4155 matches found
KLA65143 ACE vulnerability in Microsoft SQL Server
A remote code execution vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2024-26164 Related products Microsoft-SQL-Server CVE list CVE-2024-26164 critical KB list Solution Install necessary updates...
KLA64657 PE vulnerability in Microsoft Azure
An elevation of privilege vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-21626 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is...
KLA62390 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Connected Machine Agen...
KLA61502 OSI vulnerability in VMWare Workstation
Information disclosure vulnerability was found in VMWare Workstation. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories VMSA-2023-0022 Related products VMware-Workstation CVE list CVE-2023-34044 high Solution Update to the latest version Download...
KLA61356 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in Microsoft Common Data...
KLA60564 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 on-premises can be exploited remotely to spoof user...
KLA20234 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Azur...
KLA20008 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in WebSQL can be exploit...
KLA12456 Spoofing vulnerability in Microsoft Azure
A spoofing vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2022-23256 Related products Microsoft-Azure CVE list CVE-2022-23256 warning KB list Solution Install necessary updates from the KB section, that a...
KLA12452 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Dynamics GP can be...
KLA12323 Multiple vulnerabilities in LibreOffice
Multiple vulnerabilities were found in LibreOffice. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories Content Manipulation with Double Certificate Attack Timestamp Manipulation with Signature Wrapping Related products...
KLA12190 Multiple vulnerabilities in VMware Workstation and VMware Player
Multiple out-of-bounds read vulnerabilities were found in VMware Workstation and VMware Player. Malicious users can exploit this vulnerability to obtain sensitive information, cause denial of service. Original advisories VMSA-2021-0009 Related products VMware-Workstation VMware-Player CVE list...
KLA11998 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Azure DevOps Server and Team Foundation Services can be...
KLA11966 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, spoof user interface, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. XSS vulnerability can be...
KLA11945 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. Security UI vulnerability in eval function...
KLA11988 OSI vulnerability in Mozilla Firefox for Android
OSI vulnerability was found in Mozilla Firefox for Android. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories MFSA2020-27 Related products Mozilla-Firefox-for-Android CVE list CVE-2020-15647 high Solution Update to th...
KLA11804 XForms vulnerability in LibreOffice
XForms vulnerability was found in LibreOffice. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2020-12803 Related products LibreOffice CVE list CVE-2020-12803 warning Solution Update to the latest version Downlo...
KLA12097 OSI vulnerability in VMware Workstation and Player
Out of bounds read vulnerability vulnerability was found in VMware Workstation and Player. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories VMSA-2020-0012 Related products VMware-Workstation VMware-Player CVE list CVE-2020-3960 unknown Solution...
KLA11576 Spoofing vulnerability in Microsoft Dynamics
A cross-site-scripting XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit remotely via specially crafted web request to spoof user interface. Original advisories CVE-2019-1375 Related products Microsoft-Dynamics-365 CVE list CVE-2019-1375 warning KB list 4515519 Soluti...
KLA11556 Multiple vulnerabilities in LibreOffice
Multiple vulnerabilities were found in LibreOffice. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. Vulnerability related to LibreLogo can be exploited remotely to execute arbitrary code; 2. An improper script handling...
KLA11735 Memory vulnerability in Opera
Memory vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Stable Channel Update for Desktop Changelog for Opera 60 1https://blogs.opera.com/desktop/changelog-for-60/b3255.56 Changelog for Opera 60...
KLA11849 ACE vulnerability in Microsoft Developer Tools
A memory corruption vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2017-11767 Related products ChakraCore CVE list CVE-2017-11767 critical KB list Solution Install necessary updates from the K...
KLA11096 Denial of service vulnerability in Wireshark
An unspecified vulnerability was found in Modbus dissector in Wireshark. By exploiting this vulnerability malicious users can cause a denial of service. This vulnerability can be exploited remotely via a specially designed packet, which is injected onto the wire, or by convincing a user to read a...
KLA10946 Denial of service vulnerability in Kaspersky products
Vulnerability was found in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver in Kaspersky products. By exploiting this vulnerability malicious users can cause an access violation and a denial of service as a result. This vulnerability can be exploited locally via a specia...
KLA10811 Obsolete Adobe Flash Player for Windows
Microsoft released update to address vulnerabilities in Flash Player for Internet explorer. For details look at KLA10810. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...
KLA10779 Privilege escalation vulnerability at Cogent DataHub
An unspecified vulnerability was found in Cogent DataHub. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via files manipulations. Original advisories ICS-CERT advisory Exploitation Public exploits exist for this vulnerability...
KLA11454 Multiple vulnerabilities in SeaMonkey
Multiple vulnerabilities were found in SeaMonkey. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions and spoof user interface. Below is a complete list of vulnerabilities: 1. Multiple memory corruption vulnerabilities...
KLA10521 Denial of service vulnerability in Shibboleth SP
An unspecified vulnerability was found in Shibboleth SP. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed SAML message. Original advisories Shibboleth advisory Related products...
KLA10169 WLF vulnerability in Emacs
An unspecified vulnerability was found in GNU Emacs. By exploiting this vulnerability malicious users can overwrite arbitrary tmp files. This vulnerability can be exploited locally via a symlink attack. Original advisories - Related products GNU-Emacs CVE list CVE-2014-3424 warning CVE-2014-3423...
KLA10275 DoS vulnerability in Node.js
An unspecified vulnerability was found in Node.js. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed request. Original advisories - Related products Node.js CVE list Solution Update to latest version...
KLA10188 Multiple vulnerabilities in HP Insight Diagnostics
Multiple critical vulnerabilities have been found in HP Insight Diagnostics. Malicious users can exploit these vulnerabilities to inject code or write local files. Below is a complete list of vulnerabilities 1. Improper PHP include restrictions can be exploited via a path parameter; 2. A path...
KLA10220 OSI vulnerability in Inkscape
A wrong directory reading was found in Inkscape. By exploiting this vulnerability malicious users can obtain sensitive information or possibly conduct other attacks. This vulnerability can be exploited locally via file operations. Original advisories - Related products Inkscape CVE list...
KLA10168 DoS vulnerability in GIMP
A buffer overflow was found in GIMP. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed XWD file. Original advisories - Related products GIMP CVE list CVE-2012-5576...
KLA10157 ACE vulnerability in Final Draft
A buffer overflow was found in Final Draft. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely a via specially designed file. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products...
KLA10427 ACE vulnerability in ICQ
Insecure updates were found in ICQ 7. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely by spoofing the update server. Original advisories SecurityFocus xforce Related products ICQ CVE list CVE-2011-0487 critical Solution...
KLA10305 ACE vulnerabilities in RealPage Module Upload
A buffer overflow was found in RealPlayer. By exploiting this vulnerability malicious users can execute arbitrary files. This vulnerability can be exploited remotely via a specially designed MP4 file. Original advisories - Related products...
KLA10091 RCE vulnerability in BlackBerry Desktop Manager
An untrusted path vulnerability was found in BlackBerry Desktop Software. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via DLL hijacking. Original advisories BlackBerry bulletin Related products BlackBerry-Desktop-Softwa...
KLA10422 ACE vulnerability in ooVoo
A buffer overflow was found in ooVoo. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed URI. Original advisories - Exploitation Public exploits exist for this...
KLA10122 SB vulnerability in Comodo Firewall Pro
An unspecified vulnerability was found in Comodo Firewall Pro. By exploiting this vulnerability malicious users can bypass the driver protection for registry keys. This vulnerability can be exploited locally at a point related to OLE NamedPipe. Original advisories - Related products...
KLA11125 Multiple vulnerabilities in Foxit Reader
Multiple buffer overflow vulnerabilities have been found in Foxit Reader. Malicious users can exploit these vulnerabilities locally via specially designed .xps file to cause a denial of service or execute arbitrary code. Technical details This vulnerabilities are related to: 1. “Data from Faultin...
KLA91235 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution...
KLA91027 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, spoof user interface, bypass security restrictions, obtain sensitive information. Below is a complete list of...
KLA91012 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in media can be exploited remotely to execute...
KLA65692 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, bypass security restrictions, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An...
KLA65507 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...
KLA63959 PE vulnerability in Microsoft Server Software
An elevation of privilege vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-21410 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Exchange-Server CVE list...
KLA63866 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in Skia can be exploited to cause denial of service. 2...
KLA63224 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, obtain sensitive information, execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of...
KLA61540 OSI vulnerability in Microsoft Browser
An information disclosure vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2023-36409 Related products Microsoft-Edge CVE list CVE-2023-36409 high KB list Solution Install necessary updates from t...
KLA61504 Multiple vulnerabilities in Apache HTTP Server
Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Out of memory crash vulnerability in HTTP/2 stream memory can be exploited to cause denial of service 2. Out of...