4267 matches found
KLA10390 LPE vulnerability in WebAdmin
An nspecified vulnerability was found in WebAdmin. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via mailbox manipulations. Original advisories - Exploitation Related products WebAdmin CVE list CVE-2006-4620 warning Solution...
KLA10171 Multiple vulnerabilities in Gadu-Gadu
Multiple serious vulnerabilities have been found in Gadu-Gadu. Malicious can use these vulnerabilities to obtain sensitive information or cause denial of service Below is a complete list of vulnerabilities 1. Vectors related to Easycall can be exploited remotely via outgoing calls; 2. A buffer...
KLA10135 LPE vulnerability in DameWare
An unspecified vulnerability was found in DameWare products. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally. Original advisories DameWare bulletin Exploitation Related products DameWare-Mini-Remote-Control DameWare-NT-Utilities CV...
KLA10302 DoS vulnerability in Eudora
A buffer overflow was found in Eudora. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed e-mail message. Original advisories Release note Exploitation Related products Qualcom-Eudora CVE list...
KLA91002 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Ent...
KLA77105 Multiple vulnerabilities in Microsoft SQL Server
Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in SQL Server Native Client can be exploited remotely to execute arbitrar...
KLA62390 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Connected Machine Agen...
KLA52702 ACE vulnerability in Microsoft Browser
Use after free vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories CVE-2023-4572 Exploitation Related products Microsoft-Edge CVE list CVE-2023-4572 critical KB list Solution Install...
KLA20188 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in GuestView can be exploited to cause...
KLA12607 PE vulnerability in Microsoft System Center
An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-33640 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-System-Center-Operations-Manage...
KLA12565 PE vulnerability in Microsoft System Center
Elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-29149 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-System-Center-Operations-Manager C...
KLA12499 Type Confusion vulnerability in Microsoft Browser
Type Confusion vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories CVE-2022-1232 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usual...
KLA12475 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in XSLT parameter processing can be exploited to cause...
KLA12348 OSI vulnerability in Microsoft Azure
An information disclosure vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2021-42306 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Active-Directory...
KLA12243 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, bypass security restrictions, obtain sensitive information, perform cross-site scripting attack, spoof user interface...
KLA12052 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A security bypass...
KLA12049 Multiple vulnerabilities in Microsoft Browsers
Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in WebS...
KLA11936 ACE vulnerability in Microsoft Dynamics
A remote code execution vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2020-1182 Exploitation Related products Microsoft-Dynamics-365 CVE list CVE-2020-1182 critical KB list Solution Install necessar...
KLA11828 Use after free vulnerability in Opera
Use after free vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service, bypass security restrictions. Original advisories Changelog for Opera 69 Stable Channel Update for Desktop Exploitation Public exploits exist for this vulnerability. CVE lis...
KLA11811 Multiple vulnerabilities in Microsoft System Center
Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Windows Defender can be exploited remote...
KLA11730 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Memory corruption vulnerability can be exploited to execu...
KLA11556 Multiple vulnerabilities in LibreOffice
Multiple vulnerabilities were found in LibreOffice. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. Vulnerability related to LibreLogo can be exploited remotely to execute arbitrary code; 2. An improper script handling...
KLA11561 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, perform cross-site scripting attack. Below is a complete list of vulnerabilities: 1. Unspecified...
KLA11537 Privilege escalation vulnerability in Microsoft Defender
An elevation of privilege vulnerability was found in Microsoft Defender. Malicious users can exploit this vulnerability via specially crafted command to gain privileges. Original advisories CVE-2019-1161 Exploitation Related products Windows-Defender CVE list CVE-2019-1161 high KB list Solution...
KLA11223 Multiple vulnerabilities in Adobe Flash Player
Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code and obtain sensitive information. 1. Use-After-Free vulnerability can be exploited remotely to execute arbitrary code; 2. Out-of-bounds reading...
KLA11114 Multiple vulnerabilities in Wireshark 2.4.x
Multiple serious vulnerabilities have been found in Wireshark 2.4.x. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. An infinite loop in the DOCSIS dissector can be exploited remotely via a malformed packet to cause a...
KLA11095 Denial of service vulnerability in Wireshark
A buffer overflow vulnerability was found in the Profinet I/O dissector in Wireshark. By exploiting this vulnerability malicious users can cause a denial of service. This vulnerability can be exploited remotely via a specially designed packet, which is injected onto the wire, or by convincing a...
KLA11123 PE vulnerability in Xamarin.iOS
A serious vulnerability in the Xamarin.iOS can be exploited locally to gain privileges. Technical details To exploit this vulnerability, an attacker would have to log on to an affected system and create a folder at a particular location. which could be used by another process running with elevate...
KLA10991 Privilege escalation vulnerability in Adobe Shockwave Player
An unspecified vulnerability was found in the Adobe Shockwave Player. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a DLL hijacking. Original advisories Adobe Security Bulletin Exploitation Related products...
KLA10950 Multiple vulnerabilities in Google Chrome
Multiple serious vulnerabilities have been found in Google Chrome earlier than 54.0.2840.99. Malicious users can exploit these vulnerabilities to make privilege escalation, possibly cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities 1. Heap corrupti...
KLA10831 Code execution vulnerability in Adobe AIR
An improper updates resolve was found in Adobe AIR. By exploiting this vulnerability malicious users can execute arbitrary code. Original advisories Adobe bulletin Exploitation Related products Adobe-AIR CVE list CVE-2016-4126 critical Solution Update to the latest version Get AIR Impacts ACE...
KLA10728 Obsolete Adobe Flash Player for Windows
Obsolete version of Adobe Flash Player was found in Microsoft Internet Explorer. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely. Technical details For further information look at KLA10727 Origina...
KLA10700 Code execution vulnerability in LibreOffice
Lack of bookmarks restrictions was found in LibreOffice & OpenOffice. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DOC file. Technical details To exploit this...
KLA10699 Multiple vulnerabilities in LibreOffice
Multiple serious vulnerabilities have been found in LibreOffice. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Lack of configuration restrictions at LinkUpdateMod...
KLA10671 Flash Player update for Google Chrome
Google Chrome was updated to address vulnerabilities in Flash Player. For details look at KLA10670. Original advisories Blog entry Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details. Related...
KLA10176 Multiple vulnerabilities in Google Chrome
Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service and other possible impact. Below is a complete list of vulnerabilities 1. Unknown vectors can be exploited remotely; 2...
KLA10175 DoS vulnerability in GnuPG
An unspecified vulnerability was found in GnuPG. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via specially designed packets. Original advisories - Exploitation Public exploits exist for this vulnerability. Related...
KLA10006 Multiple vulnerabilities in Google Chrome
Multiple serious vulnerabilities have been found in Google Chrome 35.0.1916.114 and earlier. Malicious users can exploit these vulnerabilities to cause denial of service or other possible issues. Below is a complete list of vulnerabilities 1. heap-based buffer overflow in...
KLA10301 DoS vulnerability in Python
An incorrect hash realization was found in Python. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed input. Original advisories - Exploitation Public exploits exist for this vulnerability. Related...
KLA10278 CI vulnerability in Novell GroupWise
XSS vulnerability was found in Novell GroupWise. By exploiting this vulnerability malicious users can inject arbitrary web script. This vulnerability can be exploited remotely via a specially designed e-mail message. Original advisories - Exploitation Related products Novell-Groupwise CVE list...
KLA10220 OSI vulnerability in Inkscape
A wrong directory reading was found in Inkscape. By exploiting this vulnerability malicious users can obtain sensitive information or possibly conduct other attacks. This vulnerability can be exploited locally via file operations. Original advisories - Exploitation Related products Inkscape CVE...
KLA10167 DoS vulnerabilities in GIMP
Multiple serious vulnerabilities have been found in GIMP. Malicious can use these vulnerabilities to cause denial of service and possibly execute arbitrary code. Below is a complete list of vulnerabilities 1. An integer overflow can be exploited remotely via a specially designed GIF; 2. A buffer...
KLA10406 ACe vulnerability in Yahoo! Messenger
An integer overflow was found in Yahoo! Messenger. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed JPG image. Original advisories - Exploitation Related products Yahoo!-Messenger CVE list...
KLA10249 Vulnerability in MDaemon
Multiple unspecified vulnerabilities were found in MDaemon. By exploiting this vulnerability malicious users can have an unknown impact on vectors related to XSS. Original advisories - Exploitation Related products MDaemon CVE list CVE-2008-6967 warning Solution Update to latest version Impacts S...
KLA10286 WLF vulnerability in Orbit Downloader
An argument injection vulnerability was found in Orbit Downloader. By exploiting this vulnerability malicious users can overwrite arbitrary files. This vulnerability can be exploited remotely via a specially designed method call. Original advisories - Exploitation Public exploits exist for this...
KLA10051 ACE vulnerability in Axis Camera Control
A buffer overflow vulnerability was found in Axis Camera Control. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to AxisCamControl.ocx via a specially designed imagepantilt property value. Origin...
KLA10283 Vulnerability in Oracle Jinitiator
An unspecified vulnerability was found in Oracle Jinitiator. By exploiting this vulnerability malicious users can cause unknown impact. This vulnerability can be exploited remotely. Original advisories - Exploitation Related products Oracle-JInitiator CVE list CVE-2008-1823 critical Solution Upda...
KLA10260 ACE vulnerability in McAfeeE-Buisness Server
An unspecified vulnerability was found in McAfee E-Business. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed auth packet. Original advisories - Exploitation Public exploits exist for this...
KLA10335 ACE vulnerability in SonicWall Global VPN client
Format string vulnerabilities were found in the SonicWall Global VPN client. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via specially designed format strings. Original advisories - Exploitation Public exploits...
KLA10257 Vulnerability in Macrovision SafeDisc
A buffer overflow was found in Macrovision SafeDisc. By exploiting this vulnerability malicious users can overwrite arbitrary memory locations and gain privileges. This vulnerability can be exploited locally via a specially designed argument. Original advisories - Exploitation Public exploits exi...