Lucene search
+L

939 matches found

attackerkb
attackerkb
•added 2022/05/20 1:15 p.m.•10 views

CVE-2022-26634

HMA VPN v5.3.5913.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

7.8CVSS7.1AI score0.00418EPSS
SaveExploits1References3
NVD
NVD
•added 2022/05/20 1:15 p.m.•31 views

CVE-2022-26634

HMA VPN v5.3.5913.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

7.8CVSS0.00418EPSS
SaveExploits1References2
Prion
Prion
•added 2022/05/20 1:15 p.m.•19 views

Code injection

MiniTool Partition Wizard v12.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

7.2CVSS7.7AI score0.00416EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2022/05/20 1:15 p.m.•17 views

Code injection

Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

7.2CVSS6.7AI score0.00414EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/05/20 12:48 p.m.•34 views

CVE-2022-27094

Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

7.6AI score0.00414EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/20 12:00 a.m.•4 views

CVE-2022-27095: Unquoted Search Path or Element

BattlEye v0.9 contains an unquoted service path which allows attackers to escalate privileges to the system level...

7.8CVSS7.3AI score0.00416EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/20 12:00 a.m.•2 views

CVE-2022-26634: Unquoted Search Path or Element

HMA VPN v5.3.5913.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

7.8CVSS7.3AI score0.00418EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/20 12:00 a.m.•4 views

CVE-2022-27094: Unquoted Search Path or Element

Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

7.2CVSS6.8AI score0.00414EPSS
SaveExploits1References2
ThreatPost
ThreatPost
•added 2022/05/17 1:19 p.m.•60 views

iPhones Vulnerable to Attack Even When Turned Off

Attackers can target iPhones even when they are turned off due to how Apple implements standalone wireless features Bluetooth, Near Field Communication NFC and Ultra-wideband UWB technologies in the device, researchers have found. These features—which have access to the iPhone’s Secure Element SE...

7.8AI score
SaveExploits0References3
NVD
NVD
•added 2022/04/28 3:15 p.m.•41 views

CVE-2022-22782

The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows prior to version 5.10.3, and Zoom VDI Windows Meeting Clients prior to version 5.9.6; was susceptible to a local...

7.9CVSS0.00376EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/04/21 12:00 a.m.•67 views

FANUC ROBOGUIDE elevation of privilege vulnerability

FANUC ROBOGUIDE is a robot simulation software from FANUC, Japan. FANUC ROBOGUIDE v9.40083.00.05 and previous versions have an elevation of privilege vulnerability. The vulnerability stems from the fact that the affected product is vulnerable to misconfigured binaries, and an attacker with...

6CVSS3.5AI score0.00165EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/20 4:15 p.m.•22 views

Privilege escalation

The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileges access to overwrite the binary and modify files to gain privilege escalation...

3.3CVSS6.3AI score0.00165EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/04/20 3:30 p.m.•34 views

CVE-2021-38483 ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform

The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileges access to overwrite the binary and modify files to gain privilege escalation...

6CVSS6.5AI score0.00165EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/20 12:00 a.m.•4 views

CVE-2021-38483: Incorrect Permission Assignment for Critical Resource

The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileges access to overwrite the binary and modify files to gain privilege escalation...

6CVSS6.2AI score0.00165EPSS
SaveExploits0References2
OSV
OSV
•added 2022/04/14 4:15 p.m.•7 views

CVE-2022-25165

An issue was discovered in Amazon AWS VPN Client 2.0.0. A TOCTOU race condition exists during the validation of VPN configuration files. This allows parameters outside of the AWS VPN Client allow list to be injected into the configuration file prior to the AWS VPN Client service running as SYSTEM...

7CVSS6.7AI score0.00526EPSS
SaveExploits1References2
OSV
OSV
•added 2022/04/11 8:15 p.m.•10 views

CVE-2022-20067

In mdp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05836585; Issue ID: ALPS05836585...

6.7CVSS5.9AI score0.00121EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/04/02 12:00 a.m.•25 views

BitComet Service for Windows Elevation of Privilege Vulnerability

BitComet is a BitTorrent client software written in C for the Microsoft Windows platform, which can also be used for HTTP/FTP downloads.An elevation of privilege vulnerability exists in BitComet Service for Windows, which can be exploited by attackers to elevate privileges to the system level...

7.8CVSS5.6AI score0.0035EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/31 12:00 a.m.•4 views

CVE-2022-27050: Unquoted Search Path or Element

BitComet Service for Windows before version 1.8.6 contains an unquoted service path vulnerability which allows attackers to escalate privileges to the system level...

7.8CVSS7.3AI score0.0035EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/03/31 12:00 a.m.•16 views

BitComet 代码问题漏洞

BitComet is a BitTorrent client software written in C for the Microsoft Windows platform, which can also be used for HTTP/FTP downloads.An elevation of privilege vulnerability exists in BitComet Service for Windows, which can be exploited by attackers to elevate privileges to the system level...

7.8CVSS5.6AI score0.0035EPSS
SaveExploits1References2
NVD
NVD
•added 2022/03/04 5:15 p.m.•26 views

CVE-2022-25623

The Symantec Management Agent is susceptible to a privilege escalation vulnerability. A low privilege local account can be elevated to the SYSTEM level through registry manipulations...

7.8CVSS0.00281EPSS
SaveExploits0References1
Rows per page
Query Builder