Lucene search
+L

2192 matches found

Positive Technologies
Positive Technologies
added 2022/02/08 12:0 a.m.4 views

PT-2022-1678 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Named Pipe File System component of the Windows operating system and involves insecure privilege management. Exploitation of this issue may allow an attacker to...

7.8CVSS7.4AI score0.12636EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2022/02/08 12:0 a.m.9 views

Microsoft Windows Named Pipe File System 数字错误漏洞

Microsoft Windows Named Pipe File System is a named pipe file system from Microsoft Corporation USA. A numeric error vulnerability exists in Microsoft Windows Named Pipe File System. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 180...

7.8CVSS7.5AI score0.12636EPSS
SaveExploits0References6
NCSC
NCSC
added 2022/02/08 12:0 a.m.11 views

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. The vulnerabilities potentially enable a malicious person to launch attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code execution User rights...

9.3CVSS7.2AI score0.53934EPSS
SaveExploits4
Kaspersky
Kaspersky
added 2022/02/08 12:0 a.m.174 views

KLA12457 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...

9.3CVSS9.4AI score0.53934EPSS
SaveExploits4References49
NVD
NVD
added 2022/02/04 11:15 p.m.26 views

CVE-2022-23805

A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local attacker to send garbage data to a specific named pipe and crash the server. Please note: an attacker must first obtain the ability to execute low-privileged...

7.1CVSS0.00737EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/04 11:15 p.m.6 views

CVE-2022-23805

A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local attacker to send garbage data to a specific named pipe and crash the server. Please note: an attacker must first obtain the ability to execute low-privileged...

7.1CVSS6AI score0.00737EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/04 11:15 p.m.7 views

CVE-2022-23805

A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local attacker to send garbage data to a specific named pipe and crash the server. Please note: an attacker must first obtain the ability to execute low-privileged...

7.1CVSS6.6AI score0.00737EPSS
SaveExploits0References3
NVD
NVD
added 2022/02/04 11:15 p.m.26 views

CVE-2021-44204

Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 Windows before build 28035, Acronis Agent Windows before build 27147, Acronis Cyber Protect Home Office Windows before build 39612, Acronis True Image 202...

7.8CVSS0.00197EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/04 11:15 p.m.7 views

CVE-2021-44204

Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 Windows before build 28035, Acronis Agent Windows before build 27147, Acronis Cyber Protect Home Office Windows before build 39612, Acronis True Image 202...

7.8CVSS7.1AI score0.00197EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/04 11:15 p.m.27 views

Improper access control

Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 Windows before build 28035, Acronis Agent Windows before build 27147, Acronis Cyber Protect Home Office Windows before build 39612, Acronis True Image 202...

4.6CVSS7.8AI score0.00197EPSS
SaveExploits0References1Affected Software3
Prion
Prion
added 2022/02/04 11:15 p.m.19 views

Information disclosure

A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local attacker to send garbage data to a specific named pipe and crash the server. Please note: an attacker must first obtain the ability to execute low-privileged...

3.6CVSS6.7AI score0.00737EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/02/04 10:29 p.m.73 views

CVE-2021-44204

The CVE-2021-44204 entry concerns a local privilege escalation via named pipes caused by improper access control checks. Affected Windows products and builds include: Acronis Cyber Protect 15 before 28035, Acronis Agent before 27147, Acronis Cyber Protect Home Office before 39612, and Acronis Tru...

7.8CVSS7.9AI score0.00197EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/02/04 10:29 p.m.34 views

CVE-2021-44204 Local privilege escalation via named pipe due to improper access control checks

Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 Windows before build 28035, Acronis Agent Windows before build 27147, Acronis Cyber Protect Home Office Windows before build 39612, Acronis True Image 202...

8.1AI score0.00197EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/02/04 12:0 a.m.11 views

Acronis 多款产品安全漏洞

Acronis Cyber Protect and others are products of Acronis Singapore.Acronis Cyber Protect is a network protection product.Acronis True Image is a famous data backup and restore software.Acronis Agent is an agent software. A security vulnerability exists in several Acronis products that stems from...

7.8CVSS7.4AI score0.00197EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/01/31 9:0 a.m.5 views

CVE-2021-37852

ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM...

7.8CVSS5.9AI score0.00576EPSS
SaveExploits0References3Affected Software11
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.36 views

Mageia: Security Advisory (MGASA-2020-0110)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS7.2AI score0.00927EPSS
SaveExploits1References7
ATTACKERKB
ATTACKERKB
added 2022/01/25 6:15 a.m.5 views

CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.8CVSS7.1AI score0.07575EPSS
SaveExploits5References3
OSV
OSV
added 2022/01/25 6:15 a.m.3 views

DEBIAN-CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

7.8CVSS7.4AI score0.07575EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2022/01/17 11:30 a.m.30 views

Inject-Assembly - Inject .NET Assemblies Into An Existing Process

This tool is an alternative to traditional fork and run execution for Cobalt Strike. The loader can be injected into any process, including the current Beacon. Long-running assemblies will continue to run and send output back to the Beacon, similar to the behavior of execute-assembly. There are t...

8AI score
SaveExploits0References8
Openbugbounty
Openbugbounty
added 2022/01/14 1:39 p.m.10 views

pipe-s.ru Cross Site Scripting vulnerability OBB-2335399

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Rows per page
Query Builder