Lucene search
+L

1189 matches found

ThreatPost
ThreatPost
added 2022/02/25 6:49 p.m.199 views

6 Cyber-Defense Steps to Take Now to Protect Your Company

The headlines feel like Groundhog Day, if each of Bill Murray’s repeated days grew increasingly threatening: Ransomware attacks rise again. Ransomware attacks up over last quarter. Ransomware attacks tower over previous year. You get the idea. And yet again, a new report from Ivanti sends a clear...

9AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:0 a.m.11 views

The vulnerability of Windows Mobile Device Management for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of Windows Mobile Device Management for Windows operating systems is related to improper code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.02496EPSS
SaveExploits0References3
OSV
OSV
added 2022/02/09 5:15 p.m.2 views

CVE-2022-21992

Windows Mobile Device Management Remote Code Execution Vulnerability...

7.8CVSS7.4AI score0.02496EPSS
SaveExploits0References1
NVD
NVD
added 2022/02/09 5:15 p.m.17 views

CVE-2022-21992

Windows Mobile Device Management Remote Code Execution Vulnerability...

9.3CVSS0.02496EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/09 5:15 p.m.9 views

CVE-2022-21992

Windows Mobile Device Management Remote Code Execution Vulnerability...

9.3CVSS7.2AI score0.02496EPSS
SaveExploits0References3Affected Software13
Prion
Prion
added 2022/02/09 5:15 p.m.31 views

Remote code execution

Windows Mobile Device Management Remote Code Execution Vulnerability...

9.3CVSS7.9AI score0.02496EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2022/02/09 4:36 p.m.28 views

CVE-2022-21992 Windows Mobile Device Management Remote Code Execution Vulnerability

...

7.8CVSS8.3AI score0.02496EPSS
SaveExploits0References1
CVE
CVE
added 2022/02/09 4:36 p.m.155 views

CVE-2022-21992

Technical details about CVE-2022-21992 are not provided in the supplied documents. Connected records reference KEV listings and related Windows KB updates, but this set does not specify affected products, root cause, impact, or remediation for this CVE. Monitor for official disclosures or vendor ...

9.3CVSS8AI score0.02496EPSS
SaveExploits0References1Affected Software5
Microsoft CVE
Microsoft CVE
added 2022/02/08 8:0 a.m.37 views

Windows Mobile Device Management Remote Code Execution Vulnerability

...

9.3CVSS8AI score0.02496EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/02/08 12:0 a.m.2 views

PT-2022-1691 · Microsoft · Windows Mobile Device Management +1

Name of the Vulnerable Software and Affected Versions: Windows Mobile Device Management affected versions not specified Description: The issue is related to incorrect code generation management in Windows Mobile Device Management, which can be exploited by remote attackers to execute arbitrary co...

9.3CVSS8.2AI score0.02496EPSS
SaveExploits0References6
Kaspersky
Kaspersky
added 2022/02/08 12:0 a.m.174 views

KLA12457 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...

9.3CVSS9.4AI score0.53655EPSS
SaveExploits4References49
CNNVD
CNNVD
added 2022/02/08 12:0 a.m.6 views

Microsoft Windows Mobile Device Management 代码注入漏洞

Microsoft Windows Mobile Device Management is a software service from Microsoft Corporation USA for Windows devices to support interaction with mobile devices. A code injection vulnerability exists in Microsoft Windows Mobile Device Management. The following products and editions are...

9.3CVSS7.8AI score0.02496EPSS
SaveExploits0References5
NVD
NVD
added 2022/02/04 11:15 p.m.43 views

CVE-2022-23600

fleet is an open source device management, built on osquery. Versions prior to 4.9.1 expose a limited ability to spoof SAML authentication with missing audience verification. This impacts deployments using SAML SSO in two specific cases: 1. A malicious or compromised Service Provider SP could reu...

6.5CVSS0.00889EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/02/04 10:32 p.m.9 views

CVE-2022-23600 Limited ability to spoof SAML authentication with missing audience verification

fleet is an open source device management, built on osquery. Versions prior to 4.9.1 expose a limited ability to spoof SAML authentication with missing audience verification. This impacts deployments using SAML SSO in two specific cases: 1. A malicious or compromised Service Provider SP could reu...

5.3CVSS6.5AI score0.00889EPSS
SaveExploits0References2
CVE
CVE
added 2022/02/04 10:32 p.m.116 views

CVE-2022-23600

Fleet (fleetdm/fleet) before version 4.9.1 is vulnerable to a limited SAML authentication spoof due to missing audience verification. Two attack scenarios are described: (1) a malicious SP could log in as a Fleet user if the user has a matching email in Fleet and signs into the malicious SP via t...

6.5CVSS5.7AI score0.00889EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2022/01/14 12:0 a.m.35 views

ZOHO ManageEngine Desktop Central MSP Information Disclosure Vulnerability

ZOHO ManageEngine Desktop Central MSP is a suite of desktop and mobile device management software for MSPs Managed Service Providers from ZOHO USA. The software enables MSPs to remotely manage desktops, servers, and mobile devices in their customer networks, and provides differentiated management...

6.5CVSS3.1AI score0.02759EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.9 views

The software’s vulnerability regarding centralized device management by Fortinet FortiManager and the FortiAnalyzer network switch makes it susceptible to attacks. This vulnerability arises due to insufficient measures taken to protect the website structure, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the software for centralized device management of Fortinet’s FortiManager and FortiAnalyzer devices exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attac...

5.4CVSS5.6AI score0.00599EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.9 views

The vulnerability of Inforail’s mobile device management system allows a hacker to execute arbitrary code.

The vulnerability of Inforail’s mobile device management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted data...

10CVSS8.3AI score0.62244EPSS
SaveExploits0References8Affected Software1
NVD
NVD
added 2021/12/15 3:15 p.m.27 views

CVE-2021-43880

Windows Mobile Device Management Elevation of Privilege Vulnerability...

5.5CVSS0.00656EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/15 3:15 p.m.3 views

CVE-2021-43880

Windows Mobile Device Management Elevation of Privilege Vulnerability...

5.5CVSS6.6AI score0.00656EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder