Lucene search
+L

19003 matches found

Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.7 views

PT-2021-4796 · Microsoft · Windows Remote Desktop Protocol +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Protocol RDP affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Remote Desktop Protocol RDP component of the Windows operating system. Exploitation ...

4.9CVSS6.6AI score0.01414EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.4 views

PT-2021-5262 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, allowing a remote attacker to conduct spoofing attacks. This can affect the...

6.5CVSS6.1AI score0.93877EPSS
SaveExploits3References18
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.8 views

PT-2021-23604 · Busybox +3 · Busybox +3

Name of the Vulnerable Software and Affected Versions: Busybox affected versions not specified Description: An issue in Busybox's ash applet causes a denial of service when it processes a specially crafted shell command. This happens because the shell incorrectly identifies certain characters as...

9.8CVSS6.4AI score0.32919EPSS
SaveExploits21References162
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.6 views

PT-2021-5318 · Fslogix · Fslogix

Name of the Vulnerable Software and Affected Versions: FSLogix affected versions not specified Description: The issue is related to a lack of protection for service data, which can allow an attacker to gain unauthorized access to a device. Recommendations: At the moment, there is no information...

5.5CVSS5.4AI score0.00715EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.8 views

PT-2021-5003 · Microsoft · Malware Protection Engine

Name of the Vulnerable Software and Affected Versions: Microsoft Malware Protection Engine MPE affected versions not specified Description: The issue is related to errors in code generation management within the Microsoft Malware Protection Engine MPE. Exploitation of this issue may allow an...

9.3CVSS8.1AI score0.05293EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.2 views

PT-2021-4807 · Microsoft · Access +1

Name of the Vulnerable Software and Affected Versions: Microsoft Access affected versions not specified Description: The issue is related to incorrect code generation management in a Microsoft Access component, which is part of Microsoft Office and Microsoft 365 Apps. This can be exploited by a...

9.3CVSS6.4AI score0.03521EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.5 views

PT-2021-4836 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The issue is related to insecure privilege management in the Windows NTFS file system, allowing an attacker to elevate their privileges. This can affect the system, potentially leading...

7.8CVSS7.3AI score0.0043EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.9 views

PT-2021-5044 · Microsoft · Windows Desktop Bridge +1

Name of the Vulnerable Software and Affected Versions: Windows Desktop Bridge affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Desktop Bridge component of the Windows operating system. It allows an attacker to elevate their...

7.8CVSS7.2AI score0.0043EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.3 views

PT-2021-5160 · Microsoft · Azure Rtos

Name of the Vulnerable Software and Affected Versions: Azure RTOS affected versions not specified Description: The issue exists due to insufficient input validation in the Azure RTOS operating system. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations: A...

7.2CVSS6.2AI score0.00567EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.7 views

PT-2021-5162 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insecure privilege management in Visual Studio Code. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations: At the...

7.8CVSS7.4AI score0.0048EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.4 views

PT-2021-5161 · Microsoft · Azure Rtos

Name of the Vulnerable Software and Affected Versions: Azure RTOS affected versions not specified Description: The issue exists due to insufficient input validation in the Azure RTOS operating system. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations: A...

7.2CVSS6.2AI score0.007EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.6 views

PT-2021-4642 · Microsoft · Office Excel +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Excel, which can be exploited to allow an attacker to execute arbitrary code. This can be achieved due to errors in...

7.8CVSS9.3AI score0.31949EPSS
SaveExploits1References18
CNVD
CNVD
added 2021/11/04 12:0 a.m.41 views

Mozilla Firefox has an unspecified vulnerability (CNVD-2021-101168)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. A security vulnerability exists in Mozilla Firefox, which stems from a series of navigation that allows Firefox to enter full-screen mode without notifying or warning the user. This could lead to spoofing attack...

4.3CVSS2AI score0.01459EPSS
SaveExploits0References1
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:0 a.m.23 views

Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation...

7.8CVSS8AI score0.02954EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:0 a.m.64 views

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation...

7.8CVSS7.4AI score0.02634EPSS
SaveIn wildExploits0
VulnCheck KEV
VulnCheck KEV
added 2021/11/03 12:0 a.m.4 views

VulnCheck KEV: CVE-2016-4437

Apache Shiro contains a vulnerability which may allow remote attackers to execute code or bypass intended access restrictions via an unspecified request parameter when a cipher key has not been configured for the "remember me" feature...

9.8CVSS7.3AI score0.93039EPSS
SaveExploits9References1
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:0 a.m.89 views

SolarWinds Serv-U Remote Code Execution Vulnerability

SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution...

10CVSS9.6AI score0.9116EPSS
SaveIn wildExploits2
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:0 a.m.29 views

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation...

7.8CVSS7.8AI score0.05387EPSS
SaveIn wildExploits1
VulnCheck KEV
VulnCheck KEV
added 2021/11/03 12:0 a.m.6 views

VulnCheck KEV: CVE-2020-9859

Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel privileges...

7.8CVSS7.4AI score0.00829EPSS
SaveExploits0References1
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:0 a.m.69 views

Oracle Fusion Middleware Unspecified Vulnerability

Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability that allows remote attackers to affect confidentiality and integrity of affected systems...

9.1CVSS6.2AI score0.98695EPSS
SaveIn wildExploits12
Rows per page
Query Builder