KLA12460 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, bypass security restrictions, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. Memory...

KLA12287 XSS vulnerability in Microsoft Dynamics

A cross-site-scripting XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to perform cross-site scripting attack. Original advisories CVE-2021-40440 Related products Microsoft-Dynamics-365 CVE list CVE-2021-40440 unknown KB list 5006076 5006075...

KLA12359 Heap buffer overflow vulnerability in Zoom

Heap buffer overflow vulnerability was found in Zoom. Malicious users can exploit this vulnerability to execute arbitrary code or cause denial of service. Original advisories Zoom Security Bulletin Related products Zoom-MSI CVE list CVE-2021-30480 unknown Solution Update to the latest version...

KLA12261 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A type confusion vulnerability in JIT...

KLA12223 RCE vulnerability in Microsoft Dynamics

A remote code execution vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-34474 Related products Microsoft-Dynamics-365 CVE list CVE-2021-34474 critical KB list 5004715 5004716 5004717 Solution...

KLA12219 RCE vulnerability in Microsoft Power BI

A remote code execution vulnerability was found in Microsoft Power BI. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-31984 Related products Microsoft-Power-BI CVE list CVE-2021-31984 critical KB list Solution Install necessary updates from...

KLA12188 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A use after free vulnerability in File API can be...

KLA12140 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An unsigned code execution vulnerability in Azure Sphere can be exploited remotely to execute...

KLA12157 SB vulnerability in Mozilla Thunderbird

A security bypass vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories MFSA2021-17 Related products Mozilla-Thunderbird CVE list CVE-2021-29950 critical Solution Update to...

KLA12067 OSI vulnerability in Microsoft Browser

An information disclosure vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2021-24100 Related products Microsoft-Edge CVE list CVE-2021-24100 warning KB list Solution Install necessary updates fro...

KLA11786 OSI vulnerability in LibreOffice

OSI vulnerability was found in LibreOffice. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2020-12801 Related products LibreOffice CVE list CVE-2020-12801 warning Solution Update to the latest version Download LibreOffice Impacts OSI Obtain...

KLA11683 ACE vulnerability in Microsoft Dynamics

ACE vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2020-0905 Related products Microsoft-Dynamics-365 CVE list CVE-2020-0905 high KB list 4538885 4538886 4538884 4538888 4551259 4538708 4551258 453888...

KLA12119 Multiple vulnerabilities in VMware Workstation and Player

Multiple vulnerabilities were found in VMware Workstation and Player. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability can be exploited via special crafted packet...

KLA12118 Multiple vulnerabilities in VMware Workstation and Player

Out-of-bounds read/write vulnerabilities were found in VMware Workstation and Player. Malicious users can exploit this vulnerability to obtain sensitive information, cause denial of service. Original advisories VMSA-2019-0012 Related products VMware-Workstation VMware-Player CVE list CVE-2019-568...

KLA11468 Multiple Arbitrary code execution vulnerabilities in Adobe Shockwave Player

Multiple Memory Corruption vulnerabilities was found in Adobe Shockwave Player. Malicious users can exploit these vulnerabilities to execute arbitrary code. Original advisories APSB19-20 Related products Adobe-Shockwave-Player CVE list CVE-2019-7098 critical CVE-2019-7099 critical CVE-2019-7100...

KLA11134 ACE vulnerability in Adobe Shockwave Player

A memory corruption vulnerability was found in Adobe Shockwave Player versions earlier than 12.3.1.201. By exploiting this vulnerability malicious users can execute arbitrary code. Original advisories Security update available for Shockwave Player | APSB17-40 Related products Adobe-Shockwave-Play...

KLA11844 OSI vulnerability in Microsoft Windows

An information disclosure vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2017-8554 Related products Microsoft-Windows-Server-2012 Microsoft-Windows-8 Microsoft-Windows-7...

KLA10974 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer. For details look at KLA10973. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...

KLA10966 Multiple vulnerabilities in qBittorrent

CVSS: 4.3 Detect date: 03/04/2017 Severity: Warning Description: Multiple serious vulnerabilities have been found in qBittorrent before 3.3.11. Malicious users can exploit these vulnerabilities to cause XSS. Affected products: qBittorrent before 3.3.11 Solution: Update to the latest version...

KLA10955 Denial of service vulnerabilities in Wireshark

Multiple serious vulnerabilities have been found in Wireshark 2.0.0 to 2.0.9 and 2.2.0 to 2.2.3. Malicious users can exploit these vulnerabilities to possibly cause a denial of service. Below is a complete list of vulnerabilities: 1. The DHCPv6 dissector large loop vulnerability can be exploited...

KLA11903 DoS vulnerability in Microsoft Products (ESU)

A denial of service vulnerability was found in Microsoft Products Extended Support Update. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2017-0004 Related products Microsoft-Windows-Vista-4 Microsoft-Windows-7 Microsoft-Windows-Server-2008 CVE...

KLA10781 Code execution vulnerability in pidgin-otr plugin.

Use-after-free vulnerability was found in Off-the-Record Messaging OTR pidgin-otr plugin. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via vectors related to the “Authenticate buddy” menu item. Technical details This...

KLA11442 ACE vulnerability in PuTTY

Stack-based buffer overflow vulnerability was found in PuTTY. Malicious users can exploit this vulnerability remotely cause denial of service and execute arbitrary code. Original advisories PuTTY vulnerability vuln-pscp-sink-sscanf Related products PuTTY CVE list CVE-2016-2563 critical Solution...

KLA10698 Code execution vulnerability in Google Picasa

Buffer overflow was found in Google Picasa. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely. Technical details This vulnerability caused by heap based buffer overflow and triggered via vectors related to phase one 0x412 tag...

KLA10619 Code execution vulnerability in Adobe Flash Player

Buffer overflow was found in Adobe Flash Player. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via an unspecified vectors. Original advisories Adobe bulletin Exploitation Malware exists for this vulnerability. Usually suc...

KLA10522 Multiple vulnerabilities in Citrix CC

Multiple serious vulnerabilities have been found in Citrix Controle Center. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improper access restrictions can be exploited remotely via an...

KLA10454 PE vulnerabilities in MSCVMM

Improper user roles validating was found in MSCVMM. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a specially designed credentials. Original advisories MS bulletin CVE-2015-0012 Related products...

KLA10366 OSI vulnerability in Titan FTP Server

A directory traversal vulnerability was found in Titan FTP Server. By exploiting this vulnerability malicious users can list usernames or home folder. This vulnerability can be exploited remotely via specially designed parameters. Original advisories Changelog Exploitation Public exploits exist f...

KLA10204 DoS vulnerability in IBM Lotus Sametime

An unspecified vulnerability was found in the IBM Lotus Sametime. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially desgined AV session. Original advisories - Related products IBM-Lotus-Sametime CVE list...

KLA10069 DoS vulnerability in Apache Subversion

An assertion failure vulnerability was found in Apache Subversion. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to moddavsvn via a specially designed URL. Original advisories Apache bulletin...

KLA10303 SB vulnerability in RPM

Improper error handling was found in RPM. By exploiting this vulnerability malicious users can bypass signature checks. This vulnerability can be exploited remotely via a specially designed packet. Original advisories - Related products RPM-Remote-Print-Manager CVE list CVE-2012-6088 warning...

KLA10330 Vulnerability in SmartFTP

An unspecified vulnerability was found in SmartFTP. By exploiting this vulnerability malicious users can conduct unknown vulnerability. This vulnerability can be exploited via a specially designed filename. Original advisories SmartFTP changelog Related products SmartFTP CVE list CVE-2010-4871...

KLA10034 Critical Vulnerabilities in Adobe Photoshop Elements

Multiple buffer overflow vulnerabilities have been found in Adobe Photoshop Elements. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code via specially designed .grd & .abr files. Original advisories Adobe bulletin Exploitation Public exploits...

KLA10328 ACE vulnerability in Skype

An untrusted path was found in Skype. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally and possibly remotely via a DLL hijack. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products...

KLA10331 SB vulnerability in Snare

A CSRF vulnerability was found in Snare. By exploiting this vulnerability malicious users can hijack administrator auth. This vulnerability can be exploited remotely. Original advisories - Related products Snare-for-Windows Epilog-for-Windows CVE list CVE-2010-2594 high Solution Update to latest...

KLA10224 DoS vulnerability in Ws FTP

An unspecified vulnerability was found in WS FTP. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Related products WSFTP-LE CVE list CVE-2007-2213 high Solution Update to latest...

KLA10339 WLF vulnerability in SpeedProject

A directory traversal vulnerability was found in SpeedProject products. By exploiting this vulnerability malicious users can overwrite local files. This vulnerability can be exploited remotely at a point related to the JAR and ZIP archives. Original advisories - Related products...

KLA10088 ACE vulnerability in BitComet

A buffer overflow was found in the BitComet. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed publisher URI. Original advisories - Related products BitComet-Client CVE list CVE-2006-0339 high...

KLA10295 Vulnerability in Pocket Controller

An unspecified vulnerability was found in Pocket Controller. By exploiting this vulnerability malicious users can turn off, reboot or reset PDA. This vulnerability can be exploited remotely. Original advisories - Related products Pocket-Controller-Professional CVE list CVE-2005-4152 high Solution...

KLA10311 ACE vulnerability in multiple software

A buffer overflow was found in the WinACE compression utility, which is used in multiple products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ACE filename. Original advisories - Related product...

KLA10228 ACE vulnerability in WhatsUp Professional

An SQL injection vulnerability was found in WhatsUp Professional. By exploiting this vulnerability malicious users can execute arbitrary SQL commands. This vulnerability can be exploited remotely at points related to the logon screen. Original advisories - Related products...

KLA10418 ACE vulnerability in eMule

A buffer overflow was found in eMule. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at a point related to IRC and web-server via a long string. Original advisories - Related products eMule CVE list CVE-2004-1892 high...

KLA10345 SB vulnerability in SUN JRE & JDK

An unspecified vulnerability was found in Sun JRE & JDK. By exploiting this vulnerability malicious users can access the clipboard. This vulnerability can be exploited remotely via a specially designed applet. Original advisories - Related products Sun-Java-JRE CVE list CVE-2001-1480 high Solutio...

KLA91243 Multiple vulnerabilities in TeamViewer

Multiple vulnerabilities were found in TeamViewer. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability can be exploited remotely to execute...

KLA91238 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Fabric ca...

KLA91069 ACE vulnerability in Microsoft Dynamics

A remote code execution vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-23652 Exploitation CVE list CVE-2026-23652 critical KB list Solution Install necessary updates from the KB section, that ar...

KLA91068 ACE vulnerability in Microsoft Office

A remote code execution vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-45659 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-SharePoint CVE list CVE-2026-4565...

KLA91002 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Ent...

KLA91005 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft 365 Copilot can b...

KLA82403 OSI vulnerability in Microsoft Dynamics

Information disclosure vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2025-29821 Related products Microsoft-Dynamics-365 CVE list CVE-2025-29821 high KB list 50567...