CVE-2022-25849

CVE-2022-25849 affects joyqi/hyper-down, a Markdown parser library. The vulnerability stems from improper filtering of href attributes in the markdown parser, enabling cross-site scripting (XSS). Affected versions start at 0.0.0 and continue thereafter. Public details describe an XSS vector in th...

CVE-2022-25849 Cross-site Scripting (XSS)

The package joyqi/hyper-down from 0.0.0 are vulnerable to Cross-site Scripting XSS because the module of parse markdown does not filter the href attribute very well...

PT-2022-17566 · Joyqi · Hyper-Down

Name of the Vulnerable Software and Affected Versions: joyqi/hyper-down versions 0.0.0 and later Description: The issue arises from improper validation of the href attribute in the markdown parser module, leading to Cross-site Scripting XSS. There is no information about the estimated number of...

Microsoft Windows Hyper-V Elevation of Privilege Vulnerability

Microsoft Windows Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization, Microsoft Windows Hyper-V has an elevation of privilege vulnerability that stems from improper privilege assignment in the application and...

Microsoft Patch Tuesday Fixes New Windows Zero-Day; No Patch for Exchange Server Bugs

Microsoft's Patch Tuesday update for the month of October has addressed a total of 85 security vulnerabilities, including fixes for an actively exploited zero-day flaw in the wild. Of the 85 bugs, 15 are rated Critical, 69 are rated Important, and one is rated Moderate in severity. The update,...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in several components of Windows. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Access to sensitive dat...

Microsoft Windows Multiple Vulnerabilities (KB5018410)

This host is missing an important security update according to Microsoft KB5018410 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2022-37979

Windows Hyper-V Elevation of Privilege Vulnerability...

CVE-2022-37979

Windows Hyper-V Elevation of Privilege Vulnerability...

CVE-2022-37979

Windows Hyper-V Elevation of Privilege Vulnerability...

Privilege escalation

Windows Hyper-V Elevation of Privilege Vulnerability...

Microsoft Patch Tuesday for October 2022 — Snort rules and prominent vulnerabilities

By Jon Munshaw and Vanja Svajcer. Microsoft released its monthly security update Tuesday, disclosing 83 vulnerabilities across the company’s hardware and software line, including seven critical issues in Windows’ point-to-point tunneling protocol. October's security update features 11 critical...

Windows Hyper-V Elevation of Privilege Vulnerability

...

CVE-2022-37979 Windows Hyper-V Elevation of Privilege Vulnerability

...

CVE-2022-37979

CVE-2022-37979 is a Windows Hyper-V elevation-of-privilege vulnerability. Public sources describe it as a local privilege escalation stemming from improper privilege assignment within the Hyper-V component. The CVE affects Windows Hyper-V with a CVSS v3.1 vector of Local, High severity (7.8). Rem...

CVE-2022-37979 Windows Hyper-V Elevation of Privilege Vulnerability

...

Microsoft Hyper-V 安全漏洞

Microsoft Windows Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization, Microsoft Windows Hyper-V has an elevation of privilege vulnerability that stems from improper privilege assignment in the application and...

PT-2022-5732 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insecure privilege management in the Windows Hyper-V hardware virtualization system, which can be exploited to elevate privileges. This could allow an attack...

slack-morphism-hyper (>=0.5.0 <=0.41.0), slack-paste (=0.1.0) potentially affected by CVE-2022-39292 via slack-morphism (>=0.10.0 <=0.9.0)

slack-morphism CARGO version =0.10.0, =0.5.0, =0.41.0 - slack-paste =0.1.0 Source cves: CVE-2022-39292 Source advisory: OSV:GHSA-4MJX-2GH5-PH8H...

slack-morphism-hyper (>=0.5.0 <=0.41.0), slack-paste (=0.1.0) potentially affected by CVE-2022-39292 via slack-morphism (>=0.10.0 <=0.9.0)

slack-morphism CARGO version =0.10.0, =0.5.0, =0.41.0 - slack-paste =0.1.0 Source cves: CVE-2022-39292 Source advisory: OSV:RUSTSEC-2022-0087...