4267 matches found
KLA10942 Multiple vulnerabilities in Pidgin
Multiple serious vulnerabilities have been found in Pidgin. Malicious users can exploit these vulnerabilities to cause a denial of sevice, obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Null pointer derefence vulnerabilities and...
KLA10811 Obsolete Adobe Flash Player for Windows
Microsoft released update to address vulnerabilities in Flash Player for Internet explorer. For details look at KLA10810. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...
KLA10779 Privilege escalation vulnerability at Cogent DataHub
An unspecified vulnerability was found in Cogent DataHub. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via files manipulations. Original advisories ICS-CERT advisory Exploitation Public exploits exist for this vulnerability...
KLA10706 Potentially vulnerable Dell certificate
Microsoft updates Certificate Trust list to exclude potentially vulnerable eDellCert certificate. Via this vulnerability malicious can obtain sensitive information or bypass security restrictions. Technical details For further details about problem you can visit Dell blog entry related. And also ...
KLA10484 Interface spoofing vulnerability in McAfee Agent
An unspecified vulnerability was found in McAfee Agent. By exploiting this vulnerability malicious users conduct clicjacking attack. This vulnerability can be exploited remotely via a specially designed web page. Original advisories McAfee bulletin Exploitation Related products McAfee-Agent CVE...
KLA10353 DoS vulnerability in Symantec
An unspecified vulnerability was found in Symantec products. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed e-mail message. Original advisories Symantec advisory Exploitation Related products...
KLA10421 DoS vulnerability in JetAudio
An unspecified vulnerability was found in JetAudio. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed OGG file. Original advisories - Exploitation Public exploits exist for this vulnerability. Relate...
KLA10307 LPE vulnerability in RealVNC
An unspecified vulnerability was found in RealVNC. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a specially designed argument. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products...
KLA10275 DoS vulnerability in Node.js
An unspecified vulnerability was found in Node.js. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed request. Original advisories - Related products Node.js CVE list Solution Update to latest version...
KLA10168 DoS vulnerability in GIMP
A buffer overflow was found in GIMP. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed XWD file. Original advisories - Exploitation Public exploits exist for this...
KLA10305 ACE vulnerabilities in RealPage Module Upload
A buffer overflow was found in RealPlayer. By exploiting this vulnerability malicious users can execute arbitrary files. This vulnerability can be exploited remotely via a specially designed MP4 file. Original advisories - Exploitation Related products...
KLA10091 RCE vulnerability in BlackBerry Desktop Manager
An untrusted path vulnerability was found in BlackBerry Desktop Software. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via DLL hijacking. Original advisories BlackBerry bulletin Exploitation Related products...
KLA10106 ACE vulnerability in Cisco Secure Desktop
An improperly downloaded files verification vulnerability was found in Cisco Security Desktop. By exploiting this vulnerability malicious users can Execute Arbitrary Code. This vulnerability can be exploited from the network at a point related to Web Install via a specially designed web page...
KLA10089 DoS vulnerability in Torrent
A buffer overflow was found in the BitTorrent & UTorrent. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed .torrent file. Original advisories - Exploitation Publi...
KLA10370 DoS vulnerability in OfficeScan
Multiple serious vulnerabilities have been found in OfficeScan. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities 1. A buffer overflow can be exploited remotely via a specially designed password; 2. A NULL pointer can be...
KLA10047 ACE vulnerability in AOL AIM
Lack of special tag filtering was found in the AIM. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to an embedded Internet Explorer server control via a specially designed message. Original...
KLA10338 ACE vulnerability in SpeedProject
Buffer overflows were found in SpeedProject products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ACE file. Original advisories - Exploitation Related products Speedproject-SpeedCommander...
KLA10228 ACE vulnerability in WhatsUp Professional
An SQL injection vulnerability was found in WhatsUp Professional. By exploiting this vulnerability malicious users can execute arbitrary SQL commands. This vulnerability can be exploited remotely at points related to the logon screen. Original advisories - Exploitation Public exploits exist for...
KLA91286 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in WebGL can be exploited...
KLA91069 ACE vulnerability in Microsoft Dynamics
A remote code execution vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-23652 Exploitation CVE list CVE-2026-23652 critical KB list Solution Install necessary updates from the KB section, that ar...
KLA91030 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azur...
KLA71482 Multiple vulnerabilities in Microsoft Mariner
Multiple vulnerabilities were found in Microsoft Mariner. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An out of bounds write vulnerability in grub can be exploited to exploited...
KLA71454 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 can be exploited to cause denial of service. 2. A memo...
KLA65507 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...
KLA64657 PE vulnerability in Microsoft Azure
An elevation of privilege vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-21626 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is...
KLA63619 PE vulnerability in Microsoft Browser
An elevation of privilege vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-21388 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Edge CVE list CVE-2024-21388 high KB...
KLA61360 ACE vulnerability in Microsoft Server Software
A remote code execution vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2023-36778 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such...
KLA61311 DoS vulnerability in Opera
Use after free vulnerability was found in Opera. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories Opera 102.0.4880.33 Stable update Stable Channel Update for Desktop Exploitation Related products Opera CVE list CVE-2023-4572...
KLA49380 DoS vulnerability in Microsoft Browser
Type confusion vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2023-3079 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is...
KLA48846 DoS vulnerability in Microsoft System Center
A denial of service vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2023-24860 Exploitation Related products Windows-Defender CVE list CVE-2023-24860 critical KB list Solution Install necessary...
KLA48559 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to spoof user interface. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Service Fabric Explorer can be exploited remotely to spoof user interface. 2. A spoofing...
KLA48558 SB vulnerability in Microsoft Apps
A security feature bypass vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2023-24890 Exploitation Related products OneDrive-for-iOS CVE list CVE-2023-24890 high KB list Solution Install necessary...
KLA20213 SUI vulnerability in Microsoft Browser
A tampering vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2023-21720 Exploitation Related products Microsoft-Edge CVE list CVE-2023-21720 high KB list Solution Install necessary updates from the Settin...
KLA19999 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Out of bounds write vulnerability in V8 can be exploited to cause denial of service. 2. U...
KLA12577 PE vulnerability in Microsoft Browser
An elevation of privilege vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-33680 Exploitation Related products Microsoft-Edge CVE list CVE-2022-33680 critical KB list Solution Install necessary updates fr...
KLA51499 Multiple vulnerabilities in Opera
Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Omnibox can be exploited to cause denial of service. 2. Use after fre...
KLA12490 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. Use after free in Extensions can be exploited to cause denial of service...
KLA20201 DoS vulnerability in Opera
Implementation vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Opera 84 Stable Channel Update for Desktop Exploitation Public exploits exist for this vulnerability. Related products Opera CVE list CVE-2022-4025 warni...
KLA12452 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Dynamics GP can be...
KLA12324 Multiple vulnerabilities in Opera
Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An use after free vulnerability in V8 can be exploited to cause denial ...
KLA12219 RCE vulnerability in Microsoft Power BI
A remote code execution vulnerability was found in Microsoft Power BI. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-31984 Exploitation Related products Microsoft-Power-BI CVE list CVE-2021-31984 critical KB list Solution Install necessary...
KLA12196 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An out of bounds read vulnerability can be exploited to...
KLA11945 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. Security UI vulnerability in eval function...
KLA11535 An elevation of privilege vulnerability in Microsoft Developer Tools
An elevation of privilege vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2019-1211 Exploitation Related products Microsoft-Visual-Studio CVE list CVE-2019-1211 warning KB list Solution Install...
KLA11715 Use after free vulnerability in Opera
Use after free vulnerability was found in Opera. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories Chengelog for Opera 65 Stable Channel Update for Desktop Exploitation Public exploits exist for this vulnerability. Malware exist...
KLA11877 SB vulnerability in Microsoft Apps
A security feature bypass vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2019-1265 Exploitation Related products Yammer-Desktop-App CVE list CVE-2019-1265 warning KB list Solution Install necessary...
KLA11453 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code and bypass security restrictions. Below is a complete list of vulnerabilities: 1. Buffer overflow vulnerability in IonMonkey JIT compiler can be exploited remote...
KLA10896 Obsolete Adobe Flash Player for Windows
Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer & Edge. For details look at KLA10830. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: don’t click a link in an email message or...
KLA11445 ACE vulnerability in PuTTY
Integer overflow vulnerability was found in PuTTY. Malicious users can exploit this vulnerability remotely to execute arbitrary code and cause denial of service. Original advisories PuTTY vulnerability vuln-ech-overflow Exploitation Public exploits exist for this vulnerability. Related products...
KLA11454 Multiple vulnerabilities in SeaMonkey
Multiple vulnerabilities were found in SeaMonkey. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions and spoof user interface. Below is a complete list of vulnerabilities: 1. Multiple memory corruption vulnerabilities...