Lucene search
+L

1997 matches found

CNVD
CNVD
added 2019/01/09 12:0 a.m.7 views

Microsoft Windows COM Privilege Vulnerability

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Windows COM Desktop Broker is one of the COM desktop agent programs. An elevation of privilege vulnerability exists in Microsoft Windows COM Desktop Broker, which can be exploited by an...

8.8CVSS9AI score0.02539EPSS
SaveExploits3References1
OSV
OSV
added 2019/01/08 9:29 p.m.5 views

CVE-2019-0538

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows...

7.8CVSS7.8AI score0.20505EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:0 a.m.8 views

The vulnerability of the Microsoft Windows operating system, related to errors in memory object handling, allows a perpetrator to trigger a service failure.

The vulnerability of the Connected User Experience and Telemetry Service services in the Microsoft Windows operating system is related to improper handling of objects in memory. Exploiting this vulnerability can allow a local attacker to cause service failures through a specially created...

4.7CVSS6.8AI score0.01424EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:0 a.m.12 views

The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory, allowing a malicious actor to execute arbitrary code in kernel mode.

The vulnerability of the Win32k component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode using a specially created application...

7CVSS8.1AI score0.01116EPSS
SaveExploits0References4
CNVD
CNVD
added 2018/12/21 12:0 a.m.43 views

Microsoft Internet Explorer Scripting Engine Remote Code Execution Vulnerability

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A remote code execution vulnerability exists in the way memory objects are handled in the scripting engine of Microsoft IE 9, 10, an...

7.6CVSS8.5AI score0.24305EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.8 views

The vulnerability of the PowerShell command interpreter for Windows operating systems allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the PowerShell command interpreter for Windows operating systems is related to errors in processing objects in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges and execute arbitrary code using a specially crafted application...

3.3CVSS8.3AI score0.01185EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.14 views

The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to increase their privileges and execute arbitrary code.

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially crafted application...

8.4CVSS8.2AI score0.04196EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/12/12 12:0 a.m.9 views

Microsoft Windows Win32k Privilege Mobilization Vulnerability

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Win32k is a 32-bit environment for one of these operating systems. A lift vulnerability exists in the Microsoft Win32k component that stems from a program's failure to properly handle...

8.4CVSS7.3AI score0.22349EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/12/07 12:0 a.m.12 views

The vulnerability of the DirectX component in the Windows operating system allows attackers to elevate their privileges and execute arbitrary code in kernel mode.

The vulnerability of the DirectX component of the Windows operating system exists due to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode through a specially created application...

7CVSS8.2AI score0.01193EPSS
SaveExploits0References6
Securelist
Securelist
added 2018/12/04 12:0 p.m.69 views

KoffeyMaker: notebook vs. ATM

Despite CCTV and the risk of being caught by security staff, attacks on ATMs using a direct connection — so-called black box attacks — are still popular with cybercriminals. The main reason is the low "entry requirements" for would-be cyber-robbers: specialized sites offer both the necessary tool...

0.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2018/12/04 12:0 a.m.9 views

The vulnerability of the Win32k component of the Windows operating system allows a hacker to increase their privileges and execute arbitrary code in kernel mode.

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode through a specially created application...

7CVSS8.2AI score0.01348EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2018/12/04 12:0 a.m.10 views

The vulnerability of the DirectX component in the Windows operating system allows attackers to elevate their privileges and execute arbitrary code in kernel mode.

The vulnerability of the DirectX component in the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode through a specially created application...

7CVSS8.2AI score0.01193EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2018/12/04 12:0 a.m.10 views

Vulnerability of the Microsoft Graphics component in the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft Graphics component in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...

10CVSS8.4AI score0.19059EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2018/11/23 12:0 a.m.7 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems stems from insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted files in the Advanced Recordin...

7.8CVSS6AI score0.02125EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2018/11/20 12:0 a.m.9 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems stems from insufficient validation of input data, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted files in the Advanced Recordin...

7.8CVSS6AI score0.02015EPSS
SaveExploits0References4Affected Software5
CNVD
CNVD
added 2018/11/15 12:0 a.m.7 views

Microsoft Windows COM Aggregate Marshaler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 and others are operating systems released by Microsoft Corporation USA.Windows COM Aggregate Marshaler is one of the components. An elevation of privilege vulnerability exists in Microsoft Windows COM Aggregate Marshaler. An attacker can exploit this vulnerability an...

7.8CVSS8.8AI score0.03295EPSS
SaveExploits4References1
OSV
OSV
added 2018/11/14 1:29 a.m.5 views

CVE-2018-8407

An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019,...

5.5CVSS7.3AI score0.01655EPSS
SaveExploits0References3
Citrix
Citrix
added 2018/10/29 12:0 a.m.10 views

Passthrough authentication is delayed on Workspace App for Windows 18.8.0.19031

Pass-through authentication is delayed on Workspace App for Windows 18.8.0.19031 Once user logs on to desktop, Workspace App does not log in automatically. User has to right click on Workspace App icon in system tray and click on logon. Application shortcuts are to be placed on desktop - This is...

7.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2018/10/26 12:0 a.m.9 views

The vulnerability of the computerdefaults component of the Windows operating system, related to access control errors, allows a perpetrator to escalate their privileges through bypassing the UAC mechanism.

The vulnerability of the computer Defaults.exe component of the Windows operating system is related to access control errors. Exploiting this vulnerability could allow an attacker to enhance their privileges by bypassing the UAC mechanism through manipulation of the registry...

4.6CVSS5.4AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2018/10/19 12:0 a.m.10 views

The vulnerability of the BIOS loader of the Hyper-V hardware virtualization platform for Windows operating systems allows a hacker to circumvent built-in security restrictions.

The vulnerability of the BIOS loader of Hyper-V hardware virtualization systems for Windows operating systems arises from the unstable provision of high entropy during loading. Exploiting this vulnerability allows a remote attacker to circumvent built-in security restrictions...

5.4CVSS7.8AI score0.01363EPSS
SaveExploits0References3
Rows per page
Query Builder