Lucene search
+L

3801 matches found

NVD
NVD
•added 2021/01/12 8:15 p.m.•30 views

CVE-2021-1676

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability...

5.5CVSS6.6AI score0.01321EPSS
SaveExploits0References2
Prion
Prion
•added 2021/01/12 8:15 p.m.•25 views

Information disclosure

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability...

2.1CVSS6.1AI score0.01321EPSS
SaveExploits0References1Affected Software5
Cvelist
Cvelist
•added 2021/01/12 7:42 p.m.•41 views

CVE-2021-1676 Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability

...

5.5CVSS7.1AI score0.01321EPSS
SaveExploits0References1
CVE
CVE
•added 2021/01/12 7:42 p.m.•136 views

CVE-2021-1676

Technical details for CVE-2021-1676 are not publicly available in the provided connected documents. Monitor for updates.

5.5CVSS6.6AI score0.01321EPSS
SaveExploits0References2Affected Software8
Microsoft CVE
Microsoft CVE
•added 2021/01/12 8:00 a.m.•61 views

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability

...

5.5CVSS5.7AI score0.01321EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/01/12 12:00 a.m.•11 views

PT-2021-1607

Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version Description The issue is related to a security feature bypass vulnerability in the NTLM protocol implementation in Windows. This vulnerability can be exploited by a remote attacker to gain unauthoriz...

8.8CVSS7.3AI score0.10031EPSS
SaveExploits1References15
CNNVD
CNNVD
•added 2021/01/12 12:00 a.m.•26 views

Microsoft NT LAN Manager 信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in Microsoft Windows/Windows Server NT Lan Manager Datagra...

5.5CVSS6.6AI score0.01321EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/12 12:00 a.m.•4 views

CVE-2021-1676: Undefined Security Weakness

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability...

5.5CVSS7.4AI score0.01321EPSS
SaveExploits0References1
Packet Storm
Packet Storm
•added 2021/01/05 12:00 a.m.•246 views

Fluentd TD-agent 4.0.1 Insecure Folder Permission

Exploit Title: Fluentd TD-agent plugin 4.0.1 - Insecure Folder Permission Date: 21.12.2020 Exploit Author: Adrian Bondocea Vendor Homepage: https://www.fluentd.org/ Software Link: https://td-agent-package-browser.herokuapp.com/4/windows Version: icacls C:\opt\td-agent\bin C:\opt\td-agent\bin...

6.9CVSS7.2AI score0.01171EPSS
SaveExploits4
NVD
NVD
•added 2020/12/24 3:15 p.m.•48 views

CVE-2020-28169

The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITY\SYSTEM...

7CVSS8.4AI score0.01171EPSS
SaveExploits4References8
Prion
Prion
•added 2020/12/24 3:15 p.m.•24 views

Design/Logic Flaw

The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITY\SYSTEM...

6.9CVSS7AI score0.01171EPSS
SaveExploits4References8Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/24 12:00 a.m.•5 views

CVE-2020-28169: Incorrect Permission Assignment for Critical Resource

The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITY\SYSTEM...

7CVSS5.9AI score0.01171EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2020/12/24 12:00 a.m.•4 views

PT-2020-16936

Name of the Vulnerable Software and Affected Versions td-agent-builder plugin for Fluentd versions prior to 2020-12-18 Description The issue allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITYSYSTEM...

7CVSS0.01171EPSS
SaveExploits4References13
NVD
NVD
•added 2020/12/18 9:15 p.m.•42 views

CVE-2020-13535

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker can globally overwrite service configuration to execute arbitrary code with NT SYSTEM privileges...

9.3CVSS8.3AI score0.00688EPSS
SaveExploits1References1
Prion
Prion
•added 2020/12/18 9:15 p.m.•26 views

Privilege escalation

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker can globally overwrite service configuration to execute arbitrary code with NT SYSTEM privileges...

7.2CVSS8AI score0.00688EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2020/12/18 8:39 p.m.•80 views

CVE-2020-13535

Kepware LinkMaster 3.0.94.0 has a privilege-escalation flaw (CVE-2020-13535) due to Incorrect Default Permissions (CWE-276). The service allows Everyone/SYSTEM-level access to change SERVICE_CONFIG, enabling a local attacker to re-point the LinkMaster service to an arbitrary executable and run wi...

9.3CVSS8AI score0.00688EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/12/18 8:39 p.m.•49 views

CVE-2020-13535

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker can globally overwrite service configuration to execute arbitrary code with NT SYSTEM privileges...

9.3CVSS8AI score0.00688EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/18 12:00 a.m.•5 views

CVE-2020-13535: Incorrect Default Permissions

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker can globally overwrite service configuration to execute arbitrary code with NT SYSTEM privileges...

9.3CVSS6.5AI score0.00688EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2020/12/18 12:00 a.m.•16 views

PT-2020-13608 · Kepware · Kepware Linkmaster

Name of the Vulnerable Software and Affected Versions: Kepware LinkMaster version 3.0.94.0 Description: A privilege escalation issue exists, allowing an attacker to globally overwrite service configuration and execute arbitrary code with NT SYSTEM privileges in the default configuration...

9.3CVSS9AI score0.00688EPSS
SaveExploits1References3
ICS
ICS
•added 2020/12/17 12:00 a.m.•244 views

PTC Kepware LinkMaster

1. EXECUTIVE SUMMARY CVSS v3 9.3 ATTENTION: Low skill level to exploit Vendor: PTC Equipment: Kepware LinkMaster Vulnerability: Incorrect Default Permissions 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a local attacker to globally overwrite the service...

9.3CVSS8.1AI score0.00688EPSS
SaveExploits1References5
Rows per page
Query Builder