4267 matches found
KLA10132 DoS vulnerability in Cyberlink PowerDVD
A buffer overflow was found in Cyberlink PowerDVD. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed playlist. Original advisories Blog post Exploitation Related products Cyberlink-PowerDVD CVE list...
KLA10407 ACE vulnerability in Yahoo! Music Jukebox
Buffer overflows were found in Yahoo! Music Jukebox. By exploiting these vulnerabilities malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed arguments to different methods. Original advisories - Exploitation Public exploits exist for thi...
KLA10395 LPE vulnerability in WinPcap
Array index errors were found in WinPcap. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a specially designed IOCTL request. Original advisories WinPcap changelog Exploitation Related products WinPcap CVE list CVE-2007-5756 hi...
KLA10048 DoS vulnerability in AOL AIM
An integer underflow vulnerability was found in AIM. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to the GIF parser via a specially designed buddy icon. Original advisories vulnerability...
KLA11125 Multiple vulnerabilities in Foxit Reader
Multiple buffer overflow vulnerabilities have been found in Foxit Reader. Malicious users can exploit these vulnerabilities locally via specially designed .xps file to cause a denial of service or execute arbitrary code. Technical details This vulnerabilities are related to: 1. “Data from Faultin...
KLA91286 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in WebGL can be exploited...
KLA91034 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Azure Machine Learning Notebook can be...
KLA91018 Memory handling vulnerability in Linux Kernel
Memory handling vulnerability was found in Linux Kernel. Malicious users can exploit this vulnerability to obtain sensitive information, cause denial of service, gain root privileges. Original advisories Information about the Copy Fail vulnerability Linux CVE announce – CVE-2026-31431 Exploitatio...
KLA68917 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft Dynamics 365...
KLA65185 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerability in Microsoft Edge...
KLA65143 ACE vulnerability in Microsoft SQL Server
A remote code execution vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2024-26164 Exploitation Related products Microsoft-SQL-Server CVE list CVE-2024-26164 critical KB list Solution Install...
KLA49380 DoS vulnerability in Microsoft Browser
Type confusion vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2023-3079 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is...
KLA20173 SB vulnerability in Microsoft Browser
A security feature bypass vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2023-21719 Exploitation Related products Microsoft-Edge CVE list CVE-2023-21719 high KB list Solution Install necessary...
KLA20116 Multiple vulnerabilities in Apple iCloud
Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability in WebKit can be exploited to bypass...
KLA12518 PE vulnerability in Zoom
Elevation of privilege vulnerability was found in Zoom. Malicious users can exploit this vulnerability to gain privileges. Original advisories Zoom Security Bulletin Exploitation Related products Zoom-MSI CVE list CVE-2022-22782 high Solution Update to the latest version Download Zoom Impacts ACE...
KLA12433 Security UI vulnerability in Microsoft Browser
Spoofing vulnerability was found in Microsoft Edge for Android. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2022-23258 Exploitation Related products Microsoft-Edge CVE list CVE-2022-23258 warning KB list Solution Install necessary updates from t...
KLA12059 Multiple vulnerabilities in Cisco Jabber
Multiple vulnerabilities were found in Cisco Jabber. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A command injection vulnerability in Cisco Jabber can be...
KLA11999 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to perform cross-site scripting attack. Original advisories CVE-2020-17018 CVE-2020-17005 CVE-2020-17006 CVE-2020-17021 Exploitation Related products Microsoft-Dynamics-365 CVE list...
KLA11988 OSI vulnerability in Mozilla Firefox for Android
OSI vulnerability was found in Mozilla Firefox for Android. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories MFSA2020-27 Exploitation Related products Mozilla-Firefox-for-Android CVE list CVE-2020-15647 high Solution...
KLA12097 OSI vulnerability in VMware Workstation and Player
Out of bounds read vulnerability vulnerability was found in VMware Workstation and Player. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories VMSA-2020-0012 Exploitation Public exploits exist for this vulnerability. Related products...
KLA12096 Multiple vulnerabilities in VMware Workstation and Player
Multiple vulnerabilities were found in VMware Workstation and Player. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. A memory leak vulnerability in VMCI module can be exploited locally to cause denial of service. 2. A...
KLA11576 Spoofing vulnerability in Microsoft Dynamics
A cross-site-scripting XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit remotely via specially crafted web request to spoof user interface. Original advisories CVE-2019-1375 Exploitation Related products Microsoft-Dynamics-365 CVE list CVE-2019-1375 warning KB list...
KLA11174 Obsolete Adobe Flash Player for Windows
Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer. For details look at KLA11171. Original advisories ADV180001 Exploitation Related products Microsoft-Windows CVE list KB list 4056887 Solution Install necessary updates from the KB section, that are listed ...
KLA10936 Multiple vulnerabilities in Adobe Flash Player
Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information or execute arbitrary code. Below is a complete list of vulnerabilities: 1. Vulnerability related to handling TCP...
KLA10741 Denial of service vulnerability in FireBird
Improper commands usage at RDBMS was found in FireBird. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via vectors related to gbak utility. Technical details This vulnerability related to unhandled case exception at...
