Lucene search
+L

28003 matches found

Symantec
Symantec
added 2020/01/14 12:00 a.m.129 views

Microsoft Windows Remote Desktop Protocol CVE-2020-0610 Remote Code Execution Vulnerability

Description Microsoft Windows Remote Desktop Protocol is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition. Technologies...

0.6AI score0.67569EPSS
SaveExploits10Affected Software1
Symantec
Symantec
added 2020/01/14 12:00 a.m.40 views

Microsoft Windows GDI+ Component CVE-2020-0643 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

1.1AI score0.01307EPSS
SaveExploits0Affected Software3
Tenable Nessus
Tenable Nessus
added 2020/01/14 12:00 a.m.51 views

KB4534288: Windows Server 2012 January 2020 Security Update

The remote Windows host is missing security update 4534288 or cumulative update 4534283. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target...

10CVSS8.4AI score0.99222EPSS
SaveExploits22References29
CVE
CVE
added 2020/01/13 7:37 p.m.59 views

CVE-2012-4750

The only concrete details available concern Ezhometech EzServer 7.0. A memory corruption/Code Execution vulnerability stems from memcpy being fed an uncontrolled size while processing AMF requests in the RTMP path after the handshake, enabling a remote attacker to potentially crash or execute cod...

9.8CVSS9.6AI score0.08905EPSS
SaveExploits4References4Affected Software1
Cvelist
Cvelist
added 2020/01/13 7:22 p.m.37 views

CVE-2012-4761

A Privilege Escalation vulnerability exists in the unquoted Service Binary in SDPAgent or SDBAgent in Safend Data Protector Agent 3.4.5586.9772, which could let a local malicious user obtain privileges...

7.5AI score0.00483EPSS
SaveExploits1References3
CVE
CVE
added 2020/01/13 7:22 p.m.68 views

CVE-2012-4761

Summary: CVE-2012-4761 affects Safend Data Protector Agent 3.4.5586.9772. The vulnerability arises from an unquoted Service Binary for SDPAgent/SDBAgent, enabling a local attacker to escalate privileges. What’s vulnerable: the Windows service path containing spaces (SDBAgent.exe/SDPAgent.exe) and...

7.8CVSS7.4AI score0.00483EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2020/01/13 7:12 p.m.57 views

CVE-2012-4760

CVE-2012-4760 and CVE-2012-4761 pertain to Safend Data Protector Agent 3.4.5586.9772. The issues involve the SDBAgent/SDPAgent components: (1) WRITE_DAC privileges granted to all local users on the SDBAgent.exe file, enabling a local user to rewrite ACLs and potentially gain full local admin priv...

7.8CVSS7.4AI score0.00483EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2020/01/10 9:15 p.m.28 views

CVE-2012-4603

Citrix XenApp Online Plug-in for Windows 12.1 and earlier, and Citrix Receiver for Windows 3.2 and earlier could allow remote attackers to execute arbitrary code by convincing a target to open a specially crafted file from an SMB or WebDAV fileserver...

9.3CVSS7.9AI score0.06942EPSS
SaveExploits0References4
Circl
Circl
added 2020/01/10 8:32 p.m.11 views

CVE-2012-3822

creationtimestamp| type| source ---|---|--- 2020-01-10 20:32:52+00:00| seen| https://t.me/cibsecurity/9120...

7.5CVSS7.3AI score0.01872EPSS
SaveExploits2References1
Circl
Circl
added 2020/01/10 8:32 p.m.8 views

CVE-2012-3823

creationtimestamp| type| source ---|---|--- 2020-01-10 20:32:51+00:00| seen| https://t.me/cibsecurity/9119...

7.5CVSS7.3AI score0.01476EPSS
SaveExploits2References1
CVE
CVE
added 2020/01/10 8:22 p.m.157 views

CVE-2012-4603

CVE-2012-4603 affects Citrix XenApp Online Plug-in for Windows (12.1 and earlier) and Citrix Receiver for Windows (3.2 and earlier). Reported vulnerability allows remote code execution when a user opens a specially crafted file from an SMB or WebDAV fileserver. The initial description does not sp...

9.3CVSS7.9AI score0.06942EPSS
SaveExploits0References4Affected Software2
Cvelist
Cvelist
added 2020/01/10 8:22 p.m.31 views

CVE-2012-4603

Citrix XenApp Online Plug-in for Windows 12.1 and earlier, and Citrix Receiver for Windows 3.2 and earlier could allow remote attackers to execute arbitrary code by convincing a target to open a specially crafted file from an SMB or WebDAV fileserver...

8AI score0.06942EPSS
SaveExploits0References4
NVD
NVD
added 2020/01/10 8:15 p.m.36 views

CVE-2012-4284

A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHelper binary, which could let a remote malicious user execute arbitrary code...

10CVSS9.6AI score0.69523EPSS
SaveExploits7References4
NVD
NVD
added 2020/01/10 8:15 p.m.20 views

CVE-2012-3821

A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field...

4.3CVSS4.7AI score0.01169EPSS
SaveExploits2References5
d2
d2
added 2020/01/10 8:15 p.m.279 views

DSquare Exploit Pack: D2SEC_VISCOSITY

Name| d2secviscosity ---|--- CVE| CVE-2012-4284 Exploit Pack| D2ExploitPack Description| d2secviscosity Notes|...

10CVSS1.7AI score0.69523EPSS
SaveExploits7
CVE
CVE
added 2020/01/10 7:21 p.m.125 views

CVE-2012-3821

CVE-2012-3821 affects Arial Software Campaign Enterprise prior to or up to version 11.0.551, with a Security Bypass in the activate.asp page that could allow a remote attacker to modify the SerialNumber field. The trusted impact stated in sources is that this bypass enables unauthorized modificat...

4.3CVSS5.2AI score0.01169EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
added 2020/01/10 7:09 p.m.37 views

CVE-2012-4284

A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHelper binary, which could let a remote malicious user execute arbitrary code...

9.6AI score0.69523EPSS
SaveExploits7References4
CVE
CVE
added 2020/01/10 7:09 p.m.136 views

CVE-2012-4284

CVE-2012-4284 describes a privilege-escalation vulnerability in Viscosity 1.4.1 for Mac OS X. The issue stems from a path-name validation flaw in the setuid-root ViscosityHelper binary, which could let a remote attacker cause arbitrary code execution with root privileges. Documents identify Visco...

10CVSS9.5AI score0.69523EPSS
SaveExploits7References4Affected Software1
NVD
NVD
added 2020/01/10 5:15 p.m.14 views

CVE-2012-3822

Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials...

7.5CVSS7.5AI score0.01872EPSS
SaveExploits2References2
NVD
NVD
added 2020/01/10 5:15 p.m.15 views

CVE-2012-3824

In Arial Campaign Enterprise before 11.0.551, multiple pages are accessible without authentication or authorization...

7.5CVSS7.7AI score0.01847EPSS
SaveExploits2References2
Rows per page
Query Builder