KLA10936 Multiple vulnerabilities in Adobe Flash Player

Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information or execute arbitrary code. Below is a complete list of vulnerabilities: 1. Vulnerability related to handling TCP...

KLA10942 Multiple vulnerabilities in Pidgin

Multiple serious vulnerabilities have been found in Pidgin. Malicious users can exploit these vulnerabilities to cause a denial of sevice, obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Null pointer derefence vulnerabilities and...

KLA10778 arbitrary code execution vulnerability in Autodesk Backburner

An unspecified vulnerability was found in Autodesk Backburner. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed command. Original advisories CERT vulnerability Related...

KLA10749 Multiple vulnerabilities in MariaDB

Multiple serious vulnerabilities have been found in MariaDB. Malicious users can exploit these vulnerabilities to cause denial of service, affect integrity, bypass security restrictions or execute arbitrary code. Below is a complete list of vulnerabilities 1. Improper server hostname verification...

KLA10728 Obsolete Adobe Flash Player for Windows

Obsolete version of Adobe Flash Player was found in Microsoft Internet Explorer. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely. Technical details For further information look at KLA10727 Origina...

KLA11445 ACE vulnerability in PuTTY

Integer overflow vulnerability was found in PuTTY. Malicious users can exploit this vulnerability remotely to execute arbitrary code and cause denial of service. Original advisories PuTTY vulnerability vuln-ech-overflow Related products PuTTY CVE list CVE-2015-5309 warning Solution Update to the...

KLA10516 Denial of service vulnerability in MongoDB

An unspecified vulnerability was found in MongoDB. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed string in BSON request. Original advisories MongoDB JIRA Related products MongoDB CVE list...

KLA10269 OSI vulnerability in Nessus

An unspecified vulnerability was found in Nessus. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely at a point related to Web UI. Original advisories - Related products Nessus CVE list CVE-2014-4980 warning Solution...

KLA10236 ACE vulnerability in Kerio Control

An SQL injection vulnerability was found in Kerio Control. By exploiting this vulnerability malicious users can execute arbitrary SQL. This vulnerability can be exploited remotely via a specially designed php call. Original advisories Release history Exploitation Public exploits exist for this...

KLA10209 ACE vulnerability in IBM Security AppScan

The lack of an integrity check was found in IBM Security AppScan Standart. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Original advisories - Related products...

KLA10441 Vulnerability in Shockwave Player

An unspecified vulnerability was found in the Shockwave Player. By exploiting this vulnerability malicious users can execute arbitrary code or cause denial of service. Original advisories APSB Related products Adobe-Shockwave-Player CVE list CVE-2014-0505 critical Solution Update to latest versio...

KLA10608 Security bypass vulnerability in Microsoft Silverlight

An unspecified vulnerability was found in Microsoft Silverlight. By exploiting this vulnerability malicious users can bypass DEP and ASLR protection. This vulnerability can be exploited remotely via an unspecified vectors. Original advisories CVE-2014-0319 Related products Microsoft-Silverlight C...

KLA10261 RLF vulnerability in McAfee ePolicy Orchestrator

An unspecified vulnerability was found in McAfee ePolicy Orchestrator. By exploiting this vulnerability malicious users can read arbitrary files. This vulnerability can be exploited remotely via a specially designed XML file. Original advisories - Related products McAfee-ePolicy-Orchestrator CVE...

KLA10329 OSI vulnerability in Sleipnir

Provision of geodata without consent was found in the Sleipnir. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed web-site. Original advisories - Related products Sleipnir-Mobile-for-Android CVE...

KLA10039 Adobe Digital Editions security advisory

An unspecified vulnerability was found in Adobe Digital Editions. By exploiting this vulnerability malicious users can execute arbitrary code or cause denial of service. This vulnerability can be exploited from the network at point related to an unknown application. Original advisories Adobe...

KLA10384 RLF vulnerability in VMware View

A directory traversal vulnerability was found in VMware Viewer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unspecified vectors. Original advisories VMware bulletin Related products VMware-View CVE list CVE-2012-597...

KLA10326 ACE vulnerability in JustSystems products

A buffer overflow was found in JustSystems products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed image. Original advisories - Related products Ichitaro-viewer Shuriken Ichitaro-Government...

KLA10322 RLF & WLF vulnerabilities in Serv-U

A directory traversal was found in Serv-U FTP Server. By exploiting this vulnerability malicious users can read and write arbitrary files. This vulnerability can be exploited remotely via a specially designed path. Original advisories - Exploitation Public exploits exist for this vulnerability...

KLA10108 DoS vulnerability in Cisco VPN client

Improper error handling was found in Cisco VPN Client. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited locally at a point related to the cvpnd service via cvpnd.exe manipulations. Original advisories Cisco bulletin Related products...

KLA10094 DoS vulnerabilities in CA products

An unspecified vulnerability was found in CA products. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited from the network at a point related to arclib via a specially designed RAR archive. Original...

KLA10374 ACE vulnerability in UiTV UiPlayer

A buffer overflow was found in UiTV UiPlayer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed filename parameter. Original advisories - Related products UiTV-UiPlayer CVE list CVE-2009-2970 critical...

KLA10333 DoS vulnerability in TFTP

An unspecified vulnerability was found in the TFTP Server. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed request. Original advisories - Exploitation Public exploits exist for this vulnerability...

KLA10233 ACE vulnerability in Kantaris Media Player

A buffer overflow was found in Kantaris Media Player. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Original advisories Juniper description Related products...

KLA10214 DoS vulnerability in ICQ

A buffer overflow was found in ICQ. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed internet shortcut. Original advisories - Exploitation Public exploits exist f...

KLA10257 Vulnerability in Macrovision SafeDisc

A buffer overflow was found in Macrovision SafeDisc. By exploiting this vulnerability malicious users can overwrite arbitrary memory locations and gain privileges. This vulnerability can be exploited locally via a specially designed argument. Original advisories - Related products...

KLA10060 ACE vulnerability in Kazaa & Grokster

A buffer overflow vulnerability was found in Kazaa & Grokster. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to Altnet Download Manager via a specially designed installation method call. Origina...

KLA10254 ACE vulnerabilities in Adobe Flash Player

Multiple unspecified vulnerabilities were found in Flash Player. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed SWF file. Original advisories - Related products Adobe-Flash-Player-ActiveX...

KLA10391 CI vulnerability in WebInspect

An XAS vulnerability was found in WebInspect. By exploiting this vulnerability malicious users can inject from one application to another. This vulnerability can be exploited remotely. Original advisories - Related products WebInspect CVE list CVE-2005-2442 warning Solution Update to latest versi...

KLA91041 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft 365 Copilot for Android can be exploited remotely t...

KLA73521 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 ca...

KLA50888 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Edge for iOS can be exploited remotely to spoof user...

KLA60730 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Autodesk® FBX® SDK 20...

KLA49111 SUI vulnerability in Microsoft Browser

A spoofing vulnerability was found in Microsoft Edge. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2023-29334 Related products Microsoft-Edge CVE list CVE-2023-29334 warning KB list Solution Install necessary updates from the Settings and more...

KLA48837 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Azure Machine Learning can be exploit...

KLA20124 ACE vulnerability in Microsoft Dynamics

Code execution vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2022-41127 Related products Microsoft-Dynamics-365 CVE list CVE-2022-41127 critical KB list 5010202 5019239 5021671 5010910 5021670 50134...

KLA20201 DoS vulnerability in Opera

Implementation vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Opera 84 Stable Channel Update for Desktop Related products Opera CVE list CVE-2022-4025 warning Solution Update to the latest version Download Opera...

KLA12324 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An use after free vulnerability in V8 can be exploited to cause denial ...

KLA12285 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio can be...

KLA12225 Multiple vulnerabilities in Microsoft System Center

Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-34522 CVE-2021-34464 Related products Windows-Defender CVE list CVE-2021-34522 critical CVE-2021-34464 critical KB list Solution...

KLA12200 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in ASP.NET can be exploited remotely to cause denial o...

KLA12141 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerabili...

KLA11930 DoS vulnerability in Microsoft SQL Server

A denial of service vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2020-1455 Related products Microsoft-SQL-Server CVE list CVE-2020-1455 high KB list Solution Install necessary updates from the K...

KLA11690 Multiple vulnerabilities in Microsoft Open Source Software

Vulnerability in Application Inspector can be exploited remotely via script injection to execute arbitrary code. Original advisories CVE-2020-0872 Related products Microsoft-Windows-10 CVE list CVE-2020-0872 high KB list Solution Install necessary updates from the KB section, that are listed in...

KLA11575 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Stack can be exploited remote...

KLA11566 RCE vulnerability in Foxit Reader

Out-of-bounds reading vulnerabilities was found in Foxit Reader. Malicious users can exploit this vulnerability via specially designed document to execute arbitrary code or cause denial of service. Technical details Potentially vulnerable components are AcroForm, TIF File ConvertToPDF, JPG File...

KLA11556 Multiple vulnerabilities in LibreOffice

Multiple vulnerabilities were found in LibreOffice. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. Vulnerability related to LibreLogo can be exploited remotely to execute arbitrary code; 2. An improper script handling...

KLA11537 Privilege escalation vulnerability in Microsoft Defender

An elevation of privilege vulnerability was found in Microsoft Defender. Malicious users can exploit this vulnerability via specially crafted command to gain privileges. Original advisories CVE-2019-1161 Related products Windows-Defender CVE list CVE-2019-1161 high KB list Solution Install...

KLA11525 SB vulnerability in Microsoft Developer Tools

A security feature bypass vulnerability was found in Windows Defender Application Control Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2019-1167 Related products Windows-Defender CVE list CVE-2019-1167 warning KB list Solution Install...

KLA11482 SB vulnerability in Microsoft Dynamics

A security feature bypass vulnerability was found in Microsoft Dynamics On-Premise. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2019-1008 Related products Microsoft-Dynamics-365 CVE list CVE-2019-1008 warning KB list 4494412 4498363...

KLA11453 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code and bypass security restrictions. Below is a complete list of vulnerabilities: 1. Buffer overflow vulnerability in IonMonkey JIT compiler can be exploited remote...