Lucene search
+L

2006 matches found

Positive Technologies
Positive Technologies
added 2022/04/12 12:0 a.m.4 views

PT-2022-2896 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to errors in information processing within the Windows Hyper-V system, which can be exploited by a remote attacker to gain unauthorized access to protected...

8.5CVSS7.9AI score0.0274EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2022/04/12 12:0 a.m.4 views

PT-2022-2668 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to errors in processing information in the Windows Hyper-V hardware virtualization system, which can allow a remote attacker to gain unauthorized access to...

6.8CVSS6.5AI score0.02541EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2022/04/11 12:0 a.m.3 views

SAMSUNG SMR 安全漏洞

Samsung SMR is a system patch package from South Korea's Samsung Samsung. Samsung SMR contains an access control error vulnerability that can be exploited by attackers to access protected data under certain conditions...

4.6CVSS5.6AI score0.00098EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:0 a.m.12 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to an operation that allows data to be written beyond the buffer in memory, enabling attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the execution of operations beyond the buffer in memor...

5.5CVSS7AI score0.03875EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:0 a.m.9 views

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created web page...

7.8CVSS6.9AI score0.00638EPSS
SaveExploits1References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:0 a.m.8 views

The vulnerability of the Virtual Keyboard component in the Google Chrome browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Virtual Keyboard component in the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected...

7.6CVSS6.7AI score0.00293EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:0 a.m.10 views

The vulnerability of the Shopping Cart component in Google Chrome and Microsoft Edge browsers allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Shopping Cart component in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created web page...

7.8CVSS7AI score0.00844EPSS
SaveExploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:0 a.m.9 views

The vulnerability of the File Manager in Google Chrome browser allows a hacker to gain unauthorized access to protected information.

The vulnerability of the File Manager in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created web page...

7.8CVSS7AI score0.00811EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/04 12:0 a.m.7 views

The vulnerability of the Google Chrome browser’s Navigation function, which allows a hacker to disclose protected information

The vulnerability of the Google Chrome browser’s Navigation function is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information through a specially created web page...

7.1CVSS7AI score0.01169EPSS
SaveExploits1References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/04/04 12:0 a.m.8 views

The vulnerability of the Containerd execution environment, related to deficiencies in authentication procedures, allows attackers to disclose protected information.

The vulnerability of the Containerd runtime is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

7.8CVSS6.6AI score0.27392EPSS
SaveExploits4References22Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.10 views

The vulnerability of IMAP servers for direct-access voice mail systems with the Visual Voice Mail (VVM) visual interface for Android allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of IMAP servers for direct-access voice mail services with the Visual Voice Mail VVM visual interface on Android devices is related to insufficient protection of service data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to...

3CVSS7.5AI score0.01428EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.8 views

The vulnerability of the Remote Desktop Protocol Client protocol on the Microsoft Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the Remote Desktop Protocol Client on the Microsoft Windows operating system is related to the disclosure of information in the erroneous data field. Exploiting this vulnerability allows a malicious actor to disclose the protected information from a remote location...

6.4CVSS6.8AI score0.02269EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.10 views

The vulnerability of the implementation of the IPv6 protocol in the Trace TCP/IP stack allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IPv6 implementation in the Trace TCP/IP stack is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.4CVSS7AI score0.18564EPSS
SaveExploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.10 views

The vulnerability of the Windows Common Log File System (CLFS) driver in the Microsoft operating system allows a hacker to disclose protected information.

The vulnerability of the Windows Common Log File System CLFS driver in the Microsoft Windows operating system is related to insufficient input data validation. Exploiting this vulnerability can allow an attacker to disclose sensitive information that should be protected...

5.5CVSS6AI score0.01054EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:0 a.m.8 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the memory boundaries. This allows attackers to gain unauthorized access to protected information and also cause system failures.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information, as well as cause service failures...

8.8CVSS7.1AI score0.01739EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:0 a.m.7 views

The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling a hacker to exploit this to disclose protected information.

The vulnerability of the driver for enabling Storage Spaces on Windows operating systems is related to the disclosure of information in a erroneous data field. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS6.6AI score0.00769EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:0 a.m.9 views

The vulnerability in the implementation of Full Screen Mode in browsers such as Google Chrome and Microsoft Edge allows a malicious actor to disclose protected information or cause service failures.

The vulnerability of the Full Screen Mode implementation in Google Chrome and Microsoft Edge is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose protected information or cause service failures...

9.4CVSS7.1AI score0.00863EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:0 a.m.7 views

The vulnerability in the implementation of Full Screen Mode in Google Chrome and Microsoft Edge browsers allows a perpetrator to compromise the integrity, accessibility, and confidentiality of protected information.

The vulnerability of the Full Screen Mode implementation in Google Chrome and Microsoft Edge is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to compromise the integrity, accessibility, and confidentiality of the protected information...

5.5CVSS7.1AI score0.00863EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/03/11 12:0 a.m.24 views

The vulnerability of the webNasIPS module of the TerraMaster operating system for TerraMaster TNAS storage devices allows a hacker to gain access to protected information.

The vulnerability of the webNasIPS module in the TerraMaster operating system for data storage devices called TerraMaster TNAS is related to the possibility of executing arbitrary commands. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

7.8CVSS5.6AI score0.83546EPSS
SaveExploits9References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/11 12:0 a.m.8 views

The vulnerability of the Redirected Drive Buffering Subsystem in the operating system of Microsoft Windows allows a hacker to disclose protected information.

The vulnerability of the Redirected Drive Buffering Subsystem in the Microsoft Windows operating system is related to information disclosure. Exploiting this vulnerability can allow attackers to disclose protected information...

5.5CVSS6.2AI score0.00758EPSS
SaveExploits0References3
Rows per page
Query Builder