4267 matches found
KLA65258 ACE vulnerability in Opera
Use after free vulnerability was found in Opera. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories Opera 108.0.5067.40 Stable update Stable Channel Update for Desktop Exploitation Public exploits exist for this vulnerability. CV...
KLA64629 OSI vulnerability in VMWare Workstation
Out of bounds read vulnerability was found in VMWare Workstation. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories VMSA-2024-0005 Exploitation Related products VMware-Workstation CVE list CVE-2024-22251 warning Solution Update to the latest versi...
KLA12152 ACE vulnerability in Microsoft Developer Tools
A remote code execution vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-28448 Exploitation Related products Microsoft-Visual-Studio CVE list CVE-2021-28448 high KB list Solution Install...
KLA12163 DoS vulnerability in Mozilla Thunderbird
A denial of service vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to cause denial of service. Original advisories MFSA2021-19 Exploitation Related products Mozilla-Thunderbird CVE list CVE-2021-29951 high Solution Update to the latest version...
KLA12074 PE vulnerabilities in Microsoft Azure
An elevation of privilege vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure IoT CLI extension can be exploited remotely to gain...
KLA11802 Security vulnerability in Zoom
Security vulnerability was found in Zoom. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2020-11500 Exploitation Public exploits exist for this vulnerability. Related products Zoom-MSI CVE list CVE-2020-11500...
KLA11643 SB vulnerability in Microsoft Device
A security feature bypass vulnerability was found in Microsoft Device. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2019-1314 Exploitation Related products Microsoft-Windows Microsoft-Windows-10 CVE list CVE-2019-1314 warning KB list...
KLA11544 A PE vulnerability in Microsoft Developer Tools
An elevation of privilege vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2019-1258 Exploitation Related products Microsoft-Azure CVE list CVE-2019-1258 high KB list Solution Install necessary updates...
KLA11476 PE vulnerability in LibreOffice
Unspecified vulnerability was found in LibreOffice. Malicious users can exploit this vulnerability via hyperlink processing to gain privileges. Original advisories CVE-2019-9847 Executable hyperlink targets executed unconditionally on activation Exploitation Related products LibreOffice CVE list...
KLA11466 Obsolete Adobe Flash Player for Windows
Microsoft released update to address vulnerabilities in Flash Player. For details look at KLA11465. Original advisories ADV190011 Exploitation Related products Microsoft-Windows CVE list KB list 4493478 Solution Install necessary updates from the KB section, that are listed in your Windows Update...
KLA10937 Obsolete Adobe Flash Player for Windows
Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer. For details look at KLA10936. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...
KLA10145 CI vulnerability in Documentum eRoom
Multiple XSS were found in Documentum eRoom. By exploiting this vulnerability malicious users can inject web script. This vulnerability can be exploited remotely via a specially designed URL. Original advisories - Exploitation Related products EMC-Documentum-eRoom CVE list CVE-2013-3286 warning...
KLA10022 DoS vulnerability in DAEMON Tools
An unspecified vulnerability was found in the DAEMON Tools. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to DeviceIoControl via an invalid request. Original advisories NVD Exploitation Public...
KLA10140 ACE vulnerability in Download Accelerator Plus
A buffer overflow was found in Download Accelerator Plus. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed M3U file. Original advisories - Exploitation Public exploits exist for this vulnerability...
KLA91306 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in ANGLE can be exploited...
KLA91303 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denial of...
KLA91071 OSI vulnerability in Microsoft Device
An information disclosure vulnerability was found in Microsoft Planetary Computer Pro. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2026-41104 Exploitation CVE list CVE-2026-41104 critical KB list Solution Install necessary updates from t...
KLA91036 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerabilit...
KLA83529 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability i...
KLA82886 DoS vulnerability in Apache Tomcat
Out of bounds memory read vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Denial of Service via invalid HTTP priority header Exploitation Public exploits exist for this vulnerability. Related products...
KLA82402 PE vulnerability in Microsoft SQL Server
An elevation of privilege vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-29803 Exploitation Related products Microsoft-SQL-Server Microsoft-SQL-Server-Management-Studio CVE list CVE-2025-29803 high...
KLA79599 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Edge...
KLA78054 PE vulnerability in Microsoft Apps
An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-49147 Exploitation Related products Microsoft-PC-Manager CVE list CVE-2024-49147 critical Solution Install necessary updates from th...
KLA74055 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Dataverse can be exploited remotely t...
KLA73803 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges, spoof user interface, perform cross-site scripting attack, execute arbitrary code. Below is a complete list of...
KLA73226 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 on-premise...
KLA71649 PE vulnerability in Microsoft Browser
An elevation of privilege vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-43472 Exploitation Related products Microsoft-Edge CVE list CVE-2024-43472 high Solution Install necessary updates from the...
KLA71413 XSS vulnerability in Microsoft Dynamics
Cross-site-scripting XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2024-38166 Exploitation Related products Dynamics-CRM-Service CVE list CVE-2024-38166 high KB list Solution Install necessary...
KLA77114 ACE vulnerability in Microsoft Mariner
Remote code execution vulnerability was found in Microsoft Mariner. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2024-5535 Exploitation Public exploits exist for this vulnerability. Related products CBL-Mariner-2.0...
KLA70898 SUI vulnerability in Microsoft Browser
Spoof user interface vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2024-38156 Exploitation Related products Microsoft-Edge CVE list CVE-2024-38156 high Solution Install necessary updates from the...
KLA65640 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denia...
KLA65277 PE vulnerability in Microsoft Apps
An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-28916 Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details. Related...
KLA64089 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a complete list of...
KLA52661 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Memor...
KLA52354 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Edge Chromium-based can be exploited...
KLA50777 ACE vulnerability in Mozilla Firefox
Use after free vulnerability was found in Mozilla Firefox. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories MFSA2023-26 Exploitation Related products Mozilla-Firefox CVE list CVE-2023-3600 critical Solution Update to the latest...
KLA50769 OSI vulnerability in Microsoft Azure
An information disclosure vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2023-36868 Exploitation Related products Microsoft-Azure CVE list CVE-2023-36868 high KB list Solution Install necessary...
KLA50362 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in WebRTC can be exploited to cause denial of service or...
KLA48556 PE vulnerability in Microsoft System Center
An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2023-23389 Exploitation Related products Microsoft-Defender-for-Endpoint-for-Windows CVE list CVE-2023-23389 high KB list Soluti...
KLA19248 PE vulnerability in Microsoft System Center
An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-35828 Exploitation Public exploits exist for this vulnerability. Related products Windows-Defender CVE list CVE-2022-35828...
KLA12597 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security UI vulnerability in cursor can be exploited to spoo...
KLA12510 Spoofing vulnerability in Microsoft SQL Server
A spoofing vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2022-23292 Exploitation Related products Microsoft-Power-BI CVE list CVE-2022-23292 warning KB list Solution Install necessary updates from t...
KLA12356 RCE vulnerability in Apple iTunes
Remote code execution vulnerability was found in Apple iTunes U for iOS and iPadOS. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories About the security content of iTunes U 3.8.3 Exploitation Public exploits exist for this vulnerability. Related product...
KLA12185 Multiple vulnerabilities in Mozilla Thunderbird
Security bypass vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit this vulnerabilities to bypass security restrictions. Original advisories MFASA2021-22 Exploitation Public exploits exist for this vulnerability. CVE list CVE-2021-29957 warning CVE-2021-29956 warning...
KLA11814 Use after free vulnerability in Adobe Flash Player
Use after free vulnerability was found in Adobe Flash Player. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories APSB20-30 Exploitation Related products Adobe-Flash-Player-ActiveX Adobe-Flash-Player-NPAPI Adobe-Flash-Player-PPAPI CVE list CVE-2020-9633...
KLA11751 Multiple vulnerabilities in Opera
Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A implementation vulnerability in WebView...
KLA11673 ACE vulnerability in Adobe Flash Player
Type confusion vulnerability was found in Adobe Flash Player. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories APSB20-06 Exploitation Public exploits exist for this vulnerability. Related products Adobe-Flash-Player-ActiveX Adobe-Flash-Player-NPAPI...
KLA11657 An elevation of privilege vulnerability in Microsoft Developer Tools
An elevation of privilege vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2019-1211 Exploitation Related products Microsoft-Visual-Studio CVE list CVE-2019-1211 warning KB list Solution Install...
KLA11435 SB vulnerability in Microsoft Products (OSS)
A security feature bypass vulnerability was found in Microsoft Products Open Source Software. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2019-0816 Exploitation Related products Microsoft-Azure CVE list CVE-2019-0816 warning KB list...
KLA10102 OSI vulnerability in Cerberus FTP Server
An unspecified vulnerability was found in the Cerberus FTP Server. By exploiting this vulnerability malicious users can obtain information about user accounts. This vulnerability can be exploited from the network at a point related to SSH auth via login result analysis. Original advisories Cerber...