Lucene search
+L

1997 matches found

Veracode
Veracode
added 2023/11/30 4:29 p.m.28 views

Improper File Execution

firefox-esr,thunderbird vulnerable to Improper File Execution. The vulnerability due to a file is not present when downloading .msix, .msixbundle, .appx, and .appxbundle files. It allows an attacker could execute a malicious file will effect on windows operating system...

6.5CVSS6.7AI score0.00863EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/11/18 12:0 a.m.10 views

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the DHCP server service for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.8CVSS7.4AI score0.02458EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/10/28 12:0 a.m.9 views

The vulnerability of the software delivery and installation tool for Dell Digital Delivery lