1997 matches found
Design/Logic Flaw
VMware Thinapp version 5.x prior to 5.2.10 contain a DLL hijacking vulnerability due to insecure loading of DLLs. A malicious actor with non-administrative privileges may exploit this vulnerability to elevate privileges to administrator level on the Windows operating system having VMware ThinApp...
CVE-2021-22000
VMware Thinapp version 5.x prior to 5.2.10 contain a DLL hijacking vulnerability due to insecure loading of DLLs. A malicious actor with non-administrative privileges may exploit this vulnerability to elevate privileges to administrator level on the Windows operating system having VMware ThinApp...
PT-2021-5715 · Microsoft · Windows Dns Server +1
Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to incorrect code generation management in the DNS Server component of the Microsoft Windows operating system. It allows a remote attacker to execute arbitra...
Microsoft Win32k 输入验证错误漏洞
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. An elevation of privilege vulnerability exists in Win32k in Microsoft...
PT-2021-5227 · Microsoft · Windows Remote Access Connection Manager +1
Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to information disclosure in the Remote Access Connection Manager RASMan service of the Microsoft Windows operating system. It allows a...
Microsoft Windows Console Driver 权限许可和访问控制问题漏洞
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Windows Console Driver in...
PT-2021-5647 · Microsoft · Gdi+ +1
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient protection of internal data in the GDI+ graphics library of Microsoft Windows operating systems. This can allow an attacker to gain unauthoriz...
Design/Logic Flaw
The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace...
The vulnerability of NFS servers in Microsoft Windows systems, which allows a hacker to gain unauthorized access to protected information
The vulnerability of NFS servers on Microsoft Windows operating systems is related to security flaws in the handling of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...
The vulnerability of NFS servers in Microsoft Windows systems, which allows a hacker to gain unauthorized access to protected information
The vulnerability of NFS servers on Microsoft Windows operating systems is related to security flaws in the handling of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...
Mozilla Thunderbird Permissions and Access Control Issues Vulnerability
Mozilla Thunderbird is an open source email client. Mozilla Thunderbird is vulnerable to permission permission and access control issues, which stem from the way Mozilla maintenance services are installed on the Windows operating system. No detailed vulnerability details are currently available...
The vulnerability of the Intune management extension for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Intune management extension for Windows operating systems is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the ntfs.sys driver in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the ntfs.sys driver in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the ntoskrnl.exe file in Windows operating systems allows a hacker to gain unauthorized access to protected information.
The vulnerability of the ntoskrnl.exe file in operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Microsoft Enhanced Cryptographic Provider on Microsoft Windows operating systems allows attackers to enhance their privileges.
The vulnerability of Microsoft’s Enhanced Cryptographic Provider on Microsoft Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2021-31970
Windows TCP/IP Driver Security Feature Bypass Vulnerability...
Microsoft Windows Codecs Library 代码注入漏洞
Microsoft Windows is a desktop operating system from the U.S. company Microsoft. A security vulnerability exists in the Microsoft Windows Codecs Library. The following products and versions are affected:VP9 Video Extensions,...
Schneider Electric IGSS
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Schneider Electric Equipment: IGSS Interactive Graphical SCADA System Vulnerabilities: Out-of-bounds Write, Out-of-bounds Read, Access of Uninitialized Pointer, Use After Free, Release of Invalid Pointer or Reference,...
The vulnerability of the OLE Automation technology implementation in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the OLE Automation technology implementation in Microsoft Windows operating systems is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Remote Desktop Protocol (RDP) implementation on Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Remote Desktop Protocol RDP implementation on Microsoft Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...