Lucene search
K

1075 matches found

Prion
Prion
added 2020/09/23 1:15 a.m.17 views

Input validation

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex...

9.3CVSS7.7AI score0.01715EPSS
Exploits0References1Affected Software3
Prion
Prion
added 2020/09/23 1:15 a.m.18 views

Input validation

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex...

9.3CVSS7.7AI score0.01715EPSS
Exploits0References1Affected Software3
Vulnrichment
Vulnrichment
added 2020/09/23 12:35 a.m.12 views

CVE-2019-15285 Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex...

7.8CVSS7.4AI score0.01715EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2020/09/23 12:35 a.m.9 views

CVE-2019-15287 Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex...

7.8CVSS7.4AI score0.01715EPSS
Exploits0References1
Prion
Prion
added 2020/09/11 5:15 p.m.11 views

Remote code execution

A remote code execution vulnerability exists when Active Directory integrated DNS ADIDNS mishandles objects in memory. An authenticated attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System Account To exploit the vulnerability, an...

6.5CVSS8.9AI score0.03608EPSS
Exploits0References1Affected Software3
CNVD
CNVD
added 2020/09/10 12:0 a.m.3 views

Microsoft Windows Server Remote Code Execution Vulnerability (CNVD-2020-57800)

Microsoft Windows is a desktop operating system from Microsoft. A remote code execution vulnerability exists in Microsoft Windows Active Directory Integrated DNS ADIDNS that could allow an attacker to run arbitrary code in a local system account...

8.8CVSS7.9AI score0.03608EPSS
Exploits0References1
CNVD
CNVD
added 2020/09/10 12:0 a.m.3 views

Microsoft Windows Server Remote Code Execution Vulnerability (CNVD-2020-57799)

Windows Server is the brand name of a series of server operating systems released by Microsoft, which includes all Windows operating systems released under the brand name "Windows Server". A remote code execution vulnerability exists in Microsoft Windows Server. The vulnerability stems from Activ...

8.8CVSS8.2AI score0.03608EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2020/09/08 7:0 a.m.53 views

Active Directory Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Active Directory integrated DNS ADIDNS mishandles objects in memory. An authenticated attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System Account To exploit the vulnerability, an...

8.8CVSS3.8AI score0.03608EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2020/09/08 12:0 a.m.3 views

PT-2020-3910 · Microsoft · Windows Active Directory Integrated Dns +1

Name of the Vulnerable Software and Affected Versions: Windows Active Directory integrated DNS ADIDNS affected versions not specified Description: A remote code execution issue exists due to Active Directory integrated DNS ADIDNS mishandling objects in memory. An authenticated attacker could...

9CVSS8.8AI score0.03608EPSS
Exploits0References5
NVD
NVD
added 2020/08/14 5:15 p.m.14 views

CVE-2020-15145

In Composer-Setup for Windows before version 6.0.0, if the developer's computer is shared with other users, a local attacker may be able to exploit the following scenarios. 1. A local regular user may modify the existing C:\ProgramData\ComposerSetup\bin\composer.bat in order to get elevated comma...

8.2CVSS7AI score0.00404EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2020/08/09 12:0 a.m.3 views

PT-2020-3917 · Microsoft · Windows Active Directory Integrated Dns +1

Name of the Vulnerable Software and Affected Versions: Windows Active Directory integrated DNS ADIDNS affected versions not specified Description: A remote code execution issue exists due to Active Directory integrated DNS ADIDNS mishandling objects in memory. An authenticated attacker could...

10CVSS8.7AI score0.03608EPSS
Exploits0References5
NVD
NVD
added 2020/07/21 6:15 p.m.11 views

CVE-2020-15722

In version 12.1.0.1004 and below of 360 Total Security,when TPI calls the browser process, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacking could execute arbitrary code on the Local system...

7.8CVSS8AI score0.00432EPSS
Exploits0References1
Prion
Prion
added 2020/07/21 6:15 p.m.25 views

Privilege escalation

In the version 12.1.0.1004 and below of 360 Total Security, when the main process of 360 Total Security calls GameChrome.exe, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacking to bypass the hips could execute arbitrary code on the Local system...

6.9CVSS8AI score0.00478EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2020/07/21 6:15 p.m.19 views

Privilege escalation

In the version 12.1.0.1005 and below of 360 Total Security, when the Gamefolde calls GameChrome.exe, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacking to bypass the hips could execute arbitrary code on the Local system...

6.9CVSS8AI score0.00608EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2020/07/15 12:0 a.m.4 views

Microsoft Windows Server DNS Server Remote Code Execution Vulnerability

Microsoft Windows Server is a set of server operating systems from Microsoft.Windows DNS Server is one of the DNS Domain Name System servers. A remote code execution vulnerability exists in Microsoft Windows Server DNS Server. An attacker can exploit the vulnerability to run arbitrary code in the...

10CVSS9AI score0.92178EPSS
Exploits21References1
NVD
NVD
added 2020/07/14 11:15 p.m.17 views

CVE-2020-1396

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC.An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system, aka 'Windows ALPC Elevation of Privilege...

7.8CVSS0.00762EPSS
Exploits0References1
OSV
OSV
added 2020/07/14 11:15 p.m.2 views

CVE-2020-1396

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC.An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system, aka 'Windows ALPC Elevation of Privilege...

7.8CVSS7.3AI score0.00762EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2020/07/14 7:0 a.m.30 views

Windows ALPC Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view...

7.8CVSS3AI score0.00762EPSS
Exploits0
Broadcom
Broadcom
added 2020/07/14 12:0 a.m.9 views

BSA-2020-1051

Security Advisory ID : BSA-2020-1051 Component : Windows DNS Revision : 1.0: Final A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests. An attacker who successfully exploited the vulnerability could run arbitrary code in th...

10CVSS8AI score0.92178EPSS
Exploits21
OSV
OSV
added 2020/06/10 9:15 p.m.3 views

CVE-2020-5362

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup...

4.4CVSS5.8AI score0.00291EPSS
Exploits0References1
Rows per page
Query Builder