Lucene search
+L

482 matches found

OSV
OSV
added 2018/04/12 1:29 a.m.6 views

CVE-2018-0974

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization ASLR bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server...

5.5CVSS5.8AI score0.0358EPSS
SaveExploits2References4
OSV
OSV
added 2018/04/12 1:29 a.m.5 views

CVE-2018-0971

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization ASLR bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server...

5.5CVSS5.8AI score0.0358EPSS
SaveExploits2References4
CNVD
CNVD
added 2018/04/11 12:0 a.m.3 views

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2018-08571)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Windows kernel is one of the Windows system kernels. An information disclosure vulnerability exists in Microsoft Windows kernel. An attacker can exploit this vulnerability by logging on...

5.5CVSS6.1AI score0.0358EPSS
SaveExploits2References1
CNVD
CNVD
added 2018/04/11 12:0 a.m.6 views

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2018-08801)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Windows kernel is one of the Windows system kernels. An information disclosure vulnerability exists in Microsoft Windows kernel. An attacker can exploit this vulnerability by logging on...

5.5CVSS6.1AI score0.0358EPSS
SaveExploits2References1
CNVD
CNVD
added 2018/04/11 12:0 a.m.7 views

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2018-08569)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Windows kernel is one of the Windows system kernels. An information disclosure vulnerability exists in Microsoft Windows kernel. An attacker can exploit this vulnerability by logging on...

5.5CVSS6.1AI score0.0358EPSS
SaveExploits2References1
RedHat Linux
RedHat Linux
added 2018/04/10 9:1 a.m.8 views

kernel: Kernel address information leak in drivers/acpi/sbshc.c:acpi_smbus_hc_add() function potentially allowing KASLR bypass

The acpismbushcadd function in drivers/acpi/sbshc.c in the Linux kernel, through 4.14.15, allows local users to obtain sensitive address information by reading dmesg data from an SBS HC printk call...

5.5CVSS6.7AI score0.0049EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.31 views

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization ASLR bypass. An attacker who successfully exploited the vulnerability could retrieve the memory address of a...

5.5CVSS5.3AI score0.03043EPSS
SaveExploits3
Microsoft CVE
Microsoft CVE
added 2018/04/10 7:0 a.m.30 views

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization ASLR bypass. An attacker who successfully exploited the vulnerability could retrieve the memory address of a...

5.5CVSS5.2AI score0.03692EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2018/04/10 12:0 a.m.145 views

KB4093115: Windows 8.1 and Windows Server 2012 R2 April 2018 Security Update

The remote Windows host is missing security update 4093115 or cumulative update 4093114. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Windows improperly handles objects in memory and incorrectly maps kernel memory. CVE-2018-1009 - ...

9.3CVSS8.2AI score0.40978EPSS
SaveExploits17References37
OpenVAS
OpenVAS
added 2018/03/14 12:0 a.m.79 views

Microsoft Windows Multiple Vulnerabilities (KB4088787)

This host is missing a critical security update according to Microsoft KB4088787 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.8226EPSS
SaveExploits57References45
Tenable Nessus
Tenable Nessus
added 2018/03/13 12:0 a.m.83 views

KB4088782: Windows 10 Version 1703 March 2018 Security Update

The remote Windows host is missing security update 4088782. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry. An attacker who successfully exploited this...

7.8CVSS8.3AI score0.8226EPSS
SaveExploits57References46
CNVD
CNVD
added 2018/03/09 12:0 a.m.5 views

Linux kernel kernel security protection bypass vulnerability

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A kernel security protection bypass vulnerability exists in the fdlockedioctl function in drivers/block/floppy.c in...

5.5CVSS6.5AI score0.00683EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/02/26 12:0 a.m.6 views

Schneider Electric IGSS SCADA Software Local Code Execution Vulnerability

Schneider Electric IGSS SCADA Software is a shared service platform for SCADA Data Acquisition and Supervisory Control systems from Schneider Electric France. A security vulnerability exists in Schneider Electric IGSS SCADA Software version 12 and earlier, which stems from incorrect security...

7.8CVSS7.4AI score0.00378EPSS
SaveExploits0References1
Prion
Prion
added 2018/02/12 11:29 p.m.22 views

Security feature bypass

A security misconfiguration vulnerability exists in Schneider Electric's IGSS SCADA Software versions 12 and prior. Security configuration settings such as Address Space Layout Randomization ASLR and Data Execution prevention DEP were not properly configured resulting in weak security...

4.6CVSS7.2AI score0.00378EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2018/02/12 11:29 p.m.8 views

CVE-2017-9967

A security misconfiguration vulnerability exists in Schneider Electric's IGSS SCADA Software versions 12 and prior. Security configuration settings such as Address Space Layout Randomization ASLR and Data Execution prevention DEP were not properly configured resulting in weak security...

7.8CVSS5.8AI score0.00378EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/01/05 12:0 a.m.31 views

Microsoft Windows Color Management Module Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Color Management Module Icm32.dll is one of these color management modules. An information disclosure vulnerability exists in Color Management Module Icm32.dll in Microsoft Windows 7 SP1, Windows Serv...

5.3CVSS6.3AI score0.07226EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/05 12:0 a.m.7 views

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2018-00517)

Microsoft Windows 10 and Windows Server Version 1709 are both products of Microsoft Corporation.Microsoft Windows 10 is a cross-platform operating system for PCs and laptops, tablets, and cell phones.Windows Server Version 1709 is a server operating system. kernel is one of the kernels. Server...

4.7CVSS6.2AI score0.02867EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2018/01/04 12:0 a.m.711 views

KB4056890: Windows 10 Version 1607 and Windows Server 2016 January 2018 Security Update (Meltdown)(Spectre)

The remote Windows host is missing security update 4056890 or 4057142. It is, therefore, affected by multiple vulnerabilities : - An vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local user access to...

7.8CVSS8.2AI score0.92621EPSS
SaveExploits59References28
OpenVAS
OpenVAS
added 2018/01/04 12:0 a.m.101 views

Microsoft Windows Multiple Vulnerabilities (KB4056899)

This host is missing an important security update according to Microsoft KB4056899 OpenVAS Vulnerability Test $Id: gbmskb4056899.nasl 8364 2018-01-10 16:59:46Z gveerendra $ Microsoft Windows Multiple Vulnerabilities KB4056899 Authors: Shakeel Copyright: Copyright C 2018 Greenbone Networks GmbH,...

7.1CVSS6.1AI score0.15023EPSS
SaveExploits15References1
Tenable Nessus
Tenable Nessus
added 2018/01/04 12:0 a.m.336 views

KB4056899: Windows Server 2012 January 2018 Security Update

The remote Windows host is missing security update 4056899 or cumulative update 4056896. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver ATMFD.dll when it fails to properly handle objects in memory...

7.8CVSS7.4AI score0.15023EPSS
SaveExploits15References14
Rows per page
Query Builder