4267 matches found
KLA91046 SUI vulnerability in Microsoft Server Software
A spoofing vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to perform cross-site scripting attack, spoof user interface. Original advisories CVE-2026-42897 Exploitation Public exploits exist for this vulnerability. Malware exists for this...
KLA91013 PE vulnerability in Microsoft Apps
An elevation of privilege vulnerability was found in Microsoft Bing. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-32186 Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details. Related...
KLA91073 DoS vulnerability in Microsoft Developer Tools
Denial of service vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2025-6965 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Visual-Studio CVE list...
KLA82403 OSI vulnerability in Microsoft Dynamics
Information disclosure vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2025-29821 Exploitation Related products Microsoft-Dynamics-365 CVE list CVE-2025-29821 high ...
KLA74056 OSI vulnerability in Microsoft Azure
Information disclosure vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2024-38204 Exploitation Related products Microsoft-Azure CVE list CVE-2024-38204 high KB list Solution Install necessary updat...
KLA73222 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface, obtain sensitive information. Below is a...
KLA71399 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, execute arbitrary code, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1...
KLA68204 DoS vulnerability in Opera
Type confusion vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Opera 110.0.5130.39 Stable update Stable Channel Update for Desktop Exploitation Public exploits exist for this vulnerability. Malware exists for this...
KLA62193 ACE vulnerability in Apache Tomcat
A improper input validation vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Fixed in Apache Tomcat 10.1.16 Exploitation Public exploits exist for this vulnerability. Related products Apache-Tomcat CVE list...
KLA51619 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability ...
KLA50322 Multiple vulnerabilities in Microsoft Azure
A spoofing vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to spoof user interface. Original advisories CVE-2023-21569 CVE-2023-21565 Exploitation Related products Microsoft-Azure CVE list CVE-2023-21565 high CVE-2023-21569 high KB list Solution...
KLA48959 SB vulnerability in Microsoft System Center
A security feature bypass vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2023-24934 Exploitation Public exploits exist for this vulnerability. Related products Windows-Defender CVE list...
KLA48687 OSI vulnerability in Microsoft Apps
An information disclosure vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2023-28303 Exploitation Public exploits exist for this vulnerability. CVE list CVE-2023-28303 warning KB list Solution Updat...
KLA19255 SUI vulnerability in Microsoft System Center
A spoofing vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2022-37972 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Endpoint-Configuration-Manager CVE list...
KLA12570 Multiple vulnerabilities in Opera
Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Out of bounds memory access vulnerability in WebGL can be exploited to cause denial of service. 2. Us...
KLA12476 Multiple vulnerabilities in Microsoft Apps
Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerability in Microsoft Intune Portal for iOS can be...
KLA12406 RCE vulnerability in Apache Log4j
Remote code execution vulnerability was found in Apache Log4j. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Fixed in Log4j 2.17.1 Java 8, 2.12.4 Java 7 and 2.3.2 Java 6 Exploitation Public exploits exist for this vulnerability. CVE list...
KLA62329 ACE vulnerability in Microsoft Mariner
A spoofing vulnerability was found in Microsoft Mariner. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2021-43896 Exploitation Public exploits exist for this vulnerability. Related products CBL-Mariner-2.0 PowerShell CVE list CVE-2021-43896 high K...
KLA12443 RCE vulnerability in Zoom
Remote code execution vulnerability was found in Zoom. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Zoom Security Bulletin Exploitation Public exploits exist for this vulnerability. Related products Zoom-MSI CVE list CVE-2021-34420 high Solution...
KLA12248 Microsoft Advisory (ESU) for Active Directory Certificate Services
Microsoft is aware of PetitPotam which can potentially be used in an attack on Windows domain controllers or other Microsoft Products Extended Security Update.To prevent NTLM Relay Attacks on networks with NTLM enabled, domain administrators must ensure that services that permit NTLM authenticati...
KLA12222 SUI vulnerability in Microsoft Bing Search
A spoofing vulnerability was found in Microsoft Bing Search. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2021-33753 Exploitation Related products Microsoft-Edge CVE list CVE-2021-33753 high KB list Solution Install necessary updates from the KB...
KLA12212 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Edge Chromium-based can be exploited...
KLA12232 DoS vulnerability in Wireshark
Infinite loop vulnerability was found in Wireshark. Malicious users can exploit this vulnerability to cause denial of service. Original advisories DVB-S2-BB dissector infinite loop Exploitation Public exploits exist for this vulnerability. Related products Wireshark CVE list CVE-2021-22222 critic...
KLA12186 ACE vulnerability in LibreOffice
A code execution vulnerability was found in LibreOffice. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories fileloc extension added to macOS executable denylist Exploitation Related products LibreOffice CVE list CVE-2021-25632 unknown Solution Update to...
KLA12130 ACE vulnerability in Microsoft Developer Tools
A remote code execution vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2020-17163 Exploitation Related products Microsoft-Visual-Studio CVE list CVE-2020-17163 critical KB list Solution Instal...
KLA12067 OSI vulnerability in Microsoft Browser
An information disclosure vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2021-24100 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Edge CVE list...
KLA12036 Use after free vulnerabiity in Mozilla Thunderbird
Use after free vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories MFSA2021-02 Exploitation Public exploits exist for this vulnerability. CVE list CVE-2020-16044 critical Solution Update to the latest versio...
