CVE-2022-23649

Cosign provides container signing, verification, and storage in an OCI registry for the sigstore project. Prior to version 1.5.2, Cosign can be manipulated to claim that an entry for a signature exists in the Rekor transparency log even if it doesn't. This requires the attacker to have pull and...

CVE-2021-42954

Zoho Remote Access Plus Server Windows Desktop Binary fixed from 10.1.2121.1 is affected by incorrect access control. The installation directory is vulnerable to weak file permissions by allowing full control for Windows Everyone user group non-admin or any guest users, thereby allowing privilege...

CVE-2021-38453

Some API functions allow interaction with the registry, which includes reading values as well as data modification...

DVS - D(COM) V(ulnerability) S(canner) AKA Devious Swiss Army Knife

Did you ever wonder how you can move laterally through internal networks? or interact with remote machines without alerting EDRs? Let's assume that we have a valid credentials, or an active session with access to a remote machine, but we are without an option for executing a process remotely in a...

Microsoft Windows Kernel Privilege Elevation Vulnerability

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation.Windows Kernel is one of the Windows kernels. An elevation of privilege vulnerability exists in Microsoft Windows Kernel. The vulnerability can be exploited to gain access to privileged registry entrie...

CVE-2019-19119

An issue was discovered in PRTG 7.x through 19.4.53. Due to insufficient access control on local registry keys for the Core Server Service, a non-administrative user on the local machine is able to access administrative credentials...

PT-2019-11947

Name of the Vulnerable Software and Affected Versions QCA6174 9377.WIN.1.0 in QCA6174 9377 Description The issue allows low privilege users to access service configuration, which contains registry data used by administrators to create or delete entries in the registry. Recommendations For QCA6174...

CVE-2019-3636

A File Masquerade vulnerability in McAfee Total Protection MTP version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected...

The vulnerability of the Unified Write Filter (UWF) in the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the Unified Write Filter UWF in the Windows operating system is related to the lack of restrictions on access to the registry. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2019-0942

An elevation of privilege vulnerability exists in the Unified Write Filter UWF feature for Windows 10 when it improperly restricts access to the registry, aka 'Unified Write Filter Elevation of Privilege Vulnerability'...

CVE-2019-0942

CVE-2019-0942 concerns Windows 10 Unified Write Filter (UWF). The connected sources describe an elevation of privilege resulting from improper restriction of access to the registry within UWF. Affected component: UWF on Windows 10; root cause cited as registry access restriction flaw. Documented ...

HPSBHF03612 rev. 2 - Synaptics Audio Driver Package Allowing System Level Access to the Registry

Potential Security Impact Escalation of privilege Source: Synaptics, HP Product Security Response Team PSRT Reported By: Synaptics VULNERABILITY SUMMARY A potential security vulnerability has been identified with the Synaptics previously Conexant Sound Device Driver CxUtilSVc.exe component...

Authenticated Scan / LSC Info Consolidation (Windows SMB Login)

Consolidation and reporting of various technical information about authenticated scans / local security checks LSC via SMB for Windows targets. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

HP Notebook SynTP.sys File Keylogging Code Debugging Vulnerability

The SynTP.sys file is part of the Synaptics touchpad driver that comes with some HP notebook models. The HP laptop SynTP.sys file keylogger code debugging vulnerability can be exploited by an attacker to abuse the debugging code of the keylogger component, e.g., a malware developer can enable...

Some Workspace Environment Management security settings are not getting applied

Some WEM-related security settings such as hiding the Run menu or blocking access to system drives are not being applied, and the Agent log throws errors such as these: Exception - VuemEnvironmentalSettingsController.ExecuteEntityPolicySettings : Attempted to perform an unauthorized operation...

Microsoft Windows Kernel Local Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel is one of the kernels. A local elevation of privilege vulnerability exists in the kernel in Microsoft Windows, which arises from a failure of the kernel API to properly restrict acces...

CVE-2016-0075

The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of...

CVE-2016-0073

The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of...

Privilege escalation

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitiv...

CVE-2016-0070

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitiv...