Lucene search
+L

549 matches found

Microsoft CVE
Microsoft CVE
added 2023/07/11 7:0 a.m.33 views

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

9.8CVSS9.2AI score0.01768EPSS
SaveExploits0
CNNVD
CNNVD
added 2023/07/11 12:0 a.m.6 views

Microsoft Windows Routing and Remote Access Service (RRAS) 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Routing and Remote Access Service RRAS. An attacker exploiting this vulnerability could remotely execute code. The following products...

9.8CVSS8.4AI score0.01768EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/07/11 12:0 a.m.183 views

KB5028166: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (July 2023)

The remote Windows host is missing security update 5028166. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2023-35365, CVE-2023-35366, CVE-2023-35367 - Windows Netlogon Information Disclosure...

9.8CVSS7.5AI score0.42602EPSS
SaveExploits6References81
NCSC
NCSC
added 2023/01/27 12:0 a.m.4 views

Vulnerability fixed in Microsoft Windows

Microsoft has released an out-of-band security update to fix a vulnerability in the Point-to-point Tunneling Protocol, as used in the Microsoft Remote Access Service. A unauthenticated malicious party could exploit the vulnerability to execute arbitrary code on the RAS environment, after causing ...

8.1CVSS7.3AI score0.00993EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/01/16 12:0 a.m.9 views

The vulnerability of the Layer 2 Tunneling Protocol (L2TP) implementation in Microsoft Windows allows a hacker to execute arbitrary code.

The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in Microsoft Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted connection request to the...

8.1CVSS8AI score0.01103EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/01/16 12:0 a.m.12 views

The vulnerability of the Layer 2 Tunneling Protocol (L2TP) implementation in Microsoft Windows allows a hacker to execute arbitrary code.

The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in Microsoft Windows operating systems stems from the fact that the operation is performed outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a special...

8.1CVSS8.2AI score0.01723EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/01/13 12:0 a.m.7 views

The vulnerability of the Layer 2 Tunneling Protocol (L2TP) implementation in Microsoft Windows allows a hacker to execute arbitrary code.

The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in Microsoft Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted connection request to the...

8.1CVSS8AI score0.01103EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.3 views

PT-2023-1043 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Layer 2 Tunneling Protocol L2TP in Microsoft Windows, specifically involving the use of memory after it has been freed. This can be exploit...

8.1CVSS8.6AI score0.01103EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.5 views

PT-2023-1046 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue is related to the implementation of the Layer 2 Tunneling Protocol L2TP in Microsoft Windows, specifically involving the use of memory after it has been freed. This can be...

8.1CVSS8.3AI score0.01464EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.3 views

PT-2023-1022 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue is related to the implementation of the Layer 2 Tunneling Protocol L2TP in Microsoft Windows, specifically involving the use of memory after it has been freed. This can be...

8.1CVSS8.7AI score0.01103EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2022/12/13 12:0 a.m.9 views

PT-2022-27540 · Siemens · Jt2Go +1

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 14.1.0.6 Teamcenter Visualization V13.2 versions prior to 13.2.0.12 Teamcenter Visualization V13.3 versions prior to 13.3.0.9 Teamcenter Visualization V14.0 versions prior to 14.0.0.5 Teamcenter Visualization V14.1...

7.8CVSS4AI score0.00225EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.8 views

Microsoft Windows Point-to-Point Tunneling Protocol 安全漏洞

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft that enables the secure transmission of data from remote clients to private corporate servers by creating a virtual private network VPN over a TCP/IP-based data network. VPN. A security vulnerability...

5.9CVSS7AI score0.01441EPSS
SaveExploits0References4
Microsoft KB
Microsoft KB
added 2022/07/12 7:0 a.m.74 views

July 12, 2022—KB5015808 (OS Build 14393.5246) - EXPIRED

None None...

8.8CVSS6.8AI score0.32336EPSS
SaveExploits4
Microsoft KB
Microsoft KB
added 2022/06/14 7:0 a.m.93 views

June 14, 2022—KB5014678 (OS Build 20348.768)

None None...

9.3CVSS6.8AI score0.99374EPSS
SaveExploits63
Microsoft KB
Microsoft KB
added 2022/05/19 12:0 a.m.12 views

KB5014991: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012

KB5014991: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012 Summary This update includes improvements for the following issue: Addresses a known issue that might cause authentication failures for some services on a server o...

6.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.11 views

The vulnerability of the Remote Access Service (RAS) interface of Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Remote Access Service RAS interface in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.02015EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/03/09 12:0 a.m.3 views

PT-2021-2422 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Remote Access Service RAS interface of Windows operating systems, which is caused by insecure privilege management. Th...

7.8CVSS7.3AI score0.02015EPSS
SaveExploits0References10
zdt
zdt
added 2021/03/08 12:0 a.m.137 views

Microsoft Windows RRAS Service MIBEntryGet Overflow Exploit

This Metasploit module exploits an overflow in the Windows Routing and Remote Access Service RRAS to execute code as SYSTEM. The RRAS DCERPC endpoint is accessible to unauthenticated users via SMBv1 browser named pipe on Windows Server 2003 and Windows XP hosts; however, this module targets Windo...

7.8CVSS8.1AI score0.21108EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
added 2020/09/11 12:0 a.m.7 views

The vulnerability of the Windows operating system’s remote access service relates to operations that go beyond the buffer in memory, allowing attackers to increase their privileges.

The vulnerability of the Windows operating system’s remote access service is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS8AI score0.01007EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/11 12:0 a.m.8 views

The vulnerability of the Windows operating system’s remote access service allows a hacker to increase their privileges.

The vulnerability of the Windows operating system’s remote access service is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS8AI score0.00795EPSS
SaveExploits0References2
Rows per page
Query Builder