KLA12016 DoS vulnerability in Mozilla Thunderbird
A stack overflow vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to cause denial of service. Original advisories MFSA2020-53 Exploitation Related products Mozilla-Thunderbird CVE list CVE-2020-26970 critical Solution Update to the latets version...
KLA11786 OSI vulnerability in LibreOffice
OSI vulnerability was found in LibreOffice. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2020-12801 Exploitation Related products LibreOffice CVE list CVE-2020-12801 warning Solution Update to the latest version Download LibreOffice Impac...
KLA11788 Multiple vulnerabilities in Mpmtp installer
Absolutely unique vulnerability was found in mpmtp system installer. Vulnerability can be exploited different ways, but the easiest way is running installer with /dos switch which leading to a blue screen of death and the need to reinstall Windows due to a failure of the system kernel driver. Thi...
KLA11719 Use after free vulnerability in Opera
Use after free vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Changelog for opera 66 Stable Channel Update for Desktop Exploitation Public exploits exist for this vulnerability. CVE list CVE-2020-6377 critical...
KLA11659 A spoofing vulnerability in Microsoft Azure
A spoofing vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2019-1234 Exploitation Related products Microsoft-Azure CVE list CVE-2019-1234 warning KB list Solution Install necessary updates from the KB...
KLA12119 Multiple vulnerabilities in VMware Workstation and Player
Multiple vulnerabilities were found in VMware Workstation and Player. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability can be exploited via special crafted packet...
KLA11800 Security vulnerability in Zoom
Validation vulnerability in Zoom for macOS can be exploited remotely to bypass security restrictions, obtain sensitive information. Original advisories Zoom Security CVE-2019-13567 CVE-2019-13567 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability...
KLA11895 SB vulnerability in Microsoft Device
A security feature bypass vulnerability was found in Microsoft Device. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2018-8117 Exploitation Related products Microsoft-Windows CVE list CVE-2018-8117 high KB list Solution Install necessary...
KLA11071 Obsolete Adobe Flash Player for Windows
Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer. For details look at KLA11066. Original advisories ADV170009 Exploitation Related products Microsoft-Windows CVE list KB list 4025376 Solution Install necessary updates from the KB section, that are listed ...
KLA11063 Denial of service vulnerabilities in Wireshark
Multiple serious vulnerabilities have been found in Wireshark version 2.2.7. Malicious users can exploit these vulnerabilities to cause a denial of service. Below is a complete list of vulnerabilities: 1. A stack exhaustion vulnerability in the DAAP dissector can be exploited remotely via a...
KLA10966 Multiple vulnerabilities in qBittorrent
CVSS: 4.3 Detect date: 03/04/2017 Severity: Warning Description: Multiple serious vulnerabilities have been found in qBittorrent before 3.3.11. Malicious users can exploit these vulnerabilities to cause XSS. Affected products: qBittorrent before 3.3.11 Solution: Update to the latest version...
KLA10781 Code execution vulnerability in pidgin-otr plugin.
Use-after-free vulnerability was found in Off-the-Record Messaging OTR pidgin-otr plugin. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via vectors related to the “Authenticate buddy” menu item. Technical details This...
KLA10670 Multiple vulnerabilities in Adobe products
Multiple serious vulnerabilities have been found in Adobe products. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Type confusion,...
KLA10366 OSI vulnerability in Titan FTP Server
A directory traversal vulnerability was found in Titan FTP Server. By exploiting this vulnerability malicious users can list usernames or home folder. This vulnerability can be exploited remotely via specially designed parameters. Original advisories Changelog Exploitation Public exploits exist f...
KLA10296 ACE vulnerability in Polaris
An unspecified vulnerability was found in Polaris. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DOCX file. Original advisories ZDI Exploitation Related products Polaris-Office-for-Android CVE lis...
KLA10049 CI vulnerability in APC PowerChute
A cross-site scripting vulnerability was found in PowerChute. By exploiting this vulnerability malicious users can inject arbitrary web script. This vulnerability can be exploited from the network at a point related to unknown vectors. Original advisories vulnerability description Exploitation...
KLA10312 ACE vulnerability in SAP Business One 2005
A buffer overflow was found in SAP Business One. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packet. Original advisories - Exploitation Public exploits exist for this vulnerability. CVE list...
KLA10042 Critical vulnerability in Adobe Download Manager
Improper request validation at NOS Microsystems getPlus Download Manager was found in Adobe Download Manager. Malicious users can exploit this vulnerability to bypass security and install arbitrary programs via a specially designed download site name. Original advisories Adobe bulletin Exploitati...
KLA10308 ACE vulnerability in RealVNC
An unspecified vulnerability was found in RealVNC. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed RFB data. Original advisories - Exploitation Public exploits exist for this vulnerability. Related...
KLA91072 Multiple vulnerabilities in Microsoft Apps
Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in M365 Copilot can be exploited remotely to obta...
KLA91045 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Denial ...
KLA91047 OSI vulnerability in Microsoft Apps
An information disclosure vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2026-41615 Exploitation Related products Microsoft-Authenticator-for-Android Microsoft-Authenticator-for-IOS CVE list...
KLA91019 Multiple vulnerabilities in Apache HTTP Server
Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, bypass security restrictions, execute arbitrary code, inject malicious code, gain privileges. Below is a complete list of...