4267 matches found
KLA71043 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1...
KLA70178 ACE vulnerability in Microsoft Dynamics
ACE vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2024-35260 Exploitation CVE list CVE-2024-35260 critical Solution Install necessary updates from the KB section, that are listed in your Windows...
KLA61730 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Blink History can be exploited to cause denial of service...
KLA49268 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Guest View can be exploited to cause denial of service or...
KLA20226 Multiple vulnerabilities in Microsoft System Center
Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerability in Microsoft Defender for Endpoint can be...
KLA20199 Multiple vulnerabilities in Opera
Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Mojo IPC can be exploited to cause denial of service or execute...
KLA12460 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, bypass security restrictions, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. Memory...
KLA20161 ACE vulnerability in Microsoft Apps
Remote code execution vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2023-21780 Exploitation Related products 3D-Builder CVE list CVE-2023-21780 critical KB list Solution Install necessary updates from t...
KLA12347 PE vulnerabilities in Microsoft Windows
Elevation of privilege vulnerabilities were found in Microsoft Windows. Malicious users can remotely exploit this vulnerability to gain privileges. Original advisories CVE-2021-43211 CVE-2021-42297 Exploitation Public exploits exist for this vulnerability. CVE list CVE-2021-43211 high...
KLA12344 SUI vulnerability in Microsoft SQL Server
A spoofing vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2021-41372 Exploitation Related products Microsoft-Power-BI CVE list CVE-2021-41372 critical KB list 5007903 Solution Install necessary updat...
KLA12273 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A memory safety vulnerability can be exploited to execute arbitrary code. 2. A code execution vulnerability for...
KLA12379 ACE vulnerability in Zoom
Code execution vulnerability was found in Zoom. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Zoom Security Bulletin Exploitation Public exploits exist for this vulnerability. Related products Zoom-MSI CVE list CVE-2020-9767 critical Solution Update...
KLA11933 XSS vulnerability in Microsoft Dynamics
A cross-site-scripting vulnerability was found in Microsoft Dynamics.Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2020-1591 Exploitation Related products Microsoft-Dynamics-365 CVE list CVE-2020-1591 high KB list 4541722 Solution Install necessar...
KLA12117 Use after free vulnerability in VMware Workstation and Player
A use after freevulnerability was found in VMware Workstation and Player. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories VMSA-2019-0009 Exploitation Related products VMware-Workstation VMware-Player CVE list CVE-2019-5525 critical Solution Update to...
KLA12116 PE vulnerability in VMware Workstation and Player
A DLL hijacking vulnerability was found in VMware Workstation and Player. Malicious users can exploit this vulnerability to gain privileges. Original advisories VMSA-2019-0007 Exploitation Public exploits exist for this vulnerability. CVE list CVE-2019-5526 critical Solution Update to the latest...
KLA11888 Multiple vulnerabilties in Microsoft SQL Server
An information disclosure vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2018-8527 CVE-2018-8532 CVE-2018-8533 Exploitation Public exploits exist for this vulnerability. CVE list...
KLA11600 OSI vulnerability in LibreOffice
Unspecified vulnerability was found in LibreOffice. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2018-10583 Exploitation Public exploits exist for this vulnerability. Related products LibreOffice CVE list CVE-2018-10583 critical Solution...
KLA11134 ACE vulnerability in Adobe Shockwave Player
A memory corruption vulnerability was found in Adobe Shockwave Player versions earlier than 12.3.1.201. By exploiting this vulnerability malicious users can execute arbitrary code. Original advisories Security update available for Shockwave Player | APSB17-40 Exploitation Related products...
KLA10872 Code execution vulnerability in Microsoft Silverlight
An improper memory objects access was found in Microsoft Silverlight. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed Silverlight application. Original advisories CVE-2016-3367 Exploitation Related...
KLA11442 ACE vulnerability in PuTTY
Stack-based buffer overflow vulnerability was found in PuTTY. Malicious users can exploit this vulnerability remotely cause denial of service and execute arbitrary code. Original advisories PuTTY vulnerability vuln-pscp-sink-sscanf Exploitation Public exploits exist for this vulnerability. CVE li...
KLA10490 Denial of service vulnerability in Cisco IOS
An unspecified vulnerability was found in Cisco IOS. By exploiting this vulnerability malicious users can modify settings or cause denial of service. This vulnerability can be exploited remotely via a specially designed AN messages. Original advisories Cisco alert Exploitation Related products...
KLA10126 ACE vulnerability in Connected Backup
An unspecified vulnerability was found in Connected Backup. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed request. Original advisories - Exploitation Related products Connected-Backup CVE...
KLA10219 ACE vulnerability in ImgBurn
An untrusted path vulnerability was found in ImgBurn. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via DLL hijacking. Original advisories - Exploitation Public exploits exist for this vulnerability. CVE list CVE-2011-040...
KLA10154 WLF vulnerability in FTP Voyager
Directory traversal vulnerability was found in the FTP Voyager. By using this vulnerability spiteful abuser can erite arbitrary files. This vulnerability can be exploited from remote via specially designed filename. Original advisories test results Exploitation Related products FTP-Voyager CVE li...
KLA10055 ACE & DoS vulnerability in OmniVista 4760
A buffer overflow vulnerability was found in OmniVista. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited from the network via a specially designed request. Original advisories Alcatel bulletin Exploitation...
KLA10166 ACE vulnerability in FrontRange HEAT
An SQL injection vulnerability was found in FrontRange HEAT. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at a point related to Call Logging. Original advisories - Exploitation Public exploits exist for this vulnerabilit...
KLA10223 DoS vulnerability in Internet Download Manager
A buffer overflow was found in Internet Download Manager. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Original advisories - Exploitation Public exploit...
KLA10240 CI vulnerability in Kontiki DMS
An XSS vulnerability was found in Kontiki DMS. By exploiting this vulnerability malicious users can inject arbitrary web script. This vulnerability can be exploited remotely via a specially designed call. Original advisories - Exploitation Public exploits exist for this vulnerability. CVE list...
KLA10293 Multiple vulnerabilities in PentaWare
Multiple serious vulnerabilities have been found in PentaWare. Malicious users can exploit these vulnerabilities to cause denial of service or extract files to an arbitrary directory. Below is a complete list of vulnerabilities 1. Unknown vectors can be exploited remotely via a specially designed...
KLA10096 ACE vulnerability in CAM UnZip
A buffer overflow was found in CAM UnZip. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ZIP archive. Original advisories - Exploitation Related products CAM-UnZip CVE list CVE-2006-2161 high...
KLA10373 Vulnerability in TuxPaint
Insecure files creation was found in TuxPaint. By exploiting this vulnerability malicious users can cause unknown impact via unspecified vectors. Original advisories - Exploitation Related products Tux-Paint-tuxpaint/ CVE list CVE-2005-3340 high Solution Update to latest version Impacts SB Securi...
KLA91285 Multiple vulnerabilities in Mozilla Thunderbird ESR
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability can ...
KLA91053 Multiple vulnerabilities in Opera
Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Codecs can be exploited remotely to execute arbitrary code. ...
KLA91001 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Race condition vulnerability in GPU can be exploited to cause denial of service. 2. Use...
KLA83531 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability can be exploited remotely to...
KLA68438 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Dawn can be exploited to cause denial of service or execu...
KLA65125 SUI vulnerability in Microsoft Dynamics
A cross-site-scripting XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2024-21419 Exploitation Related products Microsoft-Dynamics-365 CVE list CVE-2024-21419 high KB list 5035697 Solution Install...
KLA62518 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, inject malicious code, execute arbitrary code, obtain sensitive information, spoof user interface, cause denial of service. Below is a complete list of...
KLA62069 OSI vulnerability in Microsoft Developer Tools
An information disclosure vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2023-36013 Exploitation Related products PowerShell CVE list CVE-2023-36013 high KB list Solution Install necessa...
KLA61946 PE vulnerability in Microsoft Browser
An elevation of privilege vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2023-36027 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Edge CVE list CVE-2023-36027 high KB...
KLA20159 PE vulnerability in Microsoft Azure
Elevation of privilege vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2023-21531 Exploitation Related products Microsoft-Azure CVE list CVE-2023-21531 high KB list Solution Install necessary updates from the K...
KLA12463 Out of bounds write vulnerability in Mozilla Thunderbird
Out of bounds write vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories MFSA2022-07 Exploitation Public exploits exist for this vulnerability. Related products Mozilla-Thunderbird CV...
KLA12412 ACE vulnerability in VMware Workstation
Heap overflow vulnerability was found in VMware Workstation. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories VMSA-2022-0001 Exploitation Public exploits exist for this vulnerability. Related products VMware-Workstation VMware-Player CVE list...
KLA12315 OSI vulnerability in Microsoft System Center
An information disclosure vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2021-41352 Exploitation Related products Microsoft-System-Center-Operations-Manager CVE list CVE-2021-41352 critica...
KLA12446 PE vulnerability in Zoom
Privilege escalation vulnerability was found in Zoom. Malicious users can exploit this vulnerability to gain privileges. Original advisories Zoom Security Bulletin Exploitation Related products Zoom-MSI CVE list CVE-2021-34412 critical Solution Update to the latest version Download Zoom Impacts P...
KLA12261 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A type confusion vulnerability in JIT...
KLA12244 Microsoft Advisory for Active Directory Certificate Services
Microsoft is aware of PetitPotam which can potentially be used in an attack on Windows domain controllers or other Windows servers.To prevent NTLM Relay Attacks on networks with NTLM enabled, domain administrators must ensure that services that permit NTLM authentication make use of protections...
KLA12113 OSI vulnerability in Microsoft SQL Server
An information disclosure vulnerability was found in Microsoft SQL Serverl. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2021-26859 Exploitation Related products Microsoft-Power-BI CVE list CVE-2021-26859 critical KB list 5001285 5001284...
KLA12157 SB vulnerability in Mozilla Thunderbird
A security bypass vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories MFSA2021-17 Exploitation Public exploits exist for this vulnerability. CVE list CVE-2021-29950 critic...
KLA12037 Security vulnerability in Microsoft Apps
A security bypass vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2021-1669 Exploitation Related products Microsoft-Windows Microsoft-Windows-Server Microsoft-Windows-10 CVE list CVE-2021-1669...