Lucene search
+L

1997 matches found

BDU FSTEC
BDU FSTEC
added 2020/10/20 12:0 a.m.11 views

The vulnerability of the win32k component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.2AI score0.01EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/10/20 12:0 a.m.14 views

The vulnerability of the Windows COM Server component of the Windows operating system, which allows attackers to escalate their privileges

The vulnerability of the Windows COM Server component of the operating system is related to errors in the processing of COM objects. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00976EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/10/20 12:0 a.m.9 views

The vulnerability of Windows operating systems, related to errors in file signature checking, allows a hacker to load arbitrary files.

The vulnerability of Windows operating systems is related to errors during file signature verification. Exploiting this vulnerability can allow an attacker to load arbitrary files...

5.3CVSS6AI score0.008EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/10/20 12:0 a.m.7 views

The vulnerability of the Base3D component of the Windows operating system, which allows a hacker to execute arbitrary code

The vulnerability of the Base3D component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.03865EPSS
SaveExploits0References3
OSV
OSV
added 2020/10/15 9:15 p.m.16 views

CVE-2019-17640

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...

9.8CVSS6.8AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2020/10/13 12:0 a.m.3 views

PT-2020-4250 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Remote Desktop Protocol RDP affected versions not specified Description: An information disclosure issue exists in Remote Desktop Protocol RDP when an attacker connects to the target system using RDP and sends specially crafted requests. This...

7.8CVSS7.3AI score0.12604EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2020/10/07 12:0 a.m.7 views

The vulnerability of Audiodriver in Windows Media Player on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of Audiodriver in Windows Media Player on the Windows operating system is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS7.7AI score0.0282EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2020/10/01 7:15 p.m.29 views

CVE-2020-15663

If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to ...

9.3CVSS7.8AI score0.02716EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2020/10/01 6:43 p.m.61 views

CVE-2020-15663

If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to ...

9.3CVSS9.6AI score0.02716EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2020/09/29 8:16 p.m.7 views

webkitgtk: Memory corruption triggered by a malicious web content

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to...

9.3CVSS6.9AI score0.02578EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2020/09/29 12:0 a.m.6 views

The vulnerability of the Microsoft Store Runtime component in Microsoft Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Microsoft Store Runtime operating system components in Microsoft Windows is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

6.6CVSS6.8AI score0.00777EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/24 12:0 a.m.8 views

The vulnerability of the DirectX component of the Windows operating system, which allows attackers to exploit their privileges

The vulnerability of the DirectX component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.01031EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/24 12:0 a.m.11 views

The vulnerability of the WinINet API component of the Windows operating system allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the WinINet API component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability allows a remote attacker to enhance their privileges and execute arbitrary code...

9.3CVSS7AI score0.02095EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.10 views

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a perpetrator to trigger a service failure.

The hardware virtualization system Hyper-V for Windows operating systems has vulnerabilities due to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to cause service failures...

6.5CVSS6.8AI score0.02838EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.9 views

The vulnerability of the DirectX component in Windows operating systems, which allows attackers to exploit their privileges

The vulnerability of the DirectX component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00931EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.9 views

The vulnerability of the Windows operating system’s DNS server, related to errors in handling DNS requests, allows a hacker to cause a service failure.

The vulnerability of the Windows operating system’s DNS server is related to errors in handling DNS requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted DNS request...

6.8CVSS7.2AI score0.04496EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.8 views

The vulnerability of the splwow64.exe process in the Windows operating system, which allows a hacker to escalate their privileges

The vulnerability of the splwow64.exe process in Windows operating systems is related to call processing errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.2AI score0.00931EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.12 views

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a perpetrator to trigger a service failure.

The hardware virtualization system Hyper-V for Windows operating systems has vulnerabilities due to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to cause service failures...

6.5CVSS6.8AI score0.01235EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.11 views

The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the Win32k component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...

5.5CVSS6.2AI score0.01079EPSS
SaveExploits0References3
OSV
OSV
added 2020/09/11 5:15 p.m.5 views

CVE-2020-0648

An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges...

7.8CVSS7.2AI score0.00965EPSS
SaveExploits0References1
Rows per page
Query Builder