Lucene search
K

1540 matches found

Positive Technologies
Positive Technologies
added 2022/02/05 12:0 a.m.2 views

PT-2022-2245 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Remote Procedure Call Runtime. It allows remote attackers to execute arbitrary code on the system...

10CVSS9.3AI score0.07351EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2022/02/05 12:0 a.m.2 views

PT-2022-1895 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to incorrect code generation management in Azure Site Recovery. It allows a remote attacker to execute arbitrary code. Recommendations: At the moment, there...

9CVSS7.3AI score0.07054EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2022/02/05 12:0 a.m.3 views

PT-2022-1887 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to incorrect code generation management. It may allow a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information...

9CVSS7.2AI score0.07054EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/02/05 12:0 a.m.2 views

PT-2022-1891

Name of the Vulnerable Software and Affected Versions VP9 Video Extensions affected versions not specified Description The issue is related to incorrect code generation management in the VP9 Video Extensions package. An attacker can exploit this by sending a specially crafted request to execute...

7.8CVSS7.6AI score0.0239EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/02/05 12:0 a.m.2 views

PT-2022-1942 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to incorrect code generation management. It may allow a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information...

9CVSS7.3AI score0.07054EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2022/02/05 12:0 a.m.4 views

PT-2022-1894 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to incorrect code generation management in Azure Site Recovery. It allows a remote attacker to execute arbitrary code. Recommendations: At the moment, there...

9CVSS7.3AI score0.07054EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2022/02/05 12:0 a.m.2 views

PT-2022-1855 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to incorrect code generation management in Azure Site Recovery, allowing a remote attacker to execute arbitrary code. Recommendations: At the moment, there ...

9CVSS7.3AI score0.07054EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2022/02/01 12:0 a.m.0 views

The vulnerability of the cleanup.exe executable of the McAfee Agent antivirus software allows a malicious actor to execute arbitrary commands.

The vulnerability of the cleanup.exe executable of the McAfee Agent antivirus software is related to inadequate code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

7.7CVSS0.00325EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/26 12:0 a.m.0 views

The vulnerability in the built-in software of NETGEAR Wi-Fi routers such as D6200, D7000, R6020, R6080, R6050, JR6150, R6120, R6220, R6230, R6260, R6800, R6900v2, R6700v2, R7450, AC2100, AC2400, AC2600, RBK40, RBR40, RBS40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50, RBS50Y, and WNR2020 stems from incorrect code generation. This allows attackers to execute attacks on the server side using Server Side Include Injection (SSI).

The vulnerability of the built-in Wi-Fi router software of NETGEAR models D6200, D7000, R6020, R6080, R6050, JR6150, R6120, R6220, R6230, R6260, R6800, R6900v2, R6700v2, R7450, AC2100, AC2400, AC2600, RBK40, RBR40, RBS40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50, RBS50Y, and WNR2020 is related to...

7.1CVSS0.00115EPSS
Exploits0References3Affected Software28
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.0 views

The vulnerability of NETGEAR’s Wi-Fi routers, namely RBK40, RBR40, and RBS40, stems from improper handling of the cryptographic generation process. This allows attackers to execute a Server Side Include Injection (SSI) attack.

The vulnerability of the built-in Wi-Fi router software from NETGEAR, namely RBK40, RBR40, and RBS40, is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute a Server Side Include Injection SSI attack...

7.1CVSS0.00115EPSS
Exploits0References3Affected Software10
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.0 views

The vulnerability in the built-in software of NETGEAR Wi-Fi routers such as D6200, D7000, R6020, R6080, R6050, JR6150, R6120, R6220, R6230, R6260, R6800, R6900v2, R6700v2, R7450, AC2100, AC2400, AC2600, RBK40, RBR40, RBS40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50, and RBS50Y stems from incorrect code generation. This allows attackers to execute attacks on the server side using Server Side Include Injection (SSI).

The vulnerability of the built-in Wi-Fi router software from NETGEAR, including models D6200, D7000, R6020, R6080, R6050, JR6150, R6120, R6220, R6230, R6260, R6800, R6900v2, R6700v2, R7450, AC2100, AC2400, AC2600, RBK40, RBR40, RBS40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50, and RBS50Y, is relat...

7.1CVSS0.00067EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/01/15 12:0 a.m.2 views

PT-2022-1986 · Microsoft · Windows Remote Desktop Client +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Remote Desktop Client affected versions not specified Description: The issue is related to incorrect code generation management in the Remote Desktop Client of Microsoft Windows. It allows a remote attacker to execute...

9.3CVSS8.6AI score0.09997EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2022/01/15 12:0 a.m.2 views

PT-2022-1952 · Unknown · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to incorrect code generation management in the Raw Image Extension plugin for viewing RAW images. Exploitation of this issue may allow an attacker to execut...

7.8CVSS7.7AI score0.02551EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.0 views

The vulnerability of the DirectWrite programming interface in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the DirectWrite programming interface in Microsoft Windows operating systems is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS0.02845EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.0 views

The vulnerability of the kernel of Microsoft Windows allows a perpetrator to execute arbitrary code.

The vulnerability of the kernel of Microsoft Windows is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.9CVSS0.02117EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.0 views

The vulnerability of the threat detection mechanism for Microsoft Defender for IoT, related to improper code generation, allows a malicious actor to execute arbitrary code.

The vulnerability of the Microsoft Defender for IoT threat detection mechanism is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted request...

9CVSS0.04503EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.0 views

The vulnerability of HEVC Video Extensions relates to improper code generation, allowing attackers to execute arbitrary code.

The vulnerability of HEVC Video Extensions is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS0.12134EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.0 views

The vulnerability of the Media Foundation component in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Media Foundation component in Microsoft Windows operating systems is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...

7.8CVSS0.03807EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.0 views

The vulnerability of the DNS Server component of the Microsoft Windows operating system, which allows a perpetrator to execute arbitrary code.

The vulnerability of the DNS Server component of the Microsoft Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS0.03728EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.0 views

The vulnerability of the Demo_ExecuteProcessOnGroup process in the CommCell storage management software allows a hacker to execute arbitrary code.

The vulnerability of the DemoExecuteProcessOnGroup process in the CommCell storage management software is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request remotely...

9CVSS0.20456EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder