KLA11205 Multiple vulnerabilities in IrfanView

Multiple serious vulnerabilities have been found in IrfanView 4.50. Malicious users can exploit these vulnerabilities to cause a denial of service or execute arbitrary code. Below is a complete list of vulnerabilities: 1. A buffer overflow vulnerability can be exploited locally via a specially...

KLA11041 Arbitrary code execution vulnerabilities in Adobe Flash Player

Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code. 1. A use-after-free vulnerability related to manipulating the ActionScript 2 XML class can be exploited remotely to execute arbitrary code; 2. A...

KLA11270 Multiple vulnerabilities in Mozilla Firefox

Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service and obtain sensitive information. Below is a complete list of vulnerabilities: 1. An use-after-free vulnerability can be exploited remotely to cause...

KLA10830 Multiple vulnerabilities in Adobe Flash Player

Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Type confusion, use-after-free, heap...

KLA10776 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Multiple unknown vulnerabilities at V8 can be exploited to cause denial of...

KLA10771 Multiple vulnerabilities in Microsoft Internet Explorer and Edge

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer & Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. An improper memory objects access can be exploited...

KLA10675 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to bypass security restrictions, spoof user interface, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improper memory...

KLA10638 Multiple vulnerabilities in Oracle MySQL

Unspecified vulnerabilities were found in MySQL Server. Malicious users can exploit these vulnerabilities to affect confidentiality,integrity and availability via unknown vectors related to Partition, DML, GIS and RBR. Original advisories Oracle Critical Patch Update Advisory Related products MyS...

KLA10562 Obtain sensitive information vulnerability in Apple OS X

Improper password storage was found in OS X. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via logfile reading. NB: Vendor does not provide CVSS rating. This rating was calculated in Kaspersky Lab and can differ fro...

KLA10211 SB vulnerability in IBM Tivoli Storage Manager

An improper permissions vulnerability was found in IBM Tivoli Storage Manager. By exploiting this vulnerability malicious users can bypass access restrictions. This vulnerability can be exploited locally via standard file operations. Original advisories - Related products Tivoli-Storage-Manager C...

KLA10045 ACE vulnerability in Media Player Classic

Buffer overflow was found at mplayerc.exe in Media Player Classic & Windows Media Player. Malicious can use this vulnerability to execute arbitrary code via specially designed .mp4 file. Original advisories - Related products Media-Player-Classic CVE list CVE-2007-6402 critical Solution Update to...

KLA10139 Vulnerability in Dolphin Browser HD

An unspecified vulnerability was found in the Dolphin Browser HD. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited via an unknown vector. Original advisories - Related products Dolphin-Browser-HD-for-Android CVE list CVE-2012-1392...

KLA10381 Multiple vulnerabilities in VMware

Multiple critical vulnerabilities have been found in VMware. Malicious users can exploit these vulnerabilities to execute arbitrary code or gain privileges. Below is a complete list of vulnerabilities 1. Improper library access can be exploited remotely at a point related to network share; 2...

KLA10148 ACE vulnerability in Quiksoft Easymail Objects

A buffer overflow was found in QuikSoft EasyMail Objects. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to the connection method. Original advisories - Related products...

KLA10368 Multiple vulnerabilities in Trend Micro HouseCall

Multiple critical vulnerabilities have been found in Trend Micro HouseCall. Malicious users can exploit these vulnerabilities to execute arbitrary code or download arbitrary files. Below is a complete list of vulnerabilities 1. A use-after-free vulnerability can be exploited remotely via a...

KLA10115 SB vulnerability in Citrix Web Interface

An unspecified vulnerability was found in the Citrix Secure Gateway. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network via a specially designed request. Original advisories Citrix bulletin Related products...

KLA10093 Multiple vulnerabilities in CA software

Multiple serious vulnerabilities have been found in ARCserve Backup. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service. Below is a complete list of vulnerabilities 1. A buffer overflow can be exploited remotely via specially designed RPC...

KLA10152 ACE vulnerability in SFTP

A format string was found in the multiple SFTP products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Related products SSH-Secure-Shell-for-Workstations F-Secure-SSH-for-Windows...

KLA65472 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Out of bounds memory access vulnerability in V8 can be exploited to...

KLA65278 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Out of bounds read vulnerability in...

KLA20163 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in File System API can be exploited to caus...

KLA20112 ACE vulnerability in VMware Workstation

Out of bounds write vulnerability was found in VMware Workstation. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories VMSA-2022-0033 Exploitation Public exploits exist for this vulnerability. Related products VMware-Workstation C...

KLA12506 Multiple vulnerabilities in Microsoft System Center

Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in Microsoft Defender can be exploited remotely to cause...

KLA12489 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Data leak vulnerability in Canvas can be exploited to cause denial of service. 2...

KLA12340 RCE vulnerabilities in Microsoft Apps

Remote code execution vulnerabilities were found in Microsoft Apps. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-43208 CVE-2021-43209 CVE list CVE-2021-43208 unknown CVE-2021-43209 unknown Solution Install necessary updates from the KB...

KLA12176 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A use after free vulnerability in...

KLA12110 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio Code ESLint Extension can be exploited remotely to...

KLA12046 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in autofill component can be exploited to...

KLA11549 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, spoof user interface, perform cross-site scripting attack, cause denial of service, and obtain sensitive information. Below is a...

KLA11587 Outlook for Android Spoofing Vulnerability

A spoofing vulnerability in Outlook for Android can be exploited remotely via specially crafted email to spoof user interface. Original advisories CVE-2019-1105 Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details. Related products...

KLA11217 ACE vulnerability in Windows Defender

An ACE vulnerability was found in Windows Defender. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file or possible via a specially designed website. Original advisories CVE-2018-0986 CVE-2018-0986...

KLA11151 Denial of service vulnerabilities in Wireshark

Multiple vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities remotely to cause a denial of service via injecting a malformed packet. Technical details This vulnerabilities related to next services: 1. NetBIOS dissector; 2. IWARPMPA dissector; 3. CIP...

KLA11090 Multiple vulnerabilities in Mozilla Thunderbird

Multiple serious vulnerabilities have been found in Thunderbird. Malicious users can exploit these vulnerabilities to cause a denial of service, bypass security restrictions execute arbitrary code, obtain sensitive information and spoof user interface. Below is a complete list of vulnerabilities:...

KLA11062 Arbitrary code execution vulnerability in Notepad++

An unspecified vulnerability was found in Notepad++ 7.3.3 with Hex Editor Plugin v0.9.5. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file or an untrusted specially designed file from a remote...

KLA11007 Multiple vulnerabilities in Mozilla Thunderbird

Multiple serious vulnerabilities have been found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, read and write local files. Below is a complete list of vulnerabilities: 1. A use-after-free vulnerabilit...

KLA10909 Security vulnerabilitity in Mozilla Firefox

An unspecified vulnerability was found in Mozilla Firefox 49 and 50. It can be exploited to gain priveleges. Technical details Redirection from HTTP connection to a data:URL assigns the referring of site origin to the data: URL in some cases. Because of that same-origin violations against a domai...

KLA10766 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service or possibly execute arbitrary code. Below is a complete list of vulnerabilities 1. An improper user agent shadow DOM implementation at Blink can be...

KLA10756 Arbitrary code execution in Adobe Flash Player & AIR

Multiple serious vulnerabilities have been found in Adobe Flash Player & AIR. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities 1. Type confusion vulnerability can be exploited remotely to execute arbitrary code; 2...

KLA10758 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet explorer. For details look at KLA10757. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...

KLA10792 Denial of service vulnerability in Apache Subversion

An integer overflow was found in Apache Subversion. By exploiting this vulnerability malicious authenticated users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed request. Technical details This vulnerability ca...

KLA10712 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, inject arbitrary code or execute arbitrary code. Below is a complete list of vulnerabilities 1. Improper objects handling ...

KLA10617 Bypass security restrictions vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions. Below is a complete list of vulnerabilities 1. Improper DNS hostnames handling can be exploited remotely via a specially designed hostname string; ...

KLA10477 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR

An unspecified vulnerability was found in Mozilla products. By exploiting this vulnerability malicious users execute arbitrary code or gain privileges. This vulnerability can be exploited remotely via a SVG navigation or vectors related to Java-Script JIT. Original advisories MFSA Related product...

KLA10313 Vulnerability in SRWare Iron

An unspecified vulnerability was found in SRWare Iron. By exploiting this vulnerability malicious users can cause unknown impact. This vulnerability can be exploited from an unknown vector. Original advisories changelog Related products SRWare-Iron CVE list Solution Update to latest version...

KLA10212 DoS vulnerability in IBM WebSphere MQ

An unspecified vulnerability was found in IBM WebSphere MQ. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via unspecified vectors. Original advisories - Related products IBM-WebSphere-MQ CVE list CVE-2014-0911 warning...

KLA10082 LPE vulnerabilities in AutoCAD

An unspecified vulnerability was found in Autodesk products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DWG file. Original advisories - Related products AutoCAD CVE list CVE-2014-0819 warning...

KLA10388 WLF vulnerability in AceBIT WISE-FTP

A directory traversal vulnerability was found in WISE-FTP. By exploiting this vulnerability malicious users can overwrite arbitrary files. This vulnerability can be exploited remotely via a specially designed response. Original advisories - Related products WISE-FTP CVE list CVE-2008-2889 high...

KLA10087 DoS vulnerability in BadBlue

Insufficient document access control was found in BadBlue. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited from the network at points related to uninst.exe, badblue.exe and dyndns.exe. Original...

KLA10380 ACE vulnerability in Veritas Storage

A buffer overflow was found in Veritas Storage. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at points related to DCOM server components. Original advisories Symantec bulletin Related products VERITAS-Storage-Exec...

KLA10161 ACE vulnerability in FlashFXP

A buffer overflow was found in FlashFXP. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed hostname or PASV reply. Original advisories Security issue Related products FlashFXP CVE list Solution Update...