Lucene search
+L

3606 matches found

osv_cve
osv_cve
•added 2020/06/09 8:15 p.m.•12 views

CVE-2020-1162

An elevation of privilege user to user vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from...

7.8CVSS7.1AI score0.00788EPSS
SaveExploits0References1
Prion
Prion
•added 2020/06/09 8:15 p.m.•28 views

Privilege escalation

An elevation of privilege user to user vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from...

4.6CVSS7.7AI score0.00814EPSS
SaveExploits0References1Affected Software2
Prion
Prion
•added 2020/06/09 8:15 p.m.•22 views

Privilege escalation

An elevation of privilege user to user vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from...

4.6CVSS7.7AI score0.00814EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2020/06/09 7:44 p.m.•39 views

CVE-2020-1324

An elevation of privilege user to user vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from...

8.2AI score0.00814EPSS
SaveExploits0References1
CVE
CVE
•added 2020/06/09 7:44 p.m.•120 views

CVE-2020-1324

CVE-2020-1324 is an elevation of privilege vulnerability in Windows Security Health Service that occurs when handling certain objects in memory. Per the NVD/Microsoft references, exploitation requires a logged-on attacker and could allow privilege elevation within the same user context due to in-...

7.8CVSS8AI score0.00814EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
•added 2020/06/09 7:43 p.m.•36 views

CVE-2020-1162

An elevation of privilege user to user vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from...

8.2AI score0.00788EPSS
SaveExploits0References1
CVE
CVE
•added 2020/06/09 7:43 p.m.•134 views

CVE-2020-1162

CVE-2020-1162 and CVE-2020-1324 are elevation-of-privilege flaws in Windows Security Health Service. They arise from how memory objects are handled, enabling local attackers who can log on to execute code with elevated privileges and potentially compromise memory, depending on the specific CVE. T...

7.8CVSS8AI score0.00788EPSS
SaveExploits0References1Affected Software3
Microsoft CVE
Microsoft CVE
•added 2020/06/09 7:00 a.m.•36 views

Windows Elevation of Privilege Vulnerability

An elevation of privilege user to user vulnerability exists in Windows Security Health Service when handling certain objects in memory. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted command that could exploit the...

7.8CVSS3.9AI score0.00814EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/09 12:00 a.m.•10 views

CVE-2020-1162: Undefined Security Weakness

An elevation of privilege user to user vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from...

7.8CVSS5.8AI score0.00788EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/06/09 12:00 a.m.•4 views

PT-2020-2796

Name of the Vulnerable Software and Affected Versions Windows Security Health Service affected versions not specified Description The issue is related to insecure privilege management in the Windows Security Health Service, allowing an attacker to elevate their privileges. To exploit this, an...

7.8CVSS0.00814EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2020/06/09 12:00 a.m.•3 views

PT-2020-2752

Name of the Vulnerable Software and Affected Versions Windows Security Health Service affected versions not specified Description The issue is related to insecure privilege management in the Windows Security Health Service, allowing an attacker to elevate their privileges. To exploit this, an...

7.8CVSS0.00788EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/09 12:00 a.m.•8 views

CVE-2020-1324: Undefined Security Weakness

An elevation of privilege user to user vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from...

7.8CVSS5.8AI score0.00814EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2020/06/08 5:01 p.m.•13 views

careers.fraserhealth.ca Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1189127 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/05/29 8:49 p.m.•12 views

animalhealthmedicalcenter.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1177762 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

6.1AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2020/05/28 9:20 p.m.•29 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2020-4362)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Asset Management Essentials, Maximo Industry Solutions including Maximo for Energy Optimization, Maximo for Government, Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life...

8.8CVSS1AI score0.02438EPSS
SaveExploits0Affected Software20
Schneier on Security
Schneier on Security
•added 2020/05/28 11:50 a.m.•30 views

Thermal Imaging as Security Theater

Seems like thermal imaging is the security theater technology of today. These features are so tempting that thermal cameras are being installed at an increasing pace. They're used in airports and other public transportation centers to screen travelers, increasingly used by companies to screen...

7.3AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2020/05/28 9:52 a.m.•15 views

Researchers Uncover Brazilian Hacktivist's Identity Who Defaced Over 4800 Sites

It's one thing for hackers to target websites and proudly announce it on social media platforms for all to see. It's, however, an entirely different thing to leave a digital trail that leads cybersecurity researchers right to their doorsteps. That's exactly what happened in the case of a hacktivi...

5.8AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2020/05/26 8:11 p.m.•93 views

Important: Red Hat Security Advisory: ipmitool security update

An update for ipmitool is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support, Red Hat Enterprise Linux 7.3 Telco Extended Update Support, and Red Hat Enterprise Linux 7.3 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security...

8.8CVSS7.5AI score0.0329EPSS
SaveExploits1References2
Openbugbounty
Openbugbounty
•added 2020/05/25 9:19 p.m.•7 views

thehague.worldlunghealth.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1171840 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

6.1AI score
SaveExploits0
CNVD
CNVD
•added 2020/05/22 12:00 a.m.•5 views

Information Leakage Vulnerability in the Appointment Registration System of Nanjing Medical Healthcare Information Technology Co.

Ltd. is a high-tech growing enterprise in China Nanjing Software Valley. Nanjing Medical Healthcare Appointment and Registration System has the features of unified number pool for internal and external networks, multi-appointment channels, registration and appointment to the point of time,...

6.5AI score
SaveExploits0
Rows per page
Query Builder