Lucene search
K

108 matches found

Zero Day Initiative
Zero Day Initiative
added 2016/02/05 12:0 a.m.22 views

Advantech WebAccess datacore Service datacore.exe strcpy Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable instances of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x523D IOCTL in the Kernel subsystem. A stack-based buffer...

9.3CVSS4.9AI score0.51468EPSS
Exploits9References1
Zero Day Initiative
Zero Day Initiative
added 2016/02/05 12:0 a.m.35 views

Advantech WebAccess datacore Service datacore.exe Path strcat Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable instances of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x791E IOCTL in the Kernel subsystem. A stack-based buffer...

9.3CVSS4.2AI score0.51468EPSS
Exploits9References1
Zero Day Initiative
Zero Day Initiative
added 2016/02/05 12:0 a.m.31 views

Advantech WebAccess datacore Service datacore.exe strcpy Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable instances of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x523D IOCTL in the Kernel subsystem. A stack-based buffer...

9.3CVSS4.9AI score0.51468EPSS
Exploits9References1
OpenVAS
OpenVAS
added 2014/01/06 12:0 a.m.33 views

Ubuntu: Security Advisory (USN-2071-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS7.2AI score0.00337EPSS
Exploits4References2
Symantec
Symantec
added 2013/10/08 12:0 a.m.59 views

Microsoft Windows USB Descriptor CVE-2013-3200 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that is related to the DirectX Graphics Kernel Subsystem. An attacker with physical access can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the...

7.2CVSS0.8AI score0.00509EPSS
Exploits0References1Affected Software6
OpenVAS
OpenVAS
added 2013/05/15 12:0 a.m.32 views

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2840221)

This host is missing an important security update according to Microsoft Bulletin MS13-046. OpenVAS Vulnerability Test $Id: secpodms13-046.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities 2840221 Authors: Arun Kallavi Copyright:...

7.2CVSS0.8AI score0.03922EPSS
Exploits3References4
Tenable Nessus
Tenable Nessus
added 2013/05/15 12:0 a.m.51 views

MS13-046: Vulnerabilities in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2840221)

The Windows kernel on the remote host has the following vulnerabilities : - A privilege escalation vulnerability exists in the Microsoft DirectX graphics kernel subsystem. CVE-2013-1332 - A privilege escalation vulnerability exists in the Windows kernel-mode driver. CVE-2013-1333, CVE-2013-1334 A...

7.2CVSS5.6AI score0.03922EPSS
Exploits3References4
NVD
NVD
added 2005/12/31 5:0 a.m.20 views

CVE-2005-4779

verifiedexecioctl in verifiedexec.c in NetBSD 2.0.2 calls NDINIT with UIOUSERSPACE rather than UIDSYSSPACE, which removes the functionality of the verified exec kernel subsystem and might allow local users to execute Trojan horse programs...

3.6CVSS6.5AI score0.0007EPSS
Exploits0References4
Rows per page
Query Builder