VulnCheck KEV: CVE-2022-26925

Microsoft Windows Local Security Authority LSA contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM...

PT-2022-3135 · Microsoft · File Server Shadow Copy Agent Service +1

Name of the Vulnerable Software and Affected Versions: Microsoft File Server Shadow Copy Agent Service RVSS affected versions not specified Description: The issue is related to insufficient access restrictions in the Microsoft File Server Shadow Copy Agent Service RVSS, which can be exploited by ...

UBUNTU-CVE-2022-24882

FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN Manager NTLM authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. Th...

FreeRDP 安全漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A security vulnerability exists in FreeRDP that stems from the fact that in versions prior to 2.7.0, NT LAN Manager NTLM authentication does not abort correctly when someone provides and empty...

ZOHO ManageEngine ADSelfService Plus 安全漏洞

An information disclosure exists in Zoho ManageEngine ADSelfService Plus, ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. A vulnerability exists in Zoho ManageEngine ADSelfService Plus, which stems from the disclosure of...

PT-2022-19521 · Notable +1 · Notable +1

Name of the Vulnerable Software and Affected Versions: Notable versions prior to 1.9.0-beta.8 Description: The issue arises from improper validation of the file URI scheme, allowing the opening of executable files when clicking on a link. This could lead to the execution of an arbitrary program o...

Metabase 信息泄露漏洞

Metabase is an open source data analytics platform from US-based Metabase, Inc. Metabase suffers from an information disclosure vulnerability that stems from having a proxy that is used to load JSON-mapped arbitrary URLs as part of our GeoJSON support. While we perform validation to not return th...

CVE-2022-23297

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability...

CVE-2022-23297

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability...

CVE-2022-23297

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability...

Information disclosure

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability...

CVE-2022-23297 Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability

...

CVE-2022-23297

CVE-2022-23297 is described as Windows NT LAN Manager Datagram Receiver Driver Information Disclosure Vulnerability. According to the initial entry, it has a CVSSv3.1 base score of 5.5 (MEDIUM) with LOCAL attack vector, LOW attack complexity, and LOW privileges required, causing HIGH confidential...

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability

...

Microsoft NT LAN Manager 信息泄露漏洞

Microsoft NT LAN Manager is a suite of Microsoft security protocols designed to provide authentication, integrity, and confidentiality to users by Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft NT LAN Manager. The following products and versions are affecte...

VulnCheck KEV: CVE-2021-36942

Microsoft Windows Local Security Authority LSA contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM...

The vulnerability in the implementation of the network authentication protocol NT LAN Manager (NTLM) on Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Windows operating system’s Network Authentication Protocol NTLM implementation is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to elevate their privileges remotely...

Windows NTLM 权限许可和访问控制问题漏洞

Libntlm is an NTLM NT LAN Manager authentication library. A security vulnerability exists in Windows NTLM. The following products and editions are affected: Windows 10 Version 1909 for ARM64-based Systems,Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version 21H1 for ARM64-based...

PortSwigger Burp Suite 安全漏洞

PortSwigger Burp Suite is an application from PortSwigger UK. Software for packet-catching proxies. A security vulnerability exists in PortSwigger Burp Suite that stems from an inability to block NetNTLM hashes on Windows systems with outbound SMB...

The vulnerability of the NTLMSSP implementation of the Samba networking communication package is related to security flaws, allowing attackers to compromise data integrity.

The vulnerability of the NTLMSSP implementation of the Samba networking communication package is related to security flaws. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...