Lucene search
K

1262 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/04/21 12:0 a.m.28 views

Parallels Desktop Toolgate Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS3.7AI score0.00078EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/21 12:0 a.m.28 views

Parallels Desktop IDE Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS2.9AI score0.00087EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/21 12:0 a.m.36 views

Parallels Desktop Toolgate Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within t...

6.5CVSS3.7AI score0.0009EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/21 12:0 a.m.32 views

Parallels Desktop Toolgate Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within t...

6.5CVSS3.7AI score0.00081EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/21 12:0 a.m.39 views

Parallels Desktop Toolgate Directory Traversal Arbitrary File Deletion Vulnerability

This vulnerability allows local attackers to delete arbitrary files on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

3.2CVSS2.5AI score0.00134EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/04/15 12:0 a.m.54 views

Microsoft Windows Installer Service Untrusted File Path Arbitrary File Write Vulnerability

This vulnerability allows local attackers to write data to arbitrary files on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.3CVSS5.1AI score0.11468EPSS
Exploits1References1
NVD
NVD
added 2021/04/14 4:15 p.m.10 views

CVE-2021-27260

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

3.2CVSS0.00099EPSS
Exploits0References2
Prion
Prion
added 2021/04/13 1:15 p.m.16 views

Design/Logic Flaw

An incorrect permission assignment vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target...

7.2CVSS7.7AI score0.0007EPSS
Exploits0References3Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2021/04/12 12:0 a.m.50 views

Trend Micro Apex One Improper Access Control Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ApexOne...

7.8CVSS4.7AI score0.01093EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/04/12 12:0 a.m.2 views

Dell EMC Storage Resource Manager 代码问题漏洞

Dell EMC Storage Resource Manager is an application from Dell, Inc. A comprehensive monitoring and reporting solution that helps IT visualize, analyze and optimize today's storage infrastructure while providing a management framework to support software-defined storage investments. A code issue...

10CVSS6.3AI score0.04597EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:0 a.m.21 views

Apple macOS AppleIntelKBLGraphics IOCTL 0x1000C Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of IOCTL...

7.8CVSS3.5AI score0.00105EPSS
Exploits0References1
Prion
Prion
added 2021/03/29 9:15 p.m.14 views

Integer overflow

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

4.6CVSS8.8AI score0.00093EPSS
Exploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/03/17 12:0 a.m.39 views

Microsoft Windows EFI Partition Incorrect Authorization Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

5.5CVSS4.5AI score0.00748EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/17 12:0 a.m.41 views

Microsoft Windows CInteractionTrackerMarshaler Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within DirectComposition...

8.8CVSS5.1AI score0.06603EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/17 12:0 a.m.32 views

Microsoft Windows Update Assistant Improper Access Control Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows Update...

7.3CVSS5.6AI score0.06642EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/17 12:0 a.m.31 views

Microsoft Windows Setup Directory Junction Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within Windows Setup. By...

7.8CVSS5.8AI score0.005EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/15 12:0 a.m.47 views

Microsoft Windows win32kfull bStretch NULL Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull.sys...

7.8CVSS5.7AI score0.02221EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/15 12:0 a.m.40 views

Microsoft Windows User Profile Service Directory Junction Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the User Profile...

7CVSS5.9AI score0.00197EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/15 12:0 a.m.59 views

Adobe Creative Cloud Improper Privilege Management Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Creative Cloud on Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

7.8CVSS4.2AI score0.01163EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/15 12:0 a.m.29 views

Microsoft Windows Setup Directory Junction Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

6.1CVSS4.7AI score0.00184EPSS
Exploits0References1
Rows per page
Query Builder