Lucene search
+L

3343 matches found

CNNVD
CNNVD
added 2021/12/14 12:0 a.m.7 views

UiPath Assistant 注入漏洞

UiPath Assistant is a specialized tool for UiPath designed to make it easy and fun for users to interact with bots from the desktop. UiPath Assistant 21.4.4 suffers from a security vulnerability that stems from user control data provided to the --process-start parameter of the uipath-assistant://...

9.8CVSS8.4AI score0.01083EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/12/14 12:0 a.m.9 views

UiPath Assistant安全漏洞

UiPath Assistant is a specialized tool from UiPath designed to make interacting with bots from the desktop easy and fun.A security vulnerability exists in UiPath Assistant 21.4.4, which stems from a lack of effective trust management mechanisms in networked systems or products. An attacker could...

10CVSS5.9AI score0.01747EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/07 5:15 p.m.14 views

CVE-2021-37084

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart Assistant through text messages...

9.8CVSS5.8AI score0.00741EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/07 5:15 p.m.32 views

CVE-2021-37084

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart Assistant through text messages...

9.8CVSS0.00741EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/07 5:15 p.m.22 views

Input validation

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart Assistant through text messages...

7.5CVSS9.3AI score0.00741EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/12/07 4:5 p.m.33 views

CVE-2021-37084

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart Assistant through text messages...

9.6AI score0.00741EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/24 1:15 a.m.28 views

CVE-2021-42297

Windows 10 Update Assistant Elevation of Privilege Vulnerability...

7.8CVSS0.01454EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/11/24 1:15 a.m.3 views

CVE-2021-42297

Windows 10 Update Assistant Elevation of Privilege Vulnerability...

7.8CVSS5.8AI score0.01454EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2021/11/24 1:15 a.m.42 views

CVE-2021-43211

Windows 10 Update Assistant Elevation of Privilege Vulnerability...

7.1CVSS0.00743EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/24 1:15 a.m.19 views

Privilege escalation

Windows 10 Update Assistant Elevation of Privilege Vulnerability...

6.9CVSS5.3AI score0.01454EPSS
SaveExploits1References2
Prion
Prion
added 2021/11/24 1:15 a.m.23 views

Privilege escalation

Windows 10 Update Assistant Elevation of Privilege Vulnerability...

6.6CVSS5.2AI score0.00743EPSS
SaveExploits0References1
CVE
CVE
added 2021/11/24 1:5 a.m.61 views

CVE-2021-43211

CVE-2021-43211 concerns Windows Update Assistant with an elevation-of-privilege flaw due to insufficient access control. Multiple sources (NVD, CNVD, KLA, ENISA-related records) identify Windows Update Assistant as the affected component and describe privilege escalation as the impact. The EU/NVD...

7.1CVSS5.7AI score0.00743EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/24 1:5 a.m.31 views

CVE-2021-43211 Windows 10 Update Assistant Elevation of Privilege Vulnerability

...

5.5CVSS5.8AI score0.00743EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/11/24 1:5 a.m.13 views

CVE-2021-43211 Windows 10 Update Assistant Elevation of Privilege Vulnerability

...

5.5CVSS7.2AI score0.00743EPSS
SaveExploits0References1
CVE
CVE
added 2021/11/24 1:5 a.m.58 views

CVE-2021-42297

CVE-2021-42297 affects the Windows 10 Update Assistant, enabling local privilege escalation via a flaw in the Update Assistant that can be exploited by abusing symbolic links to delete a folder. Public advisories describe the flaw as a local privilege escalation in Update Assistant, with user int...

7.8CVSS5.4AI score0.01454EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/11/24 1:5 a.m.27 views

CVE-2021-42297 Windows 10 Update Assistant Elevation of Privilege Vulnerability

...

5CVSS5.5AI score0.01454EPSS
SaveExploits1References2
Zero Day Initiative
Zero Day Initiative
added 2021/11/24 12:0 a.m.25 views

Microsoft Windows Update Assistant Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability. The specific flaw exists within Windows Update Assistant. By creating a symbolic link, an attacker can abuse the Update...

6.7CVSS7.2AI score0.01454EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/11/22 12:0 a.m.62 views

Microsoft Windows Update Assistant权限提升漏洞

Microsoft Windows Update Assistant, a system update tool from Microsoft Corporation, contains an elevation of privilege vulnerability that stems from a lack of filtering and restriction on privilege handling, which could be exploited by an attacker to The vulnerability is caused by a lack of...

7.1CVSS3.4AI score0.00743EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/11/17 12:0 a.m.11 views

The vulnerability of the Windows Update Assistant’s software for handling updates leads to a lack of access control, allowing attackers to escalate their privileges.

The vulnerability of the Windows Update Assistant software relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

5.5CVSS6.4AI score0.00743EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/11/17 12:0 a.m.11 views

The vulnerability of the Windows Update Assistant’s software for handling updates leads to a lack of access control, allowing attackers to escalate their privileges.

The vulnerability of the Windows Update Assistant software relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

5CVSS6.2AI score0.01454EPSS
SaveExploits1References3
Rows per page
Query Builder