Lucene search
K

1946 matches found

Positive Technologies
Positive Technologies
added 2020/11/10 12:0 a.m.2 views

PT-2020-4679 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the Windows operating system's remote desktop service. It allows an attacker to elevate their privileges. Recommendations: At the...

7.8CVSS7.2AI score0.00897EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2020/11/10 12:0 a.m.1 views

PT-2020-4697 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows operating system, allowing an attacker to potentially elevate their privileges. This could impact the system's...

7.8CVSS7.2AI score0.00906EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2020/11/10 12:0 a.m.1 views

PT-2020-4794 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows operating system, allowing an attacker to potentially elevate their privileges. This could affect the system, but...

7.8CVSS7.2AI score0.02641EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2020/11/10 12:0 a.m.3 views

PT-2020-4606

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a spoofing vulnerability in the Windows operating system, which is associated with errors in the representation of information by the user interface. This vulnerabilit...

5.5CVSS6.1AI score0.19124EPSS
Exploits0References14
BDU FSTEC
BDU FSTEC
added 2020/10/29 12:0 a.m.1 views

The vulnerability of the PowerShellGet command interpreter on Windows operating systems allows an attacker to execute arbitrary code. This vulnerability stems from security flaws in the PowerShell interpreter’s mechanisms.

The vulnerability of the PowerShellGet command interpreter on Windows operating systems is related to security vulnerabilities in its implementation. Exploiting this vulnerability allows an attacker to bypass Windows Defender Application Control and execute arbitrary code...

7.2CVSS6.2AI score0.00803EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/29 12:0 a.m.2 views

The vulnerability of the client of the VMware Horizon Client virtualization system for Windows operating systems arises from insufficient validation of input data. This allows a malicious actor to trigger a service failure.

The vulnerability of the VMware Horizon Client client system for Windows operating systems relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

7.1CVSS7.1AI score0.00339EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/22 12:0 a.m.3 views

The vulnerability of the Windows iSCSI Target service in the Windows operating system allows a hacker to escalate their privileges.

The vulnerability of the Windows iSCSI Target service in the Windows operating system is related to file operation processing errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00885EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/10/22 12:0 a.m.3 views

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system relates to operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

8.8CVSS7.8AI score0.00875EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/10/22 12:0 a.m.2 views

The vulnerability of the Group Policy Services in the Windows operating system allows a perpetrator to increase their privileges.

The vulnerability of Group Policy Services in the Windows operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.5AI score0.02417EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/10/22 12:0 a.m.3 views

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS7.2AI score0.00885EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/10/22 12:0 a.m.2 views

Vulnerability of Microsoft Graphics Components of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of Microsoft Graphics Components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.0352EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/10/20 12:0 a.m.4 views

The vulnerability of the Windows COM Server component of the Windows operating system, which allows attackers to escalate their privileges

The vulnerability of the Windows COM Server component of the operating system is related to errors in the processing of COM objects. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.0096EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/10/20 12:0 a.m.2 views

The vulnerability of the Base3D component of the Windows operating system, which allows a hacker to execute arbitrary code

The vulnerability of the Base3D component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.03551EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/10/20 12:0 a.m.3 views

The vulnerability of the win32k component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.2AI score0.00984EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/10/20 12:0 a.m.2 views

The vulnerability of Windows operating systems, related to errors in file signature checking, allows a hacker to load arbitrary files.

The vulnerability of Windows operating systems is related to errors during file signature verification. Exploiting this vulnerability can allow an attacker to load arbitrary files...

5.3CVSS6AI score0.00786EPSS
Exploits0References3
OSV
OSV
added 2020/10/15 9:15 p.m.12 views

CVE-2019-17640

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...

9.8CVSS6.8AI score
Exploits0References6
Positive Technologies
Positive Technologies
added 2020/10/13 12:0 a.m.1 views

PT-2020-4250 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Remote Desktop Protocol RDP affected versions not specified Description: An information disclosure issue exists in Remote Desktop Protocol RDP when an attacker connects to the target system using RDP and sends specially crafted requests. This...

7.8CVSS7.3AI score0.097EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2020/10/07 12:0 a.m.2 views

The vulnerability of Audiodriver in Windows Media Player on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of Audiodriver in Windows Media Player on the Windows operating system is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS7.7AI score0.0282EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2020/10/01 7:15 p.m.27 views

CVE-2020-15663

If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to ...

9.3CVSS7.8AI score0.02603EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2020/10/01 6:43 p.m.42 views

CVE-2020-15663

If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to ...

9.3CVSS9.6AI score0.02603EPSS
Exploits0
Rows per page
Query Builder