1101 matches found
Storage Spaces Direct Elevation of Privilege Vulnerability
...
PT-2022-2645 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource, specifically a "race condition" in the Storage Spaces Direct feature of the Microsoft Windows operating syste...
Microsoft Windows Storage Spaces Controller 权限许可和访问控制问题漏洞
An elevation of privilege vulnerability exists in Microsoft Windows Storage Spaces Controller, a driver necessary to provide storage space functionality from Microsoft Corporation USA. The vulnerability stems from an incorrect program call to a high-level native procedure. An attacker could explo...
Microsoft Windows Storage Spaces Controller 竞争条件问题漏洞
Microsoft Windows Storage Spaces Controller is an essential driver for providing storage space functionality from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Storage Spaces Controller with a competitive condition issue. The following products and versions are...
PT-2022-2594 · Microsoft · Storage Spaces Direct +1
Name of the Vulnerable Software and Affected Versions: Storage Spaces Direct affected versions not specified Description: The issue is related to insufficient access restrictions in the Storage Spaces Direct feature of Windows operating systems. This can allow an attacker to elevate their...
Microsoft Windows Storage Spaces Controller 竞争条件问题漏洞
An elevation-of-privilege vulnerability exists in Microsoft Windows Storage Spaces Controller, a driver necessary to provide storage space functionality for Microsoft Corporation. The vulnerability stems from improper handling of concurrent access when concurrent code needs to mutually exclusive...
The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling attackers to increase their privileges.
The vulnerability of the driver for enabling Storage Spaces Controller on Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...
The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling attackers to increase their privileges.
The vulnerability of the driver for enabling Storage Spaces on Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...
CVE-2022-24303
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled...
PYSEC-2022-168
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled...
PYSEC-2022-168
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled...
UBUNTU-CVE-2022-24303
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled...
CVE-2022-24303
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled...
The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling a hacker to exploit this to disclose protected information.
The vulnerability of the driver for enabling Storage Spaces on Windows operating systems is related to the disclosure of information in a erroneous data field. Exploiting this vulnerability can allow an attacker to disclose protected information...
The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling a hacker to exploit this to disclose protected information.
The vulnerability of the driver for enabling Storage Spaces on Windows operating systems is related to the disclosure of information in a erroneous data field. Exploiting this vulnerability can allow an attacker to disclose protected information...
WordPress Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more plugin <= 4.2.37 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more plugin versions = 4.2.37. Solution Update the WordPress Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more...
WordPress Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more plugin <= 4.2.37 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more plugin versions = 4.2.37. Solution Update the WordPress Media Cloud for Amazon S3, Imgix, Google Cloud Storage,...
OESA-2022-1540 python-pillow security update
Python image processing library. Security Fixes: Pillow is a PIL Python Imaging Library fork. Affected versions of this package are vulnerable to Improper Input Validation. When the path to the temporary directory on Linux or macOS contained a space, this would break removal of the temporary imag...
Vulnerabilities that aren’t. Unquoted Spaces
I’ve covered a couple of web vulnerabilities that mostly aren’t, and now it’s time for a Windows specific one. A common finding from build reviews and CIS comparisons: unquoted spaces in service or run paths. What is it? Windows has always been inconsistent in how its API handles uncommon...
The driver’s vulnerability related to the functionality of Storage Spaces controllers in Windows operating systems allows attackers to exploit it to increase their privileges. This vulnerability stems from errors in memory object handling.
The vulnerability of the driver for enabling Storage Spaces on Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...