Denial of service vulnerability was found in Google Chrome. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories Stable Channel Update for Desktop Related products Google-Chrome CVE list CVE-2024-11395 critical Solution Update to t...
KLA77342 XSS vulnerability in Apache Tomcat
Cross-site scripting XSS vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to perform cross-site scripting attack. Original advisories Apache Tomcat 9.0 vulnerabilities Exploitation Public exploits exist for this vulnerability. Related products Apache-Tomcat...
KLA73183 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, perform cross-site scripting attack, spoof user interface. Below is a complete list of vulnerabilities: 1. Type confusion...
KLA71071 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Out of bounds read vulnerability in WebTransport can be exploited to cause denial of...
KLA68205 PE vulnerability in Foxit Reader
Privilege escalation vulnerability was found in Foxit Reader. Malicious users can exploit this vulnerability to gain privileges. Original advisories Foxit Security Bulletins Related products Foxit-Reader CVE list CVE-2024-29072 critical Solution Update to the latest version Download Foxit Reader...
KLA67474 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader
Multiple vulnerabilities were found in Adobe Acrobat. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Adobe Acrobat can be exploited ...
KLA67226 ACE vulnerability in Apple iTunes
File parsing vulnerability was found in iTunes. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories About the security content of iTunes 12.13.2 for Windows Related products Apple-iTunes CVE list CVE-2024-27793 critical Solution...
KLA20019 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 can be exploited to cause denial of service. 2. Use...
KLA12012 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, perform cross-site scripting attack, obtain sensitive information, bypass security restrictions, spoof user interface. Below is a...
KLA11813 Multiple vulnerabilities in Microsoft Browsers
Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Internet Explorer...
KLA11667 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Edge can be...
KLA11160 Obsolete Adobe Flash Player for Windows
A remote code execution vulnerability was found in Adobe Flash Player. This vulnerability can be exploited via a specially designed webpage to execute arbitrary code. Original advisories ADV170022 Related products Microsoft-Windows CVE list KB list 4053577 Solution Install necessary updates from...
KLA11154 Multiple vulnerabilities in Microsoft Windows, Forefront Endpoint Protection and Exchange Server
Multiple vulnerabilities were found in Microsoft Systems. alicious users can exploit these vulnerabilities to execute arbitrary code. An error of scanning specially crafted file can be exploited remotely to execute arbitrary code. Technical details Vulnerabilities is affected Windows Defender for...
KLA10873 Multiple vulnerabilities in Microsoft Server Software
Multiple serious vulnerabilities have been found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to spoof user interface. obtain sensitive information or gain privileges. Below is a complete list of vulnerabilities 1. An improper email messages parsing can be...
KLA10510 Multiple vulnerabilities in Cisco IOS
An unspecified vulnerabilities were found in multiple versions of Cisco IOS. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packets or messages. Original advisories -...
KLA10465 Multiple vulnerabilities in MyBB
Multiple serious vulnerabilities have been found in MyBB. Malicious users can exploit these vulnerabilities to obtain sensitive information or conduct cross site scrtipting. Below is a complete list of vulnerabilities 1. An unknown vulnerability can be exploited remotely via vectors related to...
KLA10605 Code execution vulnerability in Microsoft VBScript
An unspecified vulnerabilities were found in Microsoft VBScript engine. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed web site. Original advisories CVE-2014-6363 CVE-2014-0271 Exploitation...
KLA10297 Multiple vulnerabilities in PostgreSQL
Multiple serious vulnerabilities have been found in PostgreSQL. Malicious users can exploit these vulnerabilities to cause denial of service, unauthorized tables access, bypass group politics restrictions and gain privileges. Below is a complete list of vulnerabilities 1. An improper value check...
KLA10029 ACE vulnerabilities in Adobe Photoshop
Buffer overflow vulnerabilities were found in Adobe Photoshop. By exploiting this vulnerability malicious users can execute arbitrary code. These vulnerabilities can be exploited from the network at a point related to an unknown application via a specially designed file or TIFF image with...
KLA10044 ACE vulnerability in 2BrightSparks SyncBack
A buffer overflow vulnerability was found at 2BrightSparks SyncBack. Malicious users can exploit this vulnerability to execute arbitrary code via a specially designed filename. Original advisories Change log Vulnerability description Related products 2BrightSparks-SyncBack SyncBackFree CVE list...
KLA10158 DoS vulnerability in FireBird
An unspecified vulnerability was found in FireBird. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed message. Original advisories - Exploitation Public exploits exist for this vulnerability. Related...
KLA10061 ACE vulnerability in Kazaa & Grokster
A buffer overflow vulnerability was found in Kazaa & Grokster. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to Altnet Download Manager via a specially designed bstrFilepath parameter. Original...
KLA90998 PE vulnerability in Microsoft Developer Tools
An elevation of privilege vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-40372 Exploitation Related products .NET CVE list CVE-2026-40372 critical KB list 5091596 Solution Install necessary...
KLA90875 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability...
KLA90878 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, spoof user interface, obtain sensitive information, cause denial of service. Below is a...
KLA91057 DoS vulnerabilities in Wireshark
Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in Wireshark dissector can be exploited remotely to cause denial of service. 2. Denial of...
KLA77555 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. Security vulnerability in Enhanced Tracking Protection’s Strict mode can be...
KLA73989 ACE vulnerability in Mozilla Thunderbird
Use after free vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories MFSA2024-52 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usual...
KLA73549 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in Dawn can be exploited to cause denial of service. 2. Integer overflow...
KLA71397 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, spoof user interface, cause denial of service, obtain sensitive information, execute arbitrary code, perform cross-site scripting attack, gain privileges. Bel...
KLA67224 Security vulnerability in PostgreSQL
Security vulnerability was found in PostgreSQL. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories PostgreSQL: CVE-2024-4317: Restrict visibility of “pgstatsext” and “pgstatsextexprs” entries to the table owner Related products PostgreSQL CVE list...
KLA62766 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in ANGLE can be exploited to cause denial of service. 2. U...
KLA12413 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use after free...
KLA12183 Multiple vulnerabilities in Opera
Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A use after free vulnerability in Blink can be exploited to cause denia...
KLA11653 Multiple vulnerabilities in IrfanView
Multiple vulnerabilities were found in IrfanView. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. User Mode Write Access Violation vulnerability in IrfanView can be exploited to cause denia...
KLA10917 Obsolete Adobe Flash Player for Windows
Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer & Edge. For details look at KLA10892. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: don’t click a link in an email message or...
KLA10080 OSI vulnerability in AusweisApp
The HeartBleed vulnerability was found in AusweisApp. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited from the network. Original advisories AusweisApp versions changelog Related products AusweisApp CVE list Solution Update to...
KLA10017 Multiple vulnerabilities in Apple QuickTime
Multiple serious vulnerabilities have been found in Apple QuickTime. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service. Vectors related to unknown applications can be exploited to execute arbitrary code or cause denial of service via specially...
KLA10348 ACE vulnerability in SureThing CD/DVD Labeler
Buffer overflow was found in the SureThing CD/DVD Labeler. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed playlist. Original advisories - Related products SureThing-CD-DVD-Labeler CVE list...
KLA10372 ACE vulnerabilities in Trillian
Multiple critical vulnerabilities have been found in Trillian. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities 1. A buffer overflow and double free can be exploited remotely via a specially designed XML; 2. Buffer overflow c...