Lucene search
+L

257 matches found

Circl
Circl
added 2022/02/10 2:26 a.m.9 views

CVE-2021-0166

creationtimestamp| type| source ---|---|--- 2022-02-10 02:26:23+00:00| seen| https://t.me/cibsecurity/37194 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

6.7CVSS6.3AI score0.00293EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/09 11:15 p.m.7 views

CVE-2021-0166

Exposure of Sensitive Information to an Unauthorized Actor in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access...

6.7CVSS6.1AI score0.00293EPSS
SaveExploits0References1
NVD
NVD
added 2022/02/09 11:15 p.m.29 views

CVE-2021-0166

Exposure of Sensitive Information to an Unauthorized Actor in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access...

6.7CVSS0.00293EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2022/02/09 11:15 p.m.56 views

CVE-2021-0166

Exposure of Sensitive Information to an Unauthorized Actor in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access...

6.7CVSS6.5AI score0.00293EPSS
SaveExploits0References2
CVE
CVE
added 2022/02/09 10:04 p.m.119 views

CVE-2021-0166

CVE-2021-0166 concerns firmware for Intel PROSet/Wireless W-Fi (and related Killer Wi‑Fi software) where a local attacker could exploit exposure of sensitive information to escalate privileges. The vulnerability is described as an information-disclosure risk present in firmware for multiple Intel...

6.7CVSS6.7AI score0.00293EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/02/09 10:04 p.m.8 views

CVE-2021-0166

Exposure of Sensitive Information to an Unauthorized Actor in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access...

6.7AI score0.00293EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/02/09 10:04 p.m.50 views

CVE-2021-0166

Exposure of Sensitive Information to an Unauthorized Actor in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access...

7.5AI score0.00293EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.27 views

Mageia: Security Advisory (MGASA-2019-0166)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.02615EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.32 views

Mageia: Security Advisory (MGASA-2018-0166)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.8AI score0.04554EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.43 views

Mageia: Security Advisory (MGASA-2020-0166)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.8AI score0.56691EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.18 views

Mageia: Security Advisory (MGASA-2014-0254)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4CVSS6.5AI score0.0893EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/01/26 12:00 a.m.115 views

McAfee Agent < 5.7.5 Multiple Vulnerabilities (SB10378)

The version of McAfee Agent, formerly McAfee ePolicy Orchestrator ePO Agent, installed on the remote host is prior to 5.7.5. It is, therefore, affected by the following vulnerabilities: - A command Injection Vulnerability in McAfee Agent MA for Windows prior to 5.7.5 allows local users to inject...

9.3CVSS7.7AI score0.02945EPSS
SaveExploits0References3
ThreatPost
ThreatPost
added 2022/01/21 5:13 p.m.60 views

McAfee Bug Can Be Exploited to Gain Windows SYSTEM Privileges

McAfee has patched two high-severity vulnerabilities in a component of its McAfee Enterprise product that attackers can use to escalate privileges, including up to SYSTEM. According to McAfee’s bulletin, the bugs are in versions prior to 5.7.5 of McAfee Agent, which is used in McAfee Endpoint...

9.3CVSS7.8AI score0.02945EPSS
SaveExploits0References10
Circl
Circl
added 2022/01/21 3:47 p.m.12 views

CVE-2022-0166

creationtimestamp| type| source ---|---|--- 2022-01-21 15:47:53+00:00| seen| https://t.me/truesecator/2545 2022-01-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=726 2022-01-24 18:05:00+00:00| seen| https://t.me/truesecator/2550 2026-09-01 20:01:58+00:00| seen|...

7.8CVSS7.4AI score0.02945EPSS
SaveExploits0References4
CISA
CISA
added 2022/01/21 12:00 a.m.113 views

McAfee Releases Security Update for McAfee Agent for Windows 

McAfee has released McAfee Agent for Windows version 5.7.5, which addresses vulnerabilities CVE-2021-31854 and CVE-2022-0166. An attacker could exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review McAfee Security Bulletin SB10378...

9.3CVSS7.2AI score0.02945EPSS
SaveExploits0References2
CERT
CERT
added 2022/01/20 12:00 a.m.41 views

McAfee Agent for Windows is vulnerable to privilege escalation due to OPENSSLDIR location

Overview McAfee Agent contains a privilege escalation vulnerability due to the use of an OPENSSLDIR variable that specifies a location where an unprivileged Windows user may be able to place files. Description CVE-2022-0166 McAfee Agent, which comes with various McAfee products such as McAfee...

7.8CVSS7.9AI score0.02945EPSS
SaveExploits0References2
NVD
NVD
added 2022/01/19 11:15 a.m.31 views

CVE-2022-0166

A privilege escalation vulnerability in the McAfee Agent prior to 5.7.5. McAfee Agent uses openssl.cnf during the build process to specify the OPENSSLDIR variable as a subdirectory within the installation directory. A low privilege user could have created subdirectories and executed arbitrary cod...

7.8CVSS0.02945EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/01/19 11:05 a.m.45 views

CVE-2022-0166 Privilege escalation vulnerability in McAfee Agent

A privilege escalation vulnerability in the McAfee Agent prior to 5.7.5. McAfee Agent uses openssl.cnf during the build process to specify the OPENSSLDIR variable as a subdirectory within the installation directory. A low privilege user could have created subdirectories and executed arbitrary cod...

7.8CVSS8.1AI score0.02945EPSS
SaveExploits0References2
CVE
CVE
added 2022/01/19 11:05 a.m.103 views

CVE-2022-0166

CVE-2022-0166 affects McAfee Agent prior to 5.7.5. The issue arises from using an OpenSSL OPENSSLDIR location as a subdirectory within the installation directory, allowing a low-privilege Windows user to place a crafted openssl.cnf in an accessible path and execute arbitrary code with SYSTEM priv...

7.8CVSS7.8AI score0.02945EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2021/08/17 12:00 a.m.51 views

OpenSSL: OCSP Invalid Key DoS Issue (20130205) - Windows

OpenSSL is prone to a denial of service attack. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5CVSS7.4AI score0.1965EPSS
SaveExploits0References1
Rows per page
Query Builder