Lucene search
K

1851 matches found

Microsoft KB
Microsoft KB
added 2022/06/23 12:0 a.m.7 views

June 23, 2022—KB5014665 (OS Build 20348.803) Preview

June 23, 2022—KB5014665 OS Build 20348.803 Preview For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server 2022, see its update history page. Note Follow @WindowsUpdate to find out...

7.3AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2022/06/21 12:0 a.m.5 views

The vulnerability in the implementation of the Windows SMB network protocol of the Microsoft operating system allows a perpetrator to cause a service failure.

The vulnerability of the Windows SMB network protocol implementation in Microsoft Windows is related to the assignment of the zero pointer. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.5AI score0.06977EPSS
Exploits1References5
OSV
OSV
added 2022/06/14 10:15 p.m.2 views

CVE-2022-32230

Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death BSOD crash of the Windows kernel. For most...

7.5CVSS7.3AI score0.06977EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/06/14 12:0 a.m.3 views

Microsoft Windows SMBv3 代码问题漏洞

Microsoft Windows SMB Client and Microsoft Windows SMB Server are both products of Microsoft Corporation.Microsoft Windows SMB Client is a software application. an SMB client. Microsoft Windows SMB Server is a network file sharing protocol. It allows applications on a computer to read and write...

7.8CVSS8.1AI score0.06977EPSS
Exploits1References8
ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.3 views

CVE-2022-24581

ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an external SMB share when uploading a file, an attacker can induce the victim server to disclose the username and password hash of the user executing the ACEweb Online software...

7.5CVSS7.1AI score0.01107EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.7 views

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a U.S. Apple Apple macOS Big Sur is the 17th major release of macOS, the operating system used by Apple for the MAC. Apple macOS Big Sur suffers from a buffer error vulnerability that stems from a boundary error in the SMB implementation. An attacker could exploit this...

9.3CVSS7.9AI score0.00784EPSS
Exploits0References9
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.6 views

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a U.S. Apple Apple macOS Big Sur is the 17th major release of macOS, the operating system used by Apple for the MAC. Apple macOS Big Sur suffers from a buffer error vulnerability that stems from a boundary error in the SMB implementation. An attacker could exploit this...

7.8CVSS7.9AI score0.00631EPSS
Exploits0References7
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.4 views

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a U.S. Apple Apple macOS Big Sur is the 17th major release of macOS, the operating system used by Apple for the MAC. Apple macOS Big Sur suffers from a buffer error vulnerability that originates from a boundary error in SMB. A remote attacker can exploit this vulnerability ...

9.8CVSS8.3AI score0.01337EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/04/15 12:0 a.m.4 views

PT-2022-19521 · Notable +1 · Notable +1

Name of the Vulnerable Software and Affected Versions: Notable versions prior to 1.9.0-beta.8 Description: The issue arises from improper validation of the file URI scheme, allowing the opening of executable files when clicking on a link. This could lead to the execution of an arbitrary program o...

8.8CVSS8.5AI score0.01441EPSS
Exploits0References7
Krebs on Security
Krebs on Security
added 2022/04/13 3:1 p.m.81 views

Microsoft Patch Tuesday, April 2022 Edition

Microsoft on Tuesday released updates to fix roughly 120 security vulnerabilities in its Windows operating systems and other software. Two of the flaws have been publicly detailed prior to this week, and one is already seeing active exploitation, according to a report from the U.S. National...

10CVSS0.3AI score0.91811EPSS
Exploits20
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:0 a.m.4 views

The vulnerability in the implementation of the Windows SMB network protocol of the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Windows SMB network protocol implementation in the Windows operating system is related to the possibility of redirecting users to an SMB server controlled by a malicious actor. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.4AI score0.38549EPSS
Exploits2References1
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.4 views

Microsoft Windows SMB Server 输入验证错误漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation USA, and a remote code execution vulnerability exists in Microsoft Windows Server Service. The vulnerability is caused by a flaw in the server service component. An attacker could exploit the vulnerability to execute...

9.3CVSS9.7AI score0.02862EPSS
Exploits0References6
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.3 views

Microsoft Windows SMB Server 代码注入漏洞

Microsoft Windows SMB Server is a network file sharing protocol from Microsoft Corporation USA. It allows applications on a computer to read and write files and request services from server programs on the computer network.A remote code execution vulnerability exists in Microsoft Windows SMB, whi...

7.5CVSS8.9AI score0.01558EPSS
Exploits0References6
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.2 views

Microsoft Windows SMB Server 安全漏洞

Microsoft Windows SMB Server is a network file sharing protocol from Microsoft Corporation USA. It allows applications on a computer to read and write files and request services from server programs on the computer network.A remote code execution vulnerability exists in Microsoft Windows SMB, whi...

7.5CVSS8.9AI score0.01739EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.3 views

Microsoft Windows SMB Server 安全漏洞

Microsoft Windows SMB Server is a network file sharing protocol from Microsoft Corporation USA. It allows applications on a computer to read and write files and request services from server programs on the computer network.A remote code execution vulnerability exists in Microsoft Windows SMB. An...

7.5CVSS8.9AI score0.0188EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.9 views

The vulnerability in the implementation of the Server Message Block (SMBv3) network protocol of the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Server Message Block SMBv3 network protocol implementation in the Microsoft Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.1AI score0.02609EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.5 views

The vulnerability affects the implementation of the Windows SMB network protocol in Microsoft Windows operating systems, allowing attackers to escalate their privileges.

The vulnerability of the Windows SMB network protocol implementation in Microsoft Windows is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.2AI score0.00445EPSS
Exploits0References3
OSV
OSV
added 2022/03/25 11:15 p.m.1 views

DEBIAN-CVE-2022-22995

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...

9.8CVSS7.5AI score0.02656EPSS
Exploits0References1
OSV
OSV
added 2022/03/25 11:15 p.m.1 views

UBUNTU-CVE-2022-22995

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...

10CVSS7.5AI score0.02656EPSS
Exploits0References6
CNNVD
CNNVD
added 2022/03/25 12:0 a.m.4 views

Western Digital My Cloud 后置链接漏洞

Western Digital My Cloud is a personal cloud storage device from Western Digital. A backlink vulnerability exists in Western Digital My Cloud OS 5 due to insufficient file validation during file uploads in the native language combination provided by SMB and AFP in its default configuration. A...

10CVSS8.3AI score0.02656EPSS
Exploits0References9
Rows per page
Query Builder