KLA12037 Security vulnerability in Microsoft Apps

A security bypass vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2021-1669 Related products Microsoft-Windows Microsoft-Windows-Server Microsoft-Windows-10 CVE list CVE-2021-1669 critical KB list...

KLA11933 XSS vulnerability in Microsoft Dynamics

A cross-site-scripting vulnerability was found in Microsoft Dynamics.Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2020-1591 Related products Microsoft-Dynamics-365 CVE list CVE-2020-1591 high KB list 4541722 Solution Install necessary updates fro...

KLA11746 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. Unspecified Microsoft can be exploited remotely to gain privileges. 2. An elevation of privilege vulnerability in Microsoft...

KLA11802 Security vulnerability in Zoom

Security vulnerability was found in Zoom. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2020-11500 Related products Zoom-MSI CVE list CVE-2020-11500 warning Solution Update to the latest version Download Zoom...

KLA11686 Information disclosure vulnerability in Microsoft RDC Manager

An information disclosure vulnerability was found in Remote Desktop Connection Manager. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2020-0765 Related products Remote-Desktop-Connection-Manager CVE list CVE-2020-0765 warning KB list...

KLA11673 Type confusion vulnerability was found in Adobe Flash Player

Type confusion vulnerability was found in Adobe Flash Player. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories APSB20-06 Related products Adobe-Flash-Player-ActiveX Adobe-Flash-Player-NPAPI Adobe-Flash-Player-PPAPI CVE list CVE-2020-3757 critical...

KLA11761 Multiple vulnerabilities in VLC media player

Multiple vulnerabilities were found in VLC media player. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Integer Underflow vulnerability can be exploited to cause a denial of service; 2. Heap-based buffer over-read...

KLA11412 Elevation of Privilege Vulnerability in Microsoft Exchange Server

Unspecified vulnerability was found in Microsoft Exchange server. Malicious users can exploit this vulnerability via specially designed request to gain privileges. Original advisories ADV190007 Related products Microsoft-Exchange-Server CVE list KB list 4471391 4471392 4487052 4345836 Solution...

KLA10482 Multiple vulnerabilities in Cisco AnyConnect SMC

Multiple serious vulnerabilities have been found in Cisco AnyConnect Secure Mobility Client. Malicious users can exploit these vulnerabilities to gain privileges or write arbitrary files. Below is a complete list of vulnerabilities 1. An unknown vulnerability can be exploited locally via a...

KLA10126 ACE vulnerability in Connected Backup

An unspecified vulnerability was found in Connected Backup. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed request. Original advisories - Related products Connected-Backup CVE list...

KLA10402 ACE vulnerability in Vallen Zipper

A heap overflow was found in Vallen Zipper. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ZIP file. Original advisories Xforce advisory Related products Vallen-Zipper CVE list KB list Solution...

KLA10154 WLF vulnerability in FTP Voyager

Directory traversal vulnerability was found in the FTP Voyager. By using this vulnerability spiteful abuser can erite arbitrary files. This vulnerability can be exploited from remote via specially designed filename. Original advisories test results Related products FTP-Voyager CVE list...

KLA10117 ACE vulnerability in Citrix XenApp Online plug-in

An unspecified vulnerability was found in the Citrix XenApp Online plug-in. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed web site Original advisories Citrix bulletin Related products...

KLA10040 RCE vulnerability in Adobe Download Manager

An unspecified vulnerability was found in Adobe Download Manager. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from network at a point related to a dm.ini file via a stack-based buffer overflow. Original advisories Adobe bulletin...

KLA10136 OSI vulnerability in DeviceLock

Improper ACL enforcing was found in DeviceLock. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited locally. Original advisories - Related products DeviceLock CVE list CVE-2006-4184 warning Solution Update to latest version Impact...

KLA91254 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denia...

KLA91028 OSI vulnerability in Microsoft Developer Tools

An information disclosure vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2026-42826 Exploitation Related products Microsoft-Azure CVE list CVE-2026-42826 critical Solution Install...

KLA73907 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Monitor Agent can be exploited remotely to gain...

KLA71649 PE vulnerability in Microsoft Browser

An elevation of privilege vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-43472 Related products Microsoft-Edge CVE list CVE-2024-43472 high Solution Install necessary updates from the Settings and more...

KLA70210 SB vulnerability in Apache HTTP Server

Security bypass vulnerability was found in Apache HTTP Server. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories Fixed in Apache HTTP Server 2.4.61 Related products Apache-HTTP-Server CVE list CVE-2024-39884 unknown Solution Update to the latest...

KLA65600 OSI vulnerability in FileZilla

Information disclosure vulnerability was found in FileZilla. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories oss-security – CVE-2024-31497: Secret Key Recovery of NIST P-521 Private Keys Through Biased ECDSA Nonces in PuTTY Client Exploitation...

KLA65125 SUI vulnerability in Microsoft Dynamics

A cross-site-scripting XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2024-21419 Related products Microsoft-Dynamics-365 CVE list CVE-2024-21419 high KB list 5035697 Solution Install necessary...

KLA64629 OSI vulnerability in VMWare Workstation

Out of bounds read vulnerability was found in VMWare Workstation. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories VMSA-2024-0005 Related products VMware-Workstation CVE list CVE-2024-22251 warning Solution Update to the latest version Download...

KLA64089 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a complete list of...

KLA48959 SB vulnerability in Microsoft System Center

A security feature bypass vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2023-24934 Related products Windows-Defender CVE list CVE-2023-24934 high KB list Solution Install necessary update...

KLA20122 Multiple vulnerabilities in Microsoft Open Source Software

Elevation of privilege vulnerability was found in Microsoft Open Source Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-44689 Related products Microsoft-Windows CVE list CVE-2022-44689 critical KB list Solution Install necessary updates fr...

KLA12312 SB vulnerability in Microsoft Apps

A security feature bypass vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2021-41363 Related products Intune-Management-Extension CVE list CVE-2021-41363 high KB list Solution Install necessary...

KLA12319 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An use after free vulnerability in MessageTask can be exploited to cause denial of...

KLA12356 RCE vulnerability in Apple iTunes

Remote code execution vulnerability was found in Apple iTunes U for iOS and iPadOS. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories About the security content of iTunes U 3.8.3 Related products Apple-iTunes CVE list CVE-2021-30862 high Solution Update...

KLA11981 ACE vulnerability in Microsoft Windows

A remote code execution vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2020-17022 Related products Microsoft-Windows Microsoft-Windows-10 CVE list CVE-2020-17022 critical KB list Solution Install...

KLA11783 Microsoft Advisory for Windows DNS servers

Microsoft is aware of a vulnerability involving packet amplification that affects Windows DNS servers. An attacker who successfully exploited this vulnerability could cause the DNS Server service to become nonresponsive. To exploit this vulnerability an attacker would need to have access to at...

KLA11643 SB vulnerability in Microsoft Device

A security feature bypass vulnerability was found in Microsoft Device. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2019-1314 Related products Microsoft-Windows Microsoft-Windows-10 CVE list CVE-2019-1314 warning KB list Solution Install...

KLA11544 A PE vulnerability in Microsoft Developer Tools

An elevation of privilege vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2019-1258 Related products Microsoft-Azure CVE list CVE-2019-1258 high KB list Solution Install necessary updates from the KB...

KLA11657 An elevation of privilege vulnerability in Microsoft Developer Tools

An elevation of privilege vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2019-1211 Related products Microsoft-Visual-Studio CVE list CVE-2019-1211 warning KB list Solution Install necessary updates...

KLA11596 SB vulnerability in LibreOffice

Use after free vulnerability was found in Structured Storage parser. Malicious users can exploit this vulnerability via writing to recently freed data to bypass security restrictions. Original advisories CVE-2018-10119 Use After Free in Structured Storage parser Related products LibreOffice CVE...

KLA10760 Security bypass vulnerabilities in Google Chrome

An unspecified vulnerability was found in Google Chrome. By exploiting this vulnerability malicious users can bypass same origin policy and sandbox mechanism protection. This vulnerability can be exploited remotely via an unknown vectors. Original advisories Google Chrome releases blog Related...

KLA10281 OSI vulnerability in OpenVPN

An unspecified vulnerability was found in OpenVPN. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a timing attack. Original advisories - Related products OpenVPN CVE list CVE-2013-2061 warning Solution Update to...

KLA10145 CI vulnerability in Documentum eRoom

Multiple XSS were found in Documentum eRoom. By exploiting this vulnerability malicious users can inject web script. This vulnerability can be exploited remotely via a specially designed URL. Original advisories - Related products EMC-Documentum-eRoom CVE list CVE-2013-3286 warning Solution Updat...

KLA10046 ACE vulnerability in ACDSee PRO

A memory corruption vulnerability was found in the ACDSee Pro. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited at a point related to IDEACDStd.apl. via a specially designed .gif file. Original advisories report Related products...

KLA10022 DoS vulnerability in DAEMON Tools

An unspecified vulnerability was found in the DAEMON Tools. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to DeviceIoControl via an invalid request. Original advisories NVD Related products...

KLA10241 ACE vulnerability in Lateral Arts Photobox Uploader

A buffer overflow was found in LA Photobox Uploader. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed URL. Original advisories Juniper description Related products Photobox-Uploader-ActiveX-Control C...

KLA10223 DoS vulnerability in Internet Download Manager

A buffer overflow was found in Internet Download Manager. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Original advisories - Related products...

KLA10423 ACE vulnerability in SpamGuard

Buffer overflows were found in SpamGuard. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at points related to mail parsing and config loading. Original advisories - Related products spamGuard CVE list CVE-2004-2429 high...

KLA91272 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, read local files, spoof user interface. Below is a complete...

KLA91071 OSI vulnerability in Microsoft Device

An information disclosure vulnerability was found in Microsoft Planetary Computer Pro. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2026-41104 Exploitation CVE list CVE-2026-41104 critical Solution Install necessary updates from the KB...

KLA91067 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Entra ID can be...

KLA91036 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerabilit...

KLA82886 DoS vulnerability in Apache Tomcat

Out of bounds memory read vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Denial of Service via invalid HTTP priority header Related products Apache-Tomcat CVE list CVE-2025-31650 critical Solution Update to...

KLA81540 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Agent can be exploit...

KLA74613 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 can be exploited to cause denial of service. 2. Inappropriate implementation...