Lucene search
+L

6778 matches found

Positive Technologies
Positive Technologies
•added 2021/03/09 12:00 a.m.•7 views

PT-2021-2360 · Microsoft · Windows Projected File System +1

Name of the Vulnerable Software and Affected Versions: Windows Projected File System affected versions not specified Description: The issue is related to insecure privilege management in the Windows Projected File System component, allowing an attacker to elevate their privileges. This can impact...

7.8CVSS7.3AI score0.00741EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2021/03/09 12:00 a.m.•9 views

PT-2021-2413 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler component of Windows operating systems. Exploitation of this issue may allow an attacker to...

7.8CVSS7.8AI score0.00846EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2021/03/09 12:00 a.m.•5 views

PT-2021-2370 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insecure privilege management in the Windows Installer component of the Windows operating system. Exploitation of this issue may allow an attacker to eleva...

7.8CVSS6.5AI score0.01237EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2021/03/09 12:00 a.m.•14 views

PT-2021-2353

Name of the Vulnerable Software and Affected Versions Windows App-V Overlay Filter affected versions not specified Description The issue is related to insecure privilege management in the Windows App-V Overlay Filter component. It allows attackers to elevate their privileges, potentially affectin...

7.8CVSS7.1AI score0.00714EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2021/03/09 12:00 a.m.•5 views

PT-2021-2335 · Microsoft · Windows Virtual Registry Provider +1

Name of the Vulnerable Software and Affected Versions: Windows Virtual Registry Provider affected versions not specified Description: The issue is related to insecure privilege management in the Virtual Registry Provider component of the Windows operating system. Exploitation of this issue may...

8.4CVSS7.9AI score0.0076EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2021/03/09 12:00 a.m.•7 views

PT-2021-2398 · Microsoft · Windows Media Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Foundation affected versions not specified Description: The issue is related to insecure privilege management in the Media Foundation component of Windows operating systems. It allows remote attackers to execute...

8.8CVSS7.7AI score0.02803EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2021/03/09 12:00 a.m.•5 views

PT-2021-2338

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insecure privilege management in the DirectX component of the Windows operating system. It allows an attacker to elevate their privileges. Recommendations At the momen...

7.8CVSS7AI score0.00804EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2021/03/09 12:00 a.m.•5 views

PT-2021-2422 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Remote Access Service RAS interface of Windows operating systems, which is caused by insecure privilege management. Th...

7.8CVSS7.3AI score0.02088EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2021/03/09 12:00 a.m.•6 views

PT-2021-2412 · Microsoft · Windows Container Execution Agent +1

Name of the Vulnerable Software and Affected Versions: Windows Container Execution Agent affected versions not specified Description: The issue is related to insecure privilege management in the Windows Container Execution Agent service. It allows an attacker to elevate their privileges...

7.8CVSS7.5AI score0.00858EPSS
SaveExploits2References10
GithubExploit
GithubExploit
•added 2021/03/05 2:11 a.m.•253 views

Exploit for Out-of-bounds Write in Microsoft

CVE-2021-1732-Exploit CVE-2021...

7.8CVSS8AI score0.78376EPSS
SaveExploits21
Positive Technologies
Positive Technologies
•added 2021/03/05 12:00 a.m.•9 views

PT-2021-2337 · Microsoft · Windows Container Execution Agent +1

Name of the Vulnerable Software and Affected Versions: Windows Container Execution Agent affected versions not specified Description: The issue is related to insecure privilege management in the Windows Container Execution Agent component of the Windows operating system. It allows an attacker to...

8.8CVSS8.7AI score0.01066EPSS
SaveExploits1References11
OpenVAS
OpenVAS
•added 2021/03/05 12:00 a.m.•24 views

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2021-1501)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00455EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•7 views

CVE-2021-25336: Improper Privilege Management

Improper access control in NotificationManagerService in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to acquire notification access via sending a crafted malicious intent...

4.3CVSS5.8AI score0.00249EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/03/04 12:00 a.m.•28 views

EulerOS Virtualization 3.0.6.6 : net-snmp (EulerOS-SA-2021-1501)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link symlink following.CVE-2020-15861 - Net-SNM...

7.8CVSS7.1AI score0.00455EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2021/03/04 12:00 a.m.•38 views

EulerOS Virtualization for ARM 64 3.0.6.0 : net-snmp (EulerOS-SA-2021-1550)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the...

7.8CVSS7.1AI score0.00455EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/02 12:00 a.m.•5 views

CVE-2020-12528: Improper Privilege Management

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improper use of access validation allows a logged in user to kill web2go sessions in the account he should not have access to...

7.7CVSS5.7AI score0.00861EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/03/02 12:00 a.m.•4 views

PT-2021-2273

Name of the Vulnerable Software and Affected Versions: mymbCONNECT24 and mbCONNECT24 versions through V2.6.2 Description: The issue is related to improper use of access validation, allowing a logged-in user to kill web2go sessions in an account they should not have access to. This is due to...

7.7CVSS0.00861EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2021/03/02 12:00 a.m.•20 views

The vulnerability of the command-line interface (CLI) of the Azure IoT platform, which allows a malicious actor to escalate their privileges

The vulnerability of the Azure IoT Command Line Interface CLI is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.1AI score0.00494EPSS
SaveExploits0References2
ICS
ICS
•added 2021/03/02 12:00 a.m.•147 views

MB connect line mbCONNECT24, mymbCONNECT24

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: MB connect line Equipment: mymbCONNECT24, mbCONNECT24 Vulnerabilities: Improper Privilege Management, Server-side Request Forgery SSRF, Cross-site Scripting, Uncontrolled Resource Consumption, Open...

9.8CVSS8.6AI score0.01479EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/02/25 12:00 a.m.•21 views

Microsoft Windows Security Feature Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. Microsoft Windows suffers from a security signature vulnerability that arises from a lack of security measures such as authentication, access control, and privilege management in a...

8.8CVSS7.3AI score0.02432EPSS
SaveExploits0References2
Rows per page
Query Builder