Lucene search
K

1843 matches found

BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.5 views

The vulnerability relates to the implementation of the Microsoft Server Message Block (SMB) network protocol on Windows operating systems, allowing attackers to exploit their privileges.

The vulnerability of the Microsoft Server Message Block SMB network protocol implementation in Windows operating systems is related to access control violations, which allow attackers to enhance their privileges through a specially crafted file...

7.8CVSS7.2AI score0.03206EPSS
Exploits2References3
Positive Technologies
Positive Technologies
added 2019/05/30 12:0 a.m.4 views

PT-2019-6227 · Samba +5 · Samba +5

Name of the Vulnerable Software and Affected Versions: Samba versions prior to 4.13.16 Description: The issue allows a malicious client to create a directory in an area of the server file system not exported under the share definition by using an SMB1 or NFS race. This can happen if SMB1 is enabl...

9CVSS6.5AI score0.74042EPSS
Exploits2References83
ThreatPost
ThreatPost
added 2019/05/20 2:22 p.m.103 views

Slack Bug Allows Remote File Hijacking, Malware Injection

A remotely exploitable vulnerability in the Windows desktop app version of the Slack collaboration platform has been uncovered, which allows attackers to alter where files from Slack are downloaded. Nefarious types could redirect the files to their own SMB server; and, they could manipulate the...

0.1AI score
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2019/05/16 12:0 a.m.4 views

The vulnerability of the Server Message Block (SMB) microprogramming system used by Cisco Firepower Threat Defense allows a perpetrator to induce a service failure.

The vulnerability of the Server Message Block SMB microprogramming system used in Cisco Firepower Threat Defense is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.2AI score0.02236EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/16 12:0 a.m.3 views

The vulnerability of the Server Message Block (SMB) microprogramming system used by Cisco Firepower Threat Defense allows a perpetrator to induce a service failure.

The vulnerability of the Server Message Block SMB microprogramming system used in Cisco Firepower Threat Defense is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.2AI score0.01799EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2019/05/03 4:29 p.m.3 views

CVE-2019-1704

Multiple vulnerabilities in the Server Message Block SMB Protocol preprocessor detection engine for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, adjacent or remote attacker to cause a denial of service DoS condition. For more information about these vulnerabilities,...

7.5CVSS7.2AI score0.02236EPSS
Exploits0References2
OSV
OSV
added 2019/05/03 3:29 p.m.3 views

CVE-2019-1696

Multiple vulnerabilities in the Server Message Block SMB Protocol preprocessor detection engine for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, adjacent or remote attacker to cause a denial of service DoS condition. For more information about these vulnerabilities,...

7.4CVSS7.2AI score0.01799EPSS
Exploits0References2
Prion
Prion
added 2019/05/03 3:29 p.m.20 views

Design/Logic Flaw

Multiple vulnerabilities in the Server Message Block SMB Protocol preprocessor detection engine for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, adjacent or remote attacker to cause a denial of service DoS condition. For more information about these vulnerabilities,...

3.3CVSS7.5AI score0.01799EPSS
Exploits0References2Affected Software2
Veracode
Veracode
added 2019/05/02 6:43 a.m.25 views

Denial Of Service (DoS)

Pidgin is vulnerable to denial of service attacks. A remote unauthenticated attacker could exploit the vulnerable nmevent.c file to cause denial of service conditions via a crafted server message that triggers a large memory allocation...

5CVSS8.7AI score0.02871EPSS
Exploits0References15Affected Software1
Veracode
Veracode
added 2019/05/02 5:20 a.m.26 views

Improper Access Control

Samba is an open-source implementation of the Server Message Block SMB or Common Internet File System CIFS protocol, which allows PC-compatible machines to share files, printers, and other information. A denial of service flaw was found in the LDAP server provided by the AD DC in the Samba proces...

7.2CVSS6.7AI score0.13584EPSS
Exploits1References27Affected Software2
Positive Technologies
Positive Technologies
added 2019/05/01 12:0 a.m.3 views

PT-2019-2048 · Cisco · Cisco Ftd

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software affected versions not specified Description: The issue is related to the Server Message Block SMB Protocol preprocessor detection engine, which could allow an unauthenticated, adjacent or remote...

7.8CVSS7.3AI score0.01799EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2019/04/16 12:0 a.m.3 views

PT-2019-4770 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.0.10 Description: The issue is related to the SMB2 negotiate function in the Linux kernel, specifically in the fs/cifs/smb2pdu.c file. It involves an out-of-bounds read due to incompletely updated data...

10CVSS7.5AI score0.16908EPSS
Exploits72References542
Veeam
Veeam
added 2019/04/15 5:6 p.m.12 views

License Auto Update fails after applying Update 4

Challenge License Auto Update fails Cause Any licenses obtained prior to U4 are now known as 'Legacy Licenses'. Auto Update functionality cannot migrate a Legacy License to the new Veeam Instance License. The message most likely received is: Error Server message: License key type is not supported...

6.8AI score
Exploits0
Prion
Prion
added 2019/04/09 9:29 p.m.20 views

Privilege escalation

An elevation of privilege vulnerability exists in the Microsoft Server Message Block SMB Server when an attacker with valid credentials attempts to open a specially crafted file over the SMB protocol on the same machine, aka 'SMB Server Elevation of Privilege Vulnerability'...

7.5CVSS9.2AI score0.06999EPSS
Exploits0References1Affected Software2
OSV
OSV
added 2019/04/09 3:29 a.m.3 views

CVE-2019-0821

An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0703, CVE-2019-0704...

6.5CVSS7.2AI score0.06219EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2019/03/12 12:0 a.m.4 views

VulnCheck KEV: CVE-2019-0703

An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server...

6.5CVSS7.1AI score0.0964EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2019/03/12 12:0 a.m.2 views

PT-2019-1601 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling requests in the Windows SMB protocol implementation, which can be exploited by a remote attacker to gain unauthorized access to protected...

7.8CVSS7.5AI score0.06219EPSS
Exploits0References6
Cvelist
Cvelist
added 2019/03/06 12:0 a.m.29 views

CVE-2019-0630

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 SMBv2 server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0633...

9.4AI score0.17843EPSS
Exploits0References2
OSV
OSV
added 2019/03/05 11:29 p.m.2 views

CVE-2019-0633

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 SMBv2 server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0630...

8.8CVSS7.9AI score0.13039EPSS
Exploits0References2
OSV
OSV
added 2019/03/05 11:29 p.m.1 views

CVE-2019-0630

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 SMBv2 server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0633...

8.8CVSS6.4AI score0.17843EPSS
Exploits0References2
Rows per page
Query Builder