CVE-2022-21524

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with network access via SMB to compromise Oracle Solaris. Successful attacks of this vulnerability can...

PT-2022-4136 · Samba +10 · Samba +10

Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: A flaw was found in Samba, where some SMB1 write requests were not correctly range-checked, allowing server memory contents to be written into the file or printer instead of client-supplied...

PT-2022-7165 · Unknown · Avalanche Premise

Name of the Vulnerable Software and Affected Versions: Avalanche Premise versions 6.3.x and below Description: The issue is related to an improper authentication procedure in the Avalanche system, which can be exploited by an attacker to bypass security restrictions. This can be achieved by...

June 23, 2022—KB5014665 (OS Build 20348.803) Preview

None None...

The vulnerability in the implementation of the Windows SMB network protocol of the Microsoft operating system allows a perpetrator to cause a service failure.

The vulnerability of the Windows SMB network protocol implementation in Microsoft Windows is related to the assignment of the zero pointer. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2022-32230

Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death BSOD crash of the Windows kernel. For most...

Microsoft Windows SMBv3 代码问题漏洞

Microsoft Windows SMB Client and Microsoft Windows SMB Server are both products of Microsoft Corporation.Microsoft Windows SMB Client is a software application. an SMB client. Microsoft Windows SMB Server is a network file sharing protocol. It allows applications on a computer to read and write...

CVE-2022-24581

ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an external SMB share when uploading a file, an attacker can induce the victim server to disclose the username and password hash of the user executing the ACEweb Online software...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a U.S. Apple Apple macOS Big Sur is the 17th major release of macOS, the operating system used by Apple for the MAC. Apple macOS Big Sur suffers from a buffer error vulnerability that stems from a boundary error in the SMB implementation. An attacker could exploit this...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a U.S. Apple Apple macOS Big Sur is the 17th major release of macOS, the operating system used by Apple for the MAC. Apple macOS Big Sur suffers from a buffer error vulnerability that originates from a boundary error in SMB. A remote attacker can exploit this vulnerability ...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a U.S. Apple Apple macOS Big Sur is the 17th major release of macOS, the operating system used by Apple for the MAC. Apple macOS Big Sur suffers from a buffer error vulnerability that stems from a boundary error in the SMB implementation. An attacker could exploit this...

PT-2022-19521 · Notable +1 · Notable +1

Name of the Vulnerable Software and Affected Versions: Notable versions prior to 1.9.0-beta.8 Description: The issue arises from improper validation of the file URI scheme, allowing the opening of executable files when clicking on a link. This could lead to the execution of an arbitrary program o...

Microsoft Patch Tuesday, April 2022 Edition

Microsoft on Tuesday released updates to fix roughly 120 security vulnerabilities in its Windows operating systems and other software. Two of the flaws have been publicly detailed prior to this week, and one is already seeing active exploitation, according to a report from the U.S. National...

The vulnerability in the implementation of the Windows SMB network protocol of the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Windows SMB network protocol implementation in the Windows operating system is related to the possibility of redirecting users to an SMB server controlled by a malicious actor. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Windows SMB Server 安全漏洞

Microsoft Windows SMB Server is a network file sharing protocol from Microsoft Corporation USA. It allows applications on a computer to read and write files and request services from server programs on the computer network.A remote code execution vulnerability exists in Microsoft Windows SMB. An...

Microsoft Windows SMB Server 输入验证错误漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation USA, and a remote code execution vulnerability exists in Microsoft Windows Server Service. The vulnerability is caused by a flaw in the server service component. An attacker could exploit the vulnerability to execute...

Microsoft Windows SMB Server 代码注入漏洞

Microsoft Windows SMB Server is a network file sharing protocol from Microsoft Corporation USA. It allows applications on a computer to read and write files and request services from server programs on the computer network.A remote code execution vulnerability exists in Microsoft Windows SMB, whi...

Microsoft Windows SMB Server 安全漏洞

Microsoft Windows SMB Server is a network file sharing protocol from Microsoft Corporation USA. It allows applications on a computer to read and write files and request services from server programs on the computer network.A remote code execution vulnerability exists in Microsoft Windows SMB, whi...

The vulnerability in the implementation of the Server Message Block (SMBv3) network protocol of the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Server Message Block SMBv3 network protocol implementation in the Microsoft Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability affects the implementation of the Windows SMB network protocol in Microsoft Windows operating systems, allowing attackers to escalate their privileges.

The vulnerability of the Windows SMB network protocol implementation in Microsoft Windows is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...