Lucene search
+L

5960 matches found

attackerkb
attackerkb
•added 2022/04/14 4:15 p.m.•17 views

CVE-2022-25165

An issue was discovered in Amazon AWS VPN Client 2.0.0. A TOCTOU race condition exists during the validation of VPN configuration files. This allows parameters outside of the AWS VPN Client allow list to be injected into the configuration file prior to the AWS VPN Client service running as SYSTEM...

7CVSS6.8AI score0.00526EPSS
SaveExploits1References3
Microsoft CVE
Microsoft CVE
•added 2022/04/12 8:00 a.m.•240 views

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

7.8CVSS9.1AI score0.07134EPSS
SaveExploits2
Microsoft CVE
Microsoft CVE
•added 2022/04/12 8:00 a.m.•136 views

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

7.8CVSS8.8AI score0.16779EPSS
SaveExploits3
CNNVD
CNNVD
•added 2022/04/12 12:00 a.m.•24 views

Microsoft Windows Common Log File System Driver permission and access control vulnerabilities

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

7.8CVSS7.4AI score0.16779EPSS
SaveExploits3References6
Check Point Advisories
Check Point Advisories
•added 2022/04/12 12:00 a.m.•51 views

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-24521)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

4.6CVSS6.1AI score0.07134EPSS
SaveExploits2
CNNVD
CNNVD
•added 2022/04/12 12:00 a.m.•21 views

Microsoft Windows Common Log File System Driver input validation error vulnerability

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

7.8CVSS7.7AI score0.07134EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•14 views

PT-2022-2922 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System CLFS Driver affected versions not specified Description: The issue is related to insecure privilege management in the Windows Common Log File System CLFS driver of the Microsoft Windows operating system...

7.8CVSS7.3AI score0.16779EPSS
SaveExploits3References15
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•13 views

PT-2022-2241

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description This issue is an elevation-of-privilege vulnerability affecting the Windows Common Log File System Driver. Successful exploitation could allow attackers to affec...

7.8CVSS8.5AI score0.07134EPSS
SaveExploits2References49
VulnCheck KEV
VulnCheck KEV
•added 2022/04/12 12:00 a.m.•8 views

VulnCheck KEV: CVE-2022-24521

Microsoft Windows Common Log File System CLFS Driver contains an unspecified vulnerability that allows for privilege escalation...

7.8CVSS7.6AI score0.16948EPSS
SaveIn wildExploits4References31
Check Point Advisories
Check Point Advisories
•added 2022/04/12 12:00 a.m.•33 views

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-24481)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

4.6CVSS6.1AI score0.16779EPSS
SaveExploits3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/11 12:00 a.m.•5 views

CVE-2022-1157: Insertion of Sensitive Information into Log File

Missing sanitization of logged exception messages in all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 of GitLab CE/EE causes potential sensitive values in invalid URLs to be logged...

3.5CVSS5.4AI score0.00645EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/06 12:00 a.m.•7 views

CVE-2021-45103: Insertion of Sensitive Information into Log File

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer...

8.1CVSS7.5AI score0.00921EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/03/31 10:35 p.m.•51 views

CVE-2022-24758 Insertion of Sensitive Information into Log File affects Jupyter Notebook

The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by...

7.5CVSS7.8AI score0.01106EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/31 12:00 a.m.•7 views

CVE-2022-24758: Insertion of Sensitive Information into Log File

The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by...

7.5CVSS6.7AI score0.01106EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/03/31 12:00 a.m.•24 views

OpenBoxLab Raidrive security vulnerability

OpenBoxLab Raidrive is a remote file management system from OpenBoxLab Korea. Allows mapping of WebDAV/FTP/SFTP, routers, Google Drive Team Drive, Photos, OneDrive and Dropbox to network drives on File Explorer. A security vulnerability previously existed in OpenBoxLab Raidrive v2021.12.35, which...

2CVSS5.1AI score0.00295EPSS
SaveExploits1References2
NVD
NVD
•added 2022/03/30 11:15 a.m.•36 views

CVE-2022-23868

RuoYi v4.7.2 contains a CSV injection vulnerability through ruoyi-admin when a victim opens .xlsx log file...

7.8CVSS0.00715EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/03/30 11:15 a.m.•18 views

CVE-2022-23868

RuoYi v4.7.2 contains a CSV injection vulnerability through ruoyi-admin when a victim opens .xlsx log file...

7.8CVSS7.1AI score0.00715EPSS
SaveExploits1References2
Mend
Mend
•added 2022/03/30 10:14 a.m.•9 views

CVE-2022-23868

RuoYi v4.7.2 contains a CSV injection vulnerability through ruoyi-admin when a victim opens .xlsx log file...

8.5CVSS0.00715EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/03/30 10:14 a.m.•48 views

CVE-2022-23868

RuoYi v4.7.2 contains a CSV injection vulnerability through ruoyi-admin when a victim opens .xlsx log file...

7.9AI score0.00715EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/03/30 10:14 a.m.•31 views

CVE-2022-23868

RuoYi v4.7.2 contains a CSV injection vulnerability through ruoyi-admin when a victim opens .xlsx log file...

7.1AI score
SaveExploits0References3
Rows per page
Query Builder