CVE-2019-13282

creationtimestamp| type| source ---|---|--- 2019-07-04 23:00:00+00:00| published-proof-of-concept| https://t.me/cveNotify/207...

CVE-2017-8228

creationtimestamp| type| source ---|---|--- 2019-07-04 00:30:54+00:00| seen| https://t.me/cibsecurity/5351...

CentOS Update for vim-common CESA-2019:1619 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Windows Common Log File System (CLFS) driver allows a hacker to gain full control over the system.

The vulnerability of the Windows Common Log File System CLFS driver in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the system through a specially created application...

Network Quota (CVE-2002-0629; CVE-2002-0957)

...

The vulnerability of the Windows Common Log File System driver in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows Common Log File System CLFS driver in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Microsoft Windows Common Log File System Driver Privilege Permission and Access Control Issues Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Common Log File System Driver is one of the common log file system drivers. A...

CVE-2019-0959 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2019-0959

Technical details about CVE-2019-0959 are not publicly available in the provided documents. The KTM/registry context mentions the CVE historically, but no concrete root-cause, impact, or fix is described here. Monitor for updates.

CVE-2017-18378

creationtimestamp| type| source ---|---|--- 2019-06-12 00:30:25+00:00| seen| https://t.me/cibsecurity/4847 2024-12-21 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-21 2024-12-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

Microsoft Windows Multiple Vulnerabilities (KB4503293)

This host is missing a critical security update according to Microsoft KB4503293 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4503286)

This host is missing a critical security update according to Microsoft KB4503286 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

KLA11493 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...

Microsoft Windows Common Log File System CVE-2019-0959 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1803 for 32-bit Systems Microsoft Windows 10 Version 1803 for ARM64-based...

CVE-2018-10702

creationtimestamp| type| source ---|---|--- 2019-06-08 00:28:15+00:00| seen| https://t.me/cibsecurity/4780...

Incorrect Access Control

openstack-tripleo-common is vulnerable to Incorrect Access Control. This is due to the library not setting the Amphora image owner id. An attacker thus can create an image with the same tag amphora-image and share it with the service project to cause Octavia to pick up the compromised image...

CVE-2019-5522

creationtimestamp| type| source ---|---|--- 2019-06-06 17:02:10+00:00| seen| https://t.me/informationsecuritychannel/28220...

CVE-2018-13379

creationtimestamp| type| source ---|---|--- 2019-06-05 00:26:15+00:00| seen| https://t.me/cibsecurity/4686 2019-08-14 01:53:52+00:00| exploited| https://t.me/Pen7esting/339 2019-08-27 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=414 2019-08-27 07:07:15+00:00| seen|...

etcd: Improper Authentication in auth/store.go:AuthInfoFromTLS() via gRPC-gateway

Etcd, versions 3.2.0 through 3.2.25 and 3.3.0 through 3.3.10, are vulnerable to an improper authentication issue when role-based access control RBAC is used and client-cert-auth is enabled. If an etcd client server's TLS certificate contains a Common Name CN which matches a valid RBAC username, a...

A week in security (May 27 – June 2)

Last week on Malwarebytes Labs, we took readers through a deep dive—way down the rabbit hole—into the novel malware called “Hidden Bee.” We also looked at the potential impact of a government agency’s privacy framework, and delivered to readers everything they needed to know about ATM attacks and...