KLA10534 Sensitive information obtain vulnerabilities in Siemens SIMATIC STEP
Improper password store and other uncnown vulnerability were found in SIMATIC STEP 7. By exploiting these vulnerabilities malicious users can obtain sensitive information. These vulnerabilities can be exploited remotely via an unknown vectors. Original advisories Siemens advisory Exploitation...
KLA11444 OSI vulnerability in PuTTY
Information exposure vulnerability was found in PuTTY. Malicious users can exploit this vulnerability locally to obtain sensitive information. Original advisories PuTTY vulnerability private-key-not-wiped-2 Exploitation Related products PuTTY CVE list CVE-2015-2157 warning Solution Update to the...
KLA10466 Multiple vulnerabilities in Apple Safari
Multiple vulnerabilities have been found in Apple Safari. Malicious users can exploit these vulnerabilities to . Below is a complete list of vulnerabilities 1. Inconsistent URL diaplsying can be exploited remotely via a specially designed URL; 2. Unknown vulnerabilities can be exploited remotely...
KLA10446 CI vulnerability in Mozilla products
Improper interpretation of HTTP headers was found in Mozilla products. By exploiting this vulnerability malicious users can inject cookie. This vulnerability can be exploited via specially designed HTTP headers. Original advisories MFSA Exploitation Related products Mozilla-Firefox...
KLA10207 ACE vulnerability in IBM SPSS SamplePower
A buffer overflow was found in the IBM SPSS SamplePower. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ComboList. Original advisories - Exploitation Related products IBM-SPSS-SamplePower CVE list...
KLA10441 Vulnerability in Shockwave Player
An unspecified vulnerability was found in the Shockwave Player. By exploiting this vulnerability malicious users can execute arbitrary code or cause denial of service. Original advisories APSB Exploitation Related products Adobe-Shockwave-Player CVE list CVE-2014-0505 critical Solution Update to...
KLA10206 ACE vulnerability in IBM Personal Communications
A buffer overflow was found in IBM Personal Communications. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed .ws file. Original advisories - Exploitation Public exploits exist for this vulnerability...
KLA10034 Critical Vulnerabilities in Adobe Photoshop Elements
Multiple buffer overflow vulnerabilities have been found in Adobe Photoshop Elements. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code via specially designed .grd & .abr files. Original advisories Adobe bulletin Exploitation Public exploits...
KLA10427 ACE vulnerability in ICQ
Insecure updates were found in ICQ 7. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely by spoofing the update server. Original advisories SecurityFocus xforce Exploitation Related products ICQ CVE list CVE-2011-0487 critical...
KLA10417 ACE vulnerability in eEye Retina Network Security
A buffer overflow was found in eEye Retina Network Security. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed RWS file. Original advisories - Exploitation Public exploits...
KLA10323 ACE vulnerabilities ServerView
A buffer overflow was found in ServerView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed URL. Original advisories - Exploitation Related products ServerView CVE list CVE-2008-3126 high Solution...
KLA10271 SB vulnerability in NetSupport Manager Client
An unspecified vulnerability was found in NetSupport Manager Client. By exploiting this vulnerability malicious users can bypass auth schemes. This vulnerability can be exploited remotely via spoofing UI. Original advisories - Exploitation Related products NetSupport-Manager CVE list CVE-2007-505...
KLA10122 SB vulnerability in Comodo Firewall Pro
An unspecified vulnerability was found in Comodo Firewall Pro. By exploiting this vulnerability malicious users can bypass the driver protection for registry keys. This vulnerability can be exploited locally at a point related to OLE NamedPipe. Original advisories - Exploitation Public exploits...
KLA10270 OSI vulnerability in NetOp
An unspecified vulnerability was found in NetOp. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed request. Original advisories - Exploitation Related products NetOp CVE list CVE-2004-0950 warni...
KLA91048 SUI vulnerability in Microsoft Products (ESU)
A spoofing vulnerability was found in Microsoft Microsoft Products Extended Security Update. Malicious users can exploit this vulnerability to perform cross-site scripting attack, spoof user interface. Original advisories CVE-2026-42897 Exploitation Public exploits exist for this vulnerability...
KLA91012 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in media can be exploited remotely to execute...
KLA71481 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure CycleCloud can be exploited...
KLA62387 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 on-premises can be exploit...
KLA20227 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 on-premises can be exploite...
KLA19999 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Out of bounds write vulnerability in V8 can be exploited to cause denial of service. 2. U...
KLA19244 PE vulnerability in Microsoft Azure
An elevation of privilege vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-38007 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Azure CVE list CVE-2022-38007 critical ...
KLA12490 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. Use after free in Extensions can be exploited to cause denial of service...
KLA12441 DoS vulnerability in VMware Workstation
A denial of service vulnerability was found in VMware Workstation. Malicious users can exploit this vulnerability to cause denial of service. Original advisories VMSA-2022-0002 Exploitation Related products VMware-Workstation VMware-Player CVE list CVE-2022-22938 high Solution Update to the lates...
KLA12323 Multiple vulnerabilities in LibreOffice
Multiple vulnerabilities were found in LibreOffice. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories Content Manipulation with Double Certificate Attack Timestamp Manipulation with Signature Wrapping Exploitation...
KLA12256 PE vulnerability in Microsoft System Center
An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2021-34471 Exploitation Related products Microsoft-System-Center-Operations-Manager CVE list CVE-2021-34471 unknown Solution...