Lucene search
K

3907 matches found

Prion
Prion
added 2022/11/11 7:15 p.m.28 views

Design/Logic Flaw

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will open the default editor for the file...

4.4CVSS7.5AI score0.00466EPSS
Exploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2022/11/11 7:15 p.m.30 views

CVE-2022-41882

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will open the default editor for the file...

7.8CVSS6.9AI score0.00466EPSS
Exploits0References4
CVE
CVE
added 2022/11/11 12:0 a.m.122 views

CVE-2022-41882

The CVE-2022-41882 entry concerns the Nextcloud Desktop Client. Affected product: Nextcloud Desktop Client prior to version 3.6.1. Root cause: clicking a nc://open/ link for a malicious shared file, when the file is locally synced or the virtual filesystem is enabled, can cause the default editor...

7.8CVSS6.8AI score0.00466EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/11 12:0 a.m.4 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPTP) network protocol in the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in the Microsoft Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially craft...

8.1CVSS8.2AI score0.01403EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2022/11/11 12:0 a.m.692 views

CVE-2022-41882

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will open the default editor for the file...

7.8CVSS7AI score0.00466EPSS
Exploits0
Veracode
Veracode
added 2022/11/10 12:44 a.m.23 views

Denial Of Service (DoS)

389-ds-base is vulnerable to Denial Of Service DoS. The vulnerability exists when the content synchronization plugin is enabled, allowing an attacker crash the application through the null pointer dereference by providing a maliciously crafted query...

6.5CVSS6.3AI score0.01238EPSS
Exploits1References11Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/09 12:0 a.m.6 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPTP) network protocol in the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Point to Point Tunneling Protocol PPTP network protocol implementation in the Microsoft Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS8.1AI score0.01057EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/11/09 12:0 a.m.4 views

The vulnerability of the Apache Tomcat application server, related to synchronization errors when using shared resources, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Tomcat application server is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

3.7CVSS6.7AI score0.01746EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/11/09 12:0 a.m.4 views

The vulnerability of the Apache Tomcat application server, related to synchronization errors when using shared resources, allows attackers to escalate their privileges.

The vulnerability of the Apache Tomcat application server is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to increase their privileges...

7CVSS7.4AI score0.00692EPSS
Exploits0References13Affected Software18
RedHat Linux
RedHat Linux
added 2022/11/08 9:46 a.m.42 views

Moderate: Red Hat Security Advisory: rsync security and enhancement update

An update for rsync is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

9.8CVSS6.9AI score0.1593EPSS
Exploits1References4
Rockylinux
Rockylinux
added 2022/11/08 6:29 a.m.43 views

rsync security and enhancement update

An update is available for rsync. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rsync utility enables the users to copy and synchronize files locally or...

9.8CVSS9.7AI score0.1593EPSS
Exploits1
OSV
OSV
added 2022/11/08 6:29 a.m.47 views

RLSA-2022:7793 Moderate: rsync security and enhancement update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...

7CVSS8.9AI score0.1593EPSS
Exploits1References3
OSV
OSV
added 2022/11/08 12:0 a.m.22 views

ALSA-2022:7793 Moderate: rsync security and enhancement update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...

9.8CVSS8.9AI score0.1593EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/11/08 12:0 a.m.2 views

PT-2022-5498 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows Group Policy Services. It allows an attacker to elevate their privileges. Recommendations: At t...

6.4CVSS6.6AI score0.00253EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2022/11/08 12:0 a.m.1 views

PT-2022-5500 · Microsoft · Windows Pptp +1

Name of the Vulnerable Software and Affected Versions: Windows Point-to-Point Tunneling Protocol PPTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Point to Point Tunneling Protocol PPTP in...

5.9CVSS6.1AI score0.00967EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2022/11/08 12:0 a.m.3 views

PT-2022-5504 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows Advanced Local Procedure Call ALPC handler. This can allow an attacker to elevate their...

7.8CVSS7.8AI score0.00292EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2022/11/08 12:0 a.m.4 views

PT-2022-5508 · Microsoft · Azure Iot Edge For Linux On Windows +1

Name of the Vulnerable Software and Affected Versions: Windows Subsystem for Linux WSL2 affected versions not specified Azure IoT Edge for Linux on Windows EFLOW affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the kernel...

7CVSS6.9AI score0.00322EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/11/08 12:0 a.m.4 views

PT-2022-5568 · Microsoft · Windows Bind Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bind Filter Driver affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows Bind Filter Driver. This can allow an attacker to gain unauthorized access to th...

7CVSS7.2AI score0.00502EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/11/08 12:0 a.m.2 views

PT-2022-5454 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Point-to-Point Tunneling Protocol PPTP in Windows operating systems. This can be...

8.1CVSS9.5AI score0.01035EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2022/11/08 12:0 a.m.4 views

PT-2022-5659 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows Advanced Local Procedure Call ALPC handler. This can allow an attacker to elevate their...

7.8CVSS7.8AI score0.003EPSS
Exploits0References10
Rows per page
Query Builder