CVE-2022-0715

A CWE-287: Improper Authentication vulnerability exists that could cause an attacker to arbitrarily change the behavior of the UPS when a key is leaked and used to upload malicious firmware. Affected Product: APC Smart-UPS Family: SMT Series SMT Series ID=18: UPS 09.8 and prior / SMT Series...

CVE-2022-0715

A CWE-287: Improper Authentication vulnerability exists that could cause an attacker to arbitrarily change the behavior of the UPS when a key is leaked and used to upload malicious firmware. Affected Product: APC Smart-UPS Family: SMT Series SMT Series ID=18: UPS 09.8 and prior / SMT Series...

CVE-2022-0715

CVE-2022-0715 describes an improper authentication vulnerability in Schneider Electric APC Smart-UPS devices across multiple series (SMT/SMC/SCL/SMX/SRT and SmartConnect/SMTL), where a leaked key could authorize uploading unsigned firmware, allowing an attacker to arbitrarily change UPS behavior....

CVE-2022-0715

creationtimestamp| type| source ---|---|--- 2022-03-09 10:42:42+00:00| published-proof-of-concept| https://t.me/habrcomnews/3948 2022-03-09 15:30:00+00:00| seen| https://t.me/truesecator/2711 2022-03-09 22:15:14+00:00| seen| https://t.me/cibsecurity/38624 2022-03-10 17:35:45+00:00| exploited|...

Microsoft Windows Multiple Vulnerabilities (KB4537764)

This host is missing a critical security update according to Microsoft KB4537764 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4532693)

This host is missing a critical security update according to Microsoft KB4532693 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4537789)

This host is missing a critical security update according to Microsoft KB4537789 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-0715

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0745, CVE-2020-0792...

Privilege escalation

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0715, CVE-2020-0792...

CVE-2020-0715

Technical details for CVE-2020-0715 are not publicly provided in the connected documents. Monitor for updates from official advisories.

CVE-2020-0715

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0745, CVE-2020-0792...

Microsoft Windows Graphics Component Elevation of Privilege (CVE-2020-0715)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2019-0715

The CVE-2019-0715 entry affects Microsoft Hyper-V Network Switch and is described as a denial-of-service vulnerability. A privileged attacker on a guest OS can run a crafted application to crash the host server, indicating that input validation in the Hyper-V Network Switch path is inadequate. Th...

CVE-2019-0715 Windows Hyper-V Denial of Service Vulnerability

...

CVE-2019-0715 Windows Hyper-V Denial of Service Vulnerability

...

CVE-2016-0715

creationtimestamp| type| source ---|---|--- 2018-09-11 20:18:20+00:00| seen| https://t.me/cibsecurity/146...

CVE-2016-0715

Pivotal Cloud Foundry Elastic Runtime version 1.4.0 through 1.4.5, 1.5.0 through 1.5.11 and 1.6.0 through 1.6.11 is vulnerable to a remote information disclosure. It was found that original mitigation configuration instructions provided as part of CVE-2016-0708 were incomplete and could leave PHP...

CVE-2016-0715

CVE-2016-0715 affects Pivotal Cloud Foundry Elastic Runtime versions 1.4.0–1.4.5, 1.5.0–1.5.11, and 1.6.0–1.6.11, enabling remote information disclosure. The issue stems from incomplete mitigation guidance tied to CVE-2016-0708, leaving PHP Buildpack, Staticfile Buildpack, and potentially other c...

QNAP Photo Station 5.7.0 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: QNAP Photo Station 5.7.0 - Cross-Site Scripting Exploit Author: Mitsuaki Mitch Shiraishi - secureworks Vendor Homepage: https://www.qnap.com/ja-jp/security-advisory/nas-201808-23 Software Link: N/A Version: QNAP Photo Station...

QNAP Photo Station 5.7.0 Cross Site Scripting

Exploit Title: QNAP Photo Station 5.7.0 - Cross-Site Scripting Google Dork: N/A Date: 2018-09-07 Exploit Author: Mitsuaki Mitch Shiraishi - secureworks Vendor Homepage: https://www.qnap.com/ja-jp/security-advisory/nas-201808-23 Software Link: N/A Version: QNAP Photo Station versions 5.7.0 and...