CVE-2019-0659

An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations, aka 'Windows Storage Service Elevation of Privilege Vulnerability'...

CVE-2019-0659

An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations, aka 'Windows Storage Service Elevation of Privilege Vulnerability'...

The vulnerability of the Storage Service component in the Windows operating system allows attackers to enhance their privileges and affect the confidentiality and integrity of the protected information.

The vulnerability of the Windows operating system’s Storage Service component is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges and affect the confidentiality and integrity of the protected information through a speciall...

The vulnerability of the Virtual Directory Manager component of the Oracle Virtual Directory user data storage service allows a perpetrator to gain unauthorized access to data and cause a partial service failure.

The vulnerability of the Virtual Directory Manager component of the Oracle Virtual Directory authentication storage service is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain unauthorized access to data and cause a partial service failur...

Microsoft Windows Multiple Vulnerabilities (KB4487026)

This host is missing a critical security update according to Microsoft KB4487026 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4487018)

This host is missing a critical security update according to Microsoft KB4487018 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Windows Storage Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system. To exploit the vulnerability, an attacker would first have to gain execution o...

KB4486996: Windows 10 Version 1709 and Windows Server Version 1709 February 2019 Security Update

The remote Windows host is missing security update 4486996. It is, therefore, affected by multiple vulnerabilities : - An information vulnerability exists when Windows improperly discloses file information. Successful exploitation of the vulnerability could allow the attacker to read the contents...

The vulnerability of the S3 protocol in the S3 Browser allows a hacker to view files and obtain NTLMv2 user hash values.

The vulnerability of the S3 Browser protocol based on HTTP is related to shortcomings in the restrictions on XML links to external objects. In this case, server responses are transmitted in XML format. Exploiting this vulnerability allows a malicious actor to remotely access files and obtain user...

The vulnerability of the FileStorageService service in the automation software Track-It! allows a hacker to upload arbitrary files to the root directory of the web server and execute arbitrary code.

The vulnerability of the FileStorageService service in the automation software Track-It! is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to upload arbitrary files to the root directory of the web server and execute arbitrary code with privilege...

CloudMe Buffer Overflow Vulnerability

CloudMe is a file storage service that includes cloud storage, file synchronization, and client browsing software. A buffer overflow vulnerability exists in CloudMe. A remote attacker could exploit this vulnerability to execute arbitrary code...

CVE-2016-6598

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service FileStorageService on port 9010. This service contains a method that allows uploading a file to an arbitrary path on the machine that is running Track-It!. This can be used to upload a file to the web...

CVE-2016-6598

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service FileStorageService on port 9010. This service contains a method that allows uploading a file to an arbitrary path on the machine that is running Track-It!. This can be used to upload a file to the web...

CVE-2016-6598

BMC Track-It! 11.4 before Hotfix 3 is affected by CVE-2016-6598. An unauthenticated .NET Remoting FileStorageService on port 9010 allows uploading a file to an arbitrary path on the Track-It! server, which can lead to code execution as NETWORK SERVICE or SYSTEM. Root cause: unauthenticated remote...

Yuanzi Parenting AliCloud OSS credentials have information leakage vulnerability

Yuanzi Parenting APP is a parenting mobile application for parents of 1 to 6 year old babies, which can be an interactive sharing platform for the exchange of parenting knowledge and experience. Aliyun Object Storage Service OSS is a massive, secure and highly reliable cloud storage service...

Star Queen Aliyun OSS credentials have information leakage vulnerability

Star Queen APP is a social platform based on beauty and beautification manicure plastic surgery and bodybuilding and other industries. AliCloud Object Storage Service OSS is a massive, secure and highly reliable cloud storage service provided by AliCloud. After the star AliCloud OSS credentials...

Palm Edge AliCloud OSS credentials have information leakage vulnerabilities

Palm Edge APP is a mobile unit association dating activities software. There is an information leakage vulnerability in the Palm Edge AliCloud OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and accessKeySecret, endpoint built into the...

Lychee Live AliCloud OSS credentials have information leakage vulnerability

Lychee Live app is an Internet-based interactive live broadcasting platform launched by Guangdong Network Radio and Television. There is an information leakage vulnerability in Lychee Live Aliyun OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with...

Information leakage vulnerability in Aliyun OSS credentials in Higher Education State

CollegeBang is dedicated to providing online courses, and course production services for colleges and universities around the world. Aliyun Object Storage Service, or OSS for short, is a massive, secure and highly reliable cloud storage service provided by Aliyun. There is an information leakage...

Ate little brother ali cloud oss credentials have information leakage vulnerability

The Aite Little Brother app is a service program. There is an information leakage vulnerability in the Aite Little Brother AliCloud oss credentials. The vulnerability stems from the accessKeyId and accessKeySecret, endpoint built into the mobile app, resulting in credential leakage. An attacker c...