3719 matches found
CVE-2023-1490 Max Secure Anti Virus Plus IoControlCode SDActMon.sys 0x220020 access control
A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1 and classified as critical. Affected by this issue is the function 0x220020 in the library SDActMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. An attack has to be approached...
CVE-2023-1490
CVE-2023-1490 affects Max Secure Anti Virus Plus 19.0.2.1. The issue is in the IoControlCode Handler’s function 0x220020 in SDActMon.sys, causing improper access controls. Exploitation is local and the vulnerability has been publicly disclosed. Reported impact is access control bypass with potent...
Max Secure Anti Virus Plus 访问控制错误漏洞
Max Secure Anti Virus Plus is a suite of antivirus software from Max Secure India. An access control error vulnerability exists in Max Secure Anti Virus Plus version 19.0.2.1, which originates in the MaxCryptMon.sys library of the IoControlCode Handler module and could result in a denial of servi...
Max Secure Anti Virus Plus 安全漏洞
Max Secure Anti Virus Plus is a suite of antivirus software from Max Secure India. A security vulnerability exists in Max Secure Anti Virus Plus version 19.0.2.1, which originates in the MaxProc64.sys library of the IoControlCode Handler module and may result in a denial of service...
PT-2023-17030 · Max Secure · Max Secure Anti Virus Plus
Name of the Vulnerable Software and Affected Versions: Max Secure Anti Virus Plus version 19.0.2.1 Description: A problem was found in the function 0x220019 in the library MaxProctetor64.sys of the component IoControlCode Handler. This issue leads to denial of service and can be launched on the...
PT-2023-17027 · Max Secure · Max Secure Anti Virus Plus
Name of the Vulnerable Software and Affected Versions: Max Secure Anti Virus Plus version 19.0.2.1 Description: A critical issue was found, affecting the function 0x220020 in the library SDActMon.sys of the component IoControlCode Handler. This leads to improper access controls. The attack must b...
PT-2023-17029 · Max Secure · Max Secure Anti Virus Plus
Name of the Vulnerable Software and Affected Versions: Max Secure Anti Virus Plus version 19.0.2.1 Description: A vulnerability was found in the library MaxProc64.sys of the component IoControlCode Handler, affecting the function 0x220019. The manipulation of the SystemBuffer argument leads to...
CVE-2023-1492: Improper Resource Shutdown or Release
A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been declared as problematic. This vulnerability affects the function 0x220019 in the library MaxProc64.sys of the component IoControlCode Handler. The manipulation of the argument SystemBuffer leads to denial of service...
CVE-2023-1491: Improper Access Control
A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been classified as critical. This affects the function 0x220020 in the library MaxCryptMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is required to approach...
PT-2023-17028 · Max Secure · Max Secure Anti Virus Plus
Name of the Vulnerable Software and Affected Versions: Max Secure Anti Virus Plus version 19.0.2.1 Description: A critical issue has been found, affecting the 0x220020 function in the MaxCryptMon.sys library of the IoControlCode Handler component. This leads to improper access controls, requiring...
Max Secure Anti Virus Plus 安全漏洞
Max Secure Anti Virus Plus is a suite of antivirus software from Max Secure India. A security vulnerability exists in Max Secure Anti Virus Plus version 19.0.2.1, which originates in the MaxProctetor64.sys library of the IoControlCode Handler module and may result in a denial of service...
CVE-2023-1493: Improper Resource Shutdown or Release
A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been rated as problematic. This issue affects the function 0x220019 in the library MaxProctetor64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack o...
CVE-2023-1490: Improper Access Control
A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1 and classified as critical. Affected by this issue is the function 0x220020 in the library SDActMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. An attack has to be approached...
WordPress Min and Max Quantity for WooCommerce Plugin <= 1.3.2.6 is vulnerable to Broken Access Control
Software Min and Max Quantity for WooCommerce Type Plugin Vulnerable versions = 1.3.2.6 Fixed in 1.3.2.7 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-45813 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID d01f544d9c9e Credits Istv...
PT-2025-18876
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version containing the fix for the max subslices array-index-out-of-bounds access Description A potential out-of-bounds access issue has been identified in the Linux kernel, specifically in the drm/i915/sseu...
OESA-2023-1155 apache-commons-fileupload security update
The javax.servlet package lacks support for RFC-1867, HTML file upload. This package provides a simple to use API for working with such data. The scope of this package is to create a package of Java utility classes to read multipart/form-data within a javax.servlet.http.HttpServletRequest. Securi...
CVE-2023-27483 fieldpath's Paved.SetValue allows growing arrays up to arbitrary sizes in crossplane-runtime
crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. An out of memory panic vulnerability has been discovered in affected versions. Applications that use the Paved type's SetValue method with user provided input without proper...
Exploit for Improper Initialization in Linux Linux_Kernel
!Dirty Pipehttps://forum.hackersploit.org/uploads/default/ori...
K06542333: Multiple Intel FPGA vulnerabilities CVE-2019-14625, CVE-2019-14626, and CVE-2020-0574
Security Advisory Description CVE-2019-14625 Improper access control in on-card storage for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user to potentially enable denial of service via local access. CVE-2019-14626 Improper access control in PCIe...