Lucene search
K

201 matches found

CNNVD
CNNVD
added 2022/05/10 12:0 a.m.4 views

Microsoft Windows Kerberos 权限许可和访问控制问题漏洞

Microsoft Windows Kerberos is a software for authentication in network clusters from Microsoft Corporation, U.S.A. Kerberos also serves as a network authentication protocol designed to provide strong authentication services to client/server applications through a key system. A vulnerability exist...

7.5CVSS8AI score0.02301EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.4 views

Microsoft Windows App Store 权限许可和访问控制问题漏洞

Microsoft Windows App Store is an application store for downloading software from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows App Store with privilege license and access control issues. The following products and editions are affected: Windows 10 Version 20H2 for...

7.8CVSS7.7AI score0.00609EPSS
Exploits0References6
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.3 views

Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected:Windows 1...

7.8CVSS7.6AI score0.00693EPSS
Exploits0References6
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.3 views

Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components with privilege permission and access control issues. The following products and editions are affected: Windows...

7.8CVSS7.6AI score0.0078EPSS
Exploits0References6
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.5 views

Microsoft Windows Common Log File System Driver 权限许可和访问控制问题漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

7.8CVSS7.4AI score0.17108EPSS
Exploits2References6
CNNVD
CNNVD
added 2022/03/08 12:0 a.m.3 views

Microsoft Windows COM 权限许可和访问控制问题漏洞

Microsoft Windows COM is a technology for the purpose of reusing software from Microsoft Corporation, U.S.A. COM is described as a platform-independent, decentralized, object-oriented system for creating interactive binary software components. A vulnerability exists in Microsoft Windows COM with...

7.8CVSS7.4AI score0.0059EPSS
Exploits0References6
CNNVD
CNNVD
added 2022/03/08 12:0 a.m.7 views

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows PDEV with privilege license and access control issues. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

7.8CVSS7.4AI score0.07836EPSS
Exploits0References7
CNNVD
CNNVD
added 2022/02/04 12:0 a.m.3 views

Zammad 安全漏洞

Zammad is a suite of ticket management software from the German company Zammad. version 5.0.1 of Zammad contains a security vulnerability that stems from an LDAP configuration with privilege issues and is vulnerable to an attack with unauthorized access to existing user accounts. No details of th...

8.1CVSS5.5AI score0.00937EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/01/24 12:0 a.m.2 views

util-linux 权限许可和访问控制问题漏洞

util-linux is an open source software package. A privilege-permission and access-control issue vulnerability exists in util-linux, where an attacker could cause a fatal error in util-linux via libmount to trigger a denial of service...

5.5CVSS6.4AI score0.00634EPSS
Exploits3References18
CNNVD
CNNVD
added 2022/01/11 12:0 a.m.4 views

Microsoft Windows权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Task Flow Data Engine with privilege permission and access control issues. The following products and editions are affected: Windows 10 Version...

7.8CVSS7.7AI score0.0066EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/01/11 12:0 a.m.2 views

PT-2022-15177 · Microsoft · Local Security Authority Subsystem Service +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority Subsystem Service affected versions not specified Description: An elevation-of-privilege issue allows attackers to affect the system. Recommendations: At the moment, there is no information about a newer versi...

7.8CVSS9.3AI score0.00669EPSS
Exploits0References6
CNNVD
CNNVD
added 2022/01/11 12:0 a.m.4 views

Microsoft Windows Virtual Machine 权限许可和访问控制问题漏洞

Microsoft Windows Virtual Machine is a virtualization technology from Microsoft USA. It allows you to run many virtual environments in a Windows environment. A vulnerability exists in the Microsoft Windows Virtual Machine IDE Drive with privilege permission and access control issues. The followin...

7.8CVSS7.6AI score0.00638EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/12/14 12:0 a.m.3 views

Microsoft Windows Remote Access Connection Manager 权限许可和访问控制问题漏洞

Microsoft Windows Remote Access Connection Manager is a Windows service from Microsoft that manages virtual private network VPN connections from your computer to the Internet. If you disable this service, the VPN client application If you disable this service, VPN client applications will not...

7.8CVSS7.8AI score0.0053EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/11/10 12:0 a.m.4 views

Puppet CD4PE 安全漏洞

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs, which can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is the enterprise version of Puppet. An access control error...

8.1CVSS5.6AI score0.00792EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/11/09 12:0 a.m.3 views

Microsoft Azure Real Time Operating System 权限许可和访问控制问题漏洞

Microsoft Azure is an open, enterprise-class cloud computing platform from Microsoft Corporation USA.A privilege permission and access control issue vulnerability exists in Microsoft Azure RTOS. The vulnerability stems from a lack of effective privilege permission and access control measures on t...

7.2CVSS5.6AI score0.00567EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/10/12 12:0 a.m.2 views

Microsoft Windows AppContainer 权限许可和访问控制问题漏洞

Microsoft Windows AppContainer is a sandboxing mechanism by Microsoft Corporation USA to control which resources UWP applications can or cannot access. A vulnerability exists in Microsoft Windows AppContainer with privilege permission and access control issues. The following products and editions...

7.8CVSS7.2AI score0.02274EPSS
Exploits0References7
OSV
OSV
added 2021/09/17 2:15 p.m.1 views

CVE-2021-31843

Improper privileges management vulnerability in McAfee Endpoint Security ENS Windows prior to 10.7.0 September 2021 Update allows local users to access files which they would otherwise not have access to via manipulating junction links to redirect McAfee folder operations to an unintended locatio...

7.8CVSS7.1AI score0.00299EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/09/14 12:0 a.m.4 views

Microsoft Windows Common Log File System Driver 权限许可和访问控制问题漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

7.8CVSS7.2AI score0.00967EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/09/14 12:0 a.m.4 views

Microsoft Windows Common Log File System Driver权限许可和访问控制问题漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

7.8CVSS7.2AI score0.00832EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/09/14 12:0 a.m.3 views

Microsoft Windows Ancillary Function Driver for WinSock 权限许可和访问控制问题漏洞

Microsoft Windows Ancillary Function Driver for WinSock is a helper function driver for Winsock from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Ancillary Function Driver for WinSock due to privilege-granting and access control issues. The following products and edition...

7.8CVSS7.2AI score0.00445EPSS
Exploits0References5
Rows per page
Query Builder