Lucene search
+L

1606 matches found

Github Security Blog
Github Security Blog
added 2021/06/28 4:45 p.m.64 views

XXE vulnerability in Launch import

| Release Date | Affected Projects | Affected Versions | Access Vector| Security Risk | |--------------|-------------------|-------------------|---------------|---------------| | Monday, May 4, 2020| service-api | Every version, starting from 3.1.0 | Remote | Medium | Impact Starting from version...

7.5CVSS1.7AI score0.01349EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2021/06/23 5:35 p.m.38 views

CVE-2021-29620 XXE vulnerability on Launch import with externally-defined DTD file

Report portal is an open source reporting and analysis framework. Starting from version 3.1.0 of the service-api XML parsing was introduced. Unfortunately the XML parser was not configured properly to prevent XML external entity XXE attacks. This allows a user to import a specifically-crafted XML...

7.5CVSS7.7AI score0.02199EPSS
SaveExploits0References3
NVD
NVD
added 2021/06/22 12:15 p.m.29 views

CVE-2021-0608

In handleAppLaunch of AppLaunchActivity.java, there is a possible arbitrary activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.8CVSS0.00117EPSS
SaveExploits0References1
CVE
CVE
added 2021/06/22 11:14 a.m.79 views

CVE-2021-0608

The CVE-2021-0608 entry concerns Android’s AppLaunchActivity.handleAppLaunch, with a local elevation-of-privilege via a confused deputy. Affected component: Pixel Launcher on Pixel devices (and related Android kernel/framework context as per mappings). Root cause: improper handling in AppLaunchAc...

7.8CVSS7.7AI score0.00117EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/06/22 11:14 a.m.28 views

CVE-2021-0608

In handleAppLaunch of AppLaunchActivity.java, there is a possible arbitrary activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.9AI score0.00117EPSS
SaveExploits0References1
Citrix
Citrix
added 2021/06/14 12:0 a.m.10 views

Unable to launch a VDI (second hop) within a active VDI session (first hop), error “An incorrect pin was presented to the security device”

The customer has FAS in place and it is working fine They are testing the VDI sessions and users can launch Desktops when using their workstations endpoints If they try to launch a second Desktop session second hop within the current VDI session using CWA, they get an error “An incorrect pin was...

7.1AI score
SaveExploits0
OSV
OSV
added 2021/06/01 12:0 a.m.12 views

PUB-A-174870704

In handleAppLaunch of AppLaunchActivity.java, there is a possible arbitrary activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.1AI score0.00117EPSS
SaveExploits0References1
Citrix
Citrix
added 2021/05/30 12:0 a.m.10 views

CVAD 1912 CU2 || Unable launch applications / Desktop from client - Unknown client error 1110, Proxy error

User can access to Published app locally. .User cannot access published apps or desktop through VPN from client machine.Ping and access Domain server, local DNS, etc working fine...

7AI score
SaveExploits0
Akamai Blog
Akamai Blog
added 2021/05/19 4:0 a.m.22 views

Now Launching: SOTI?Phishing For Finance

It's that time again -- the launch of the second State of the Internet / Security report of 2021. While Akamai has access to some of the largest security data sets in the world, our viewpoint is limited to the traffic that traverses our networks and is seen by our tools...

3.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/04/27 12:0 a.m.9 views

The vulnerability in the driver for the Early Launch Antimalware (ELAM) security technology of Microsoft Windows allows a malicious actor to bypass security functions.

The vulnerability of the driver for the Early Launch Antimalware ELAM security technology for Microsoft Windows is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass security functions...

4.6CVSS5.4AI score0.00972EPSS
SaveExploits1References3
Citrix
Citrix
added 2021/04/22 12:0 a.m.9 views

Citrix Receiver Does Not Respond When Opening Applications to XenApp Servers

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When opening applications to XenApp servers, there is no response at the Launching… prompt, as shown...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/04/16 12:0 a.m.8 views

The vulnerability in the driver for the Early Launch Antimalware (ELAM) security technology of Microsoft Windows allows a malicious actor to bypass security functions.

The vulnerability of the driver for the Early Launch Antimalware ELAM security technology for Microsoft Windows relates to the disclosure of information. Exploiting this vulnerability could allow a hacker to bypass security functions...

4.6CVSS5.4AI score0.02042EPSS
SaveExploits1References4
OSV
OSV
added 2021/04/13 8:15 p.m.4 views

CVE-2021-28447

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability...

4.4CVSS5.8AI score0.02042EPSS
SaveExploits1References2
NVD
NVD
added 2021/04/13 8:15 p.m.19 views

CVE-2021-27094

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability...

4.4CVSS0.00972EPSS
SaveExploits1References2
OSV
OSV
added 2021/04/13 8:15 p.m.4 views

CVE-2021-27094

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability...

4.4CVSS5.8AI score0.00972EPSS
SaveExploits1References2
Prion
Prion
added 2021/04/13 8:15 p.m.24 views

Security feature bypass

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability...

2.1CVSS6.1AI score0.02042EPSS
SaveExploits1References2Affected Software4
ATTACKERKB
ATTACKERKB
added 2021/04/13 8:15 p.m.4 views

CVE-2021-28447

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability...

4.4CVSS4.9AI score0.02042EPSS
SaveExploits1References3Affected Software19
CVE
CVE
added 2021/04/13 7:32 p.m.115 views

CVE-2021-27094

Technical details for CVE-2021-27094 are not publicly provided in the supplied documents; the entry only states a Windows Early Launch Antimalware Driver security feature bypass. Monitor for updates; no affected products, impacts, or fixes are specified here.

4.4CVSS6.3AI score0.00972EPSS
SaveExploits1References2Affected Software6
CNNVD
CNNVD
added 2021/04/13 12:0 a.m.8 views

Microsoft Windows 安全特征问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. Microsoft Windows suffers from a security feature issue vulnerability that stems from a security feature of the Windows Early Launch Antimalware Driver that can be bypassed...

4.4CVSS5.1AI score0.00972EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.5 views

PT-2021-2580 · Microsoft · Windows Early Launch Antimalware Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Early Launch Antimalware Driver affected versions not specified Description: The issue is related to a security feature bypass in the Windows Early Launch Antimalware Driver, which may allow an attacker to bypass security features. Th...

4.6CVSS4.2AI score0.02042EPSS
SaveExploits1References9
Rows per page
Query Builder