3945 matches found
RUSTSEC-2022-0072 Location header incorporates user input, allowing open redirect
When hyper-staticfile performs a redirect for a directory request e.g. a request for /dir that redirects to /dir/, the Location header value was derived from user input the request path, simply appending a slash. The intent was to perform an origin-relative redirect, but specific inputs allowed...
Location header incorporates user input, allowing open redirect
When hyper-staticfile performs a redirect for a directory request e.g. a request for /dir that redirects to /dir/, the Location header value was derived from user input the request path, simply appending a slash. The intent was to perform an origin-relative redirect, but specific inputs allowed...
The vulnerability of the Hyper-V hardware virtualization system for Microsoft Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Hyper-V hardware virtualization technology in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
December 20, 2022—KB5022553 (OS Build 20348.1368) Out-of-band
None None...
December 20, 2022—KB5022554 (OS Build 17763.3772) Out-of-band
None None...
Microsoft Windows Multiple Vulnerabilities (KB5021237)
This host is missing an important security update according to Microsoft KB5021237 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Windows Multiple Vulnerabilities (KB5021233)
This host is missing an important security update according to Microsoft KB5021233 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2022-44682
Windows Hyper-V Denial of Service Vulnerability...
CVE-2022-44682
Windows Hyper-V Denial of Service Vulnerability...
CVE-2022-41094
Windows Hyper-V Elevation of Privilege Vulnerability...
CVE-2022-41094
Windows Hyper-V Elevation of Privilege Vulnerability...
CVE-2022-41094
Windows Hyper-V Elevation of Privilege Vulnerability...
Denial of service
Windows Hyper-V Denial of Service Vulnerability...
Privilege escalation
Windows Hyper-V Elevation of Privilege Vulnerability...
Windows Hyper-V Elevation of Privilege Vulnerability
...
Windows Hyper-V Denial of Service Vulnerability
...
December 13, 2022—KB5021249 (OS Build 20348.1366)
None None...
PT-2022-5951 · Microsoft · Windows Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insufficient access controls in the Hyper-V hardware virtualization system of Microsoft Windows, allowing an attacker to potentially elevate their privileges...
CVE-2022-41094
Technical details about CVE-2022-41094 are not publicly provided in the connected documents. The records show a Windows Hyper-V Elevation of Privilege entry but do not specify affected products/versions or root cause. Monitor for updates.
