290 matches found
Microsoft 3D Viewer (Windows SMB Login)
SMB login-based detection of Microsoft 3D Viewer. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-44248
An improper access control vulnerability CWE-284 in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service...
CVE-2023-30902
A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to unintentionally delete privileged Trend Micro registry keys including its own protected registry keys on affected installations...
CVE-2023-24577
McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via registry keys. This could enable a user with lower privileges to execute unauthorized tasks...
CVE-2019-19119
An issue was discovered in PRTG 7.x through 19.4.53. Due to insufficient access control on local registry keys for the Core Server Service, a non-administrative user on the local machine is able to access administrative credentials...
The vulnerabilities of Kaspersky’s antivirus protection tools—Kaspersky Virus Removal Tool for Windows, Kaspersky Endpoint Security for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Anti-Virus SDK for Windows, Kaspersky Small Office Security, Kaspersky for Windows (Standard, Plus, Premium), Kaspersky Free, Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, and Kaspersky Security Cloud—are related to authentication mechanism flaws. These flaws allow attackers to delete arbitrary files or registry keys.
The vulnerabilities of Kaspersky’s antivirus protection tools—Kaspersky Virus Removal Tool for Windows, Kaspersky Endpoint Security for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Anti-Virus SDK for Windows, Kaspersky Small Office Security, Kaspersky for Windows Standard...
CVE-2020-13533
A privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default configuration, the following registry keys, which reference binaries with weak permissions, can be abused by attackers to effectively ‘backdoor’ the installation files and escalate privileges when a new user logs...
"Windows Script Host must be enabled for the duration of setup process"
Challenge While attempting to Install or Upgrade Veeam Backup & Replication, the installer displays the message: Windows Script Host must be enabled for the duration of setup process, Refer to KB4699 for more information https:// www.veeam.com/kb4699. Cause This message is displayed when the...
MAL-2024-11817 Malicious code in planweb-core-ui (npm)
This package contains code to download a second stage payload which establishes a C2 connection and persistence via registry keys. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acc967a53ff92a71f6b9518c692bf641aa3595a3b65f28cc403b471c0474b175 Any computer that has...
Cisco Duo Epic for Hyperdrive 安全漏洞
Cisco Duo Epic for Hyperdrive is an application from Cisco. A security vulnerability exists in Cisco Duo Epic for Hyperdrive that stems from improper storage of unencrypted registry keys, which could allow an authenticated, local attacker to view sensitive information in plaintext on an affected...
SQLLocalDB event ID 512
The Delivery Controller event logs show numerous error Event ID: 512 Source: SQLLocalDB 14.0 The "DataDirectory" registry value is missing in the LocalDB instance registry key: 44A9EE4E-9BD8-4715-AD84-84FC18033127 The "DataDirectory" registry value is missing in the LocalDB instance registry key:...
CVE-2023-44248
An improper access control vulnerability CWE-284 in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service...
CVE-2023-44248
An improper access control vulnerability CWE-284 in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service...
Improper access control
An improper access control vulnerability CWE-284 in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service...
CVE-2023-44248
An improper access control vulnerability CWE-284 in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service...
CVE-2023-44248
An improper access control vulnerability CWE-284 in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service...
CVE-2023-44248
CVE-2023-44248 is an improper access control vulnerability in FortiEDRCollectorWindows that can allow a local attacker to prevent the collector service from starting on the next reboot by tampering with registry keys. Affected: FortiEDRCollectorWindows <= 5.2.0.4549, 5.2.0.4549, >5.0.3.1007...
PT-2023-7192 · Fortinet · Fortiedr
Name of the Vulnerable Software and Affected Versions: FortiEDR versions prior to 5.2.0.4549 FortiEDR versions prior to 5.0.3.1007 FortiEDR version 4.0 Description: The issue is related to improper access control in FortiEDR, which may allow a local attacker to prevent the collector service from...
