2225 matches found
Moodle cross-site scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field...
GHSA-C9JP-244J-VH78 Moodle cross-site scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field...
CVE-2022-24040
A vulnerability has been identified in Desigo DXR2 All versions V01.21.142.5-22, Desigo PXC3 All versions V01.21.142.4-18, Desigo PXC4 All versions V02.20.142.10-10884, Desigo PXC5 All versions V02.20.142.10-10884. The web application fails to enforce an upper bound to the cost factor of the PBKD...
CVE-2022-24041
A vulnerability has been identified in Desigo DXR2 All versions V01.21.142.5-22, Desigo PXC3 All versions V01.21.142.4-18, Desigo PXC4 All versions V02.20.142.10-10884, Desigo PXC5 All versions V02.20.142.10-10884. The web application stores the PBKDF2 derived key of users passwords with a low...
Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation...
Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation...
VulnCheck KEV: CVE-2022-21919
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation...
CVE-2022-26904
Windows User Profile Service Elevation of Privilege Vulnerability...
CVE-2022-26904
Windows User Profile Service Elevation of Privilege Vulnerability...
Privilege escalation
Windows User Profile Service Elevation of Privilege Vulnerability...
CVE-2022-26904
CVE-2022-26904 is a Windows User Profile Service Elevation of Privilege vulnerability. The issue is a race-condition–driven LPE in the User Profile Service, with attacker-controlled code execution at SYSTEM granted by bypasses and PoCs described in public sources. A Metasploit module exists for t...
CVE-2022-26904 Windows User Profile Service Elevation of Privilege Vulnerability
...
CVE-2022-26904
Windows User Profile Service Elevation of Privilege Vulnerability Recent assessments: gwillcox-r7 at March 30, 2022 4:52pm UTC reported: This is a bypass for CVE-2022-21919 which is in turn a bypass for CVE-2021-34484. As noted at https://twitter.com/billdemirkapi/status/1508527492285575172,...
VulnCheck KEV: CVE-2022-26904
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation...
CVE-2022-24765
Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...
Windows User Profile Service Elevation of Privilege Vulnerability
...
CVE-2022-24765
Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...
CVE-2022-24765
Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...
Microsoft Windows User Profile Service 竞争条件问题漏洞
Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A competitive conditions issue vulnerability exists in Microsoft Windows User Profile Service. The...