KLA12186 ACE vulnerability in LibreOffice

A code execution vulnerability was found in LibreOffice. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories fileloc extension added to macOS executable denylist Related products LibreOffice CVE list CVE-2021-25632 unknown Solution Update to the latest...

KLA12140 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An unsigned code execution vulnerability in Azure Sphere can be exploited remotely to execute...

KLA12157 SB vulnerability in Mozilla Thunderbird

A security bypass vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories MFSA2021-17 Related products Mozilla-Thunderbird CVE list CVE-2021-29950 critical Solution Update to...

KLA12067 OSI vulnerability in Microsoft Browser

An information disclosure vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2021-24100 Related products Microsoft-Edge CVE list CVE-2021-24100 warning KB list Solution Install necessary updates fro...

KLA11999 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to perform cross-site scripting attack. Original advisories CVE-2020-17018 CVE-2020-17005 CVE-2020-17006 CVE-2020-17021 Related products Microsoft-Dynamics-365 CVE list CVE-2020-17018 high...

KLA11958 SB vulnerability in Microsoft SQL Server

Security bypass vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2020-1044 Related products Microsoft-SQL-Server CVE list CVE-2020-1044 high KB list Solution Install necessary updates from the ...

KLA11786 OSI vulnerability in LibreOffice

OSI vulnerability was found in LibreOffice. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2020-12801 Related products LibreOffice CVE list CVE-2020-12801 warning Solution Update to the latest version Download LibreOffice Impacts OSI Obtain...

KLA11776 SUI vulnerability in Microsoft SQL Server

SUI vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2020-1173 Related products Microsoft-SQL-Server CVE list CVE-2020-1173 warning KB list Solution Install necessary updates from the KB section, that...

KLA11801 Security vulnerability in Zoom

Security vulnerability was found in Zoom. Malicious users can exploit this vulnerability to bypass security restrictions, gain privileges. Original advisories Zoom Security CVE-2020-11443 CVE-2020-11443 Related products Zoom-MSI CVE list CVE-2020-11443 critical Solution Update to the latest versi...

KLA11576 Spoofing vulnerability in Microsoft Dynamics

A cross-site-scripting XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit remotely via specially crafted web request to spoof user interface. Original advisories CVE-2019-1375 Related products Microsoft-Dynamics-365 CVE list CVE-2019-1375 warning KB list 4515519 Soluti...

KLA11742 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Blink can be exploited remotely via special crafted webpage to potentially cause denial of...

KLA11739 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Out of bounds read vulnerability in V8 component can be exploited remotely via special crafted webpage to potentially cause...

KLA12118 Multiple vulnerabilities in VMware Workstation and Player

Out-of-bounds read/write vulnerabilities were found in VMware Workstation and Player. Malicious users can exploit this vulnerability to obtain sensitive information, cause denial of service. Original advisories VMSA-2019-0012 Related products VMware-Workstation VMware-Player CVE list CVE-2019-568...

KLA12061 PE vulnerability in Iperius Backup

A privilege escalation vulnerability was found in Iperius Backup. Malicious users can exploit this vulnerability to gain privileges. Original advisories Iperius Backup 6.1.0 – Privilege Escalation CVE list Solution Update to the latest version Download Iperius Backup Affected Products - Iperius...

KLA10879 Multiple vulnerabilities in Adobe Flash Player

Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code or bypass security restrictions. Below is a complete list of vulnerabilities 1. Type confusion, use-after-free and memory corruption vulnerabilities...

KLA10726 Security bypass vulnerability in Dovetones AD Self Password Reset

An unspecified vulnerability was found in Dovestones AD Self Password Reset. By exploiting this vulnerability malicious users can reset arbitrary passwords. This vulnerability can be exploited remotely via a specially designed request. Technical details This vulnerability related to...

KLA10687 Code execution vulnerability in Adobe Shockwave Player

An unspecified vulnerability was found in Adobe Shockwave Player. By exploiting this vulnerability malicious users can execute arbitrary code. Original advisories Adobe bulletin Related products Adobe-Shockwave-Player CVE list CVE-2015-7649 critical Solution Update to the latest version Get...

KLA11444 OSI vulnerability in PuTTY

Information exposure vulnerability was found in PuTTY. Malicious users can exploit this vulnerability locally to obtain sensitive information. Original advisories PuTTY vulnerability private-key-not-wiped-2 Related products PuTTY CVE list CVE-2015-2157 warning Solution Update to the latest versio...

KLA10421 DoS vulnerability in JetAudio

An unspecified vulnerability was found in JetAudio. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed OGG file. Original advisories - Exploitation Public exploits exist for this vulnerability. Relate...

KLA10296 ACE vulnerability in Polaris

An unspecified vulnerability was found in Polaris. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DOCX file. Original advisories ZDI Related products Polaris-Office-for-Android CVE list Solution...

KLA11443 DoS vulnerability in PuTTY

Integer overflow vulnerability was found in PuTTY. Malicious users can exploit this vulnerability remotely to cause denial of service and possibly execute arbitrary code. Original advisories PuTTY vulnerability vuln-signature-stringlen Related products PuTTY CVE list CVE-2013-4852 high Solution...

KLA10162 ACE vulnerability in FlashFXP

Buffer overflows were found in FlashFXP. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed strings in listbox or combobox. Original advisories FlashFXP bulletin Exploitation Public exploits exist for th...

KLA10331 SB vulnerability in Snare

A CSRF vulnerability was found in Snare. By exploiting this vulnerability malicious users can hijack administrator auth. This vulnerability can be exploited remotely. Original advisories - Related products Snare-for-Windows Epilog-for-Windows CVE list CVE-2010-2594 high Solution Update to latest...

KLA10422 ACE vulnerability in ooVoo

A buffer overflow was found in ooVoo. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed URI. Original advisories - Exploitation Public exploits exist for this...

KLA10057 ACE vulnerability in Servant Salamander

A buffer overflow vulnerability was found in Servant Salamander. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to peviewer.spl via a specially designed PE file. Original advisories vulnerability...

KLA10338 ACE vulnerability in SpeedProject

Buffer overflows were found in SpeedProject products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ACE file. Original advisories - Related products Speedproject-SpeedCommander Speedproject-Squeez...

KLA10083 ACE vulnerability in AutoMate

A buffer overflow vulnerability was found in AutoMate. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely with user assistance via a specially designed ACE archive. Original advisories - Related products AutoMate CVE list...

KLA10345 SB vulnerability in SUN JRE & JDK

An unspecified vulnerability was found in Sun JRE & JDK. By exploiting this vulnerability malicious users can access the clipboard. This vulnerability can be exploited remotely via a specially designed applet. Original advisories - Related products Sun-Java-JRE CVE list CVE-2001-1480 high Solutio...

KLA10863 Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration

Multiple serious vulnerabilities have been found in Zimbra Collaboration. Malicious users can exploit these vulnerabilities to inject arbitrary code. Technical details To exploit this vulnerabilities remote attackers to inject arbitrary web script or HTML via unspecified vectors. Original...

KLA91093 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A spoofing...

KLA91046 SUI vulnerability in Microsoft Server Software

A spoofing vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to perform cross-site scripting attack, spoof user interface. Original advisories CVE-2026-42897 Exploitation Public exploits exist for this vulnerability. Related products...

KLA91015 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Information disclosure vulnerability in the Audio/Video...

KLA90940 DoS vulnerability in Google Chrome

Inappropriate implementation vulnerability was found in Google Chrome. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories Stable Channel Update for Desktop Exploitation Public exploits exist for this vulnerability. Related produc...

KLA87233 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in V8 can be...

KLA82407 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Azure Local Cluster...

KLA77143 Multiple vulnerabilities in PostgreSQL

Multiple vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability can be exploited remotely to gain...

KLA74056 OSI vulnerability in Microsoft Azure

Information disclosure vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2024-38204 Related products Microsoft-Azure CVE list CVE-2024-38204 high Solution Install necessary updates from the KB sectio...

KLA73942 DoS vulnerability in Wireshark

Denial of service vulnerability was found in Wireshark. Malicious users can exploit this vulnerability to cause denial of service. Original advisories wnpa-sec-2024-12 · ITS dissector crash Exploitation Public exploits exist for this vulnerability. Related products Wireshark CVE list CVE-2024-978...

KLA73904 Multiple vulnerabilities in Microsoft System Center

Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Configuration Manager can be...

KLA68438 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Dawn can be exploited to cause denial of service or execu...

KLA65258 ACE vulnerability in Opera

Use after free vulnerability was found in Opera. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories Opera 108.0.5067.40 Stable update Stable Channel Update for Desktop Exploitation Public exploits exist for this vulnerability...

KLA73522 SB vulnerability in WinSCP

Security bypass vulnerability was found in WinSCP. Malicious users can remotely exploit this vulnerability to bypass security restrictions. Original advisories Changes in WinSCP 6.2.2 Exploitation Public exploits exist for this vulnerability. Related products WinSCP CVE list CVE-2023-48795 high...

KLA50320 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Power Apps can be exploited remotely to spoof user interface. 2. A spoofing...

KLA48559 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to spoof user interface. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Service Fabric Explorer can be exploited remotely to spoof user interface. 2. A spoofing...

KLA20041 OSI vulnerability in Microsoft Dynamics

Information disclosure vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2022-41066 Related products Microsoft-Dynamics-365 CVE list CVE-2022-41066 warning KB list 5021002 5021000 5021001 5021004...

KLA20003 PE vulnerability in Microsoft System Center

An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-37971 Related products Microsoft-Defender-for-Endpoint-for-Windows CVE list CVE-2022-37971 high KB list Solution Install...

KLA19255 SUI vulnerability in Microsoft System Center

A spoofing vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2022-37972 Related products Microsoft-Endpoint-Configuration-Manager CVE list CVE-2022-37972 critical KB list Solution Install necessary...

KLA12287 XSS vulnerability in Microsoft Dynamics

A cross-site-scripting XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to perform cross-site scripting attack. Original advisories CVE-2021-40440 Related products Microsoft-Dynamics-365 CVE list CVE-2021-40440 unknown KB list 5006076 5006075...

KLA12279 SUI vulnerability in Microsoft Browser

A tampering vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2021-38669 Related products Microsoft-Edge CVE list CVE-2021-38669 critical KB list Solution Install necessary updates from the Settings and mo...

KLA12263 Multiple vulnerabilities in Apple iCloud

Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A code execution vulenrability in ImageIO can be exploited via special crafted image to execute arbitrary code. 2. A...