Lucene search
+L

123 matches found

OSV
OSV
•added 2023/08/25 12:00 a.m.•13 views

CVE-2023-41173

AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets...

5.9AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2023/08/25 12:00 a.m.•32 views

CVE-2023-41173

AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets...

7.6AI score0.00815EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/08/25 12:00 a.m.•16 views

AdGuard DNS 安全漏洞

AdGuard DNS is a free, privacy-focused ad-blocking DNS server from AdGuard DNS. A security vulnerability exists in versions prior to AdGuard DNS 2.2 that stems from allowing an attacker to cause a denial of service DoS via a malformed UDP packet...

7.5CVSS7.3AI score0.00815EPSS
SaveExploits0References2
NVD
NVD
•added 2023/01/26 10:15 p.m.•22 views

CVE-2022-45770

Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation...

7.8CVSS7.6AI score0.00611EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/01/26 12:00 a.m.•35 views

CVE-2022-45770

Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation...

7.8AI score0.00611EPSS
SaveExploits0References4
CVE
CVE
•added 2023/01/26 12:00 a.m.•104 views

CVE-2022-45770

CVE-2022-45770 affects AdGuard for Windows (x86) up to version 7.11, via driver adgnetworkwfpdrv.sys. Root cause: improper input validation in the driver, enabling local privilege escalation. Remediation: upgrade to AdGuard Windows 7.11.x patch (e.g., 7.11.40780) or later as per available release...

7.8CVSS7.5AI score0.00611EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/26 12:00 a.m.•9 views

CVE-2022-45770: Improper Input Validation

Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation...

7.8CVSS5.8AI score0.00611EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/01/26 12:00 a.m.•12 views

CVE-2022-45770

Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation...

7.6AI score0.00611EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•18 views

AdGuard for Windows 安全漏洞

AdGuard for Windows is a unique Windows ad block program from AdGuard Inc. With all the necessary features for an optimal web experience. A security vulnerability exists in Adguard For Windows x86 version 7.11 and prior versions that originates from incorrect input validation in the driver...

7.8CVSS7.5AI score0.00611EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/01/26 12:00 a.m.•6 views

PT-2023-14748

Name of the Vulnerable Software and Affected Versions Adguard For Windows x86 versions through 7.11 Description The issue is related to improper input validation in the adgnetworkwfpdrv.sys component, which can lead to local privilege escalation. Recommendations For Adguard For Windows x86 versio...

7.8CVSS0.00611EPSS
SaveExploits0References11
AlpineLinux
AlpineLinux
•added 2022/10/11 2:20 p.m.•25 views

CVE-2022-32175

In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery CSRF, in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules...

5.4CVSS6.1AI score0.00337EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/10/11 12:00 a.m.•16 views

PT-2022-21138

Name of the Vulnerable Software and Affected Versions AdGuardHome versions v0.95 through v0.108.0-b.13 Description The issue affects the custom filtering rules functionality, where an attacker can exploit it to delete or modify these rules by persuading an authorized user to follow a malicious...

5.4CVSS5.5AI score0.00337EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2022/10/11 12:00 a.m.•18 views

AdGuardHome 跨站请求伪造漏洞

AdGuardHome is AdguardTeam's blocking DNS servers for network-wide ads and trackers. A cross-site request forgery vulnerability exists in AdGuardHome versions v0.95 through v0.108.0-b. By exploiting this vulnerability, an attacker can convince an authorized user to follow malicious links, thereby...

5.4CVSS5.5AI score0.00337EPSS
SaveExploits1References3
OSV
OSV
•added 2021/03/03 8:15 p.m.•20 views

CVE-2021-27935

An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie...

7.5CVSS6.7AI score
SaveExploits0References1
NVD
NVD
•added 2021/03/03 8:15 p.m.•31 views

CVE-2021-27935

An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie...

7.5CVSS0.04967EPSS
SaveExploits0References1
Prion
Prion
•added 2021/03/03 8:15 p.m.•27 views

Design/Logic Flaw

An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie...

5CVSS7.5AI score0.04967EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/03/03 8:15 p.m.•11 views

CVE-2021-27935

An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie...

7.5CVSS7.4AI score0.04967EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/03/03 7:37 p.m.•31 views

CVE-2021-27935

An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie...

7.7AI score0.04967EPSS
SaveExploits0References1
Mend
Mend
•added 2021/03/03 7:37 p.m.•6 views

CVE-2021-27935

An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie...

8.7CVSS0.04967EPSS
SaveExploits0References1
CVE
CVE
•added 2021/03/03 7:37 p.m.•76 views

CVE-2021-27935

Affected software: AdGuard prior to 0.105.2. The issue is that the password hash is stored in the user cookie, enabling an attacker who can obtain a user cookie to offline-brute-force the password. This is a server-side authentication-credential exposure via cookies. Impact stated: offline passwo...

7.5CVSS7.5AI score0.04967EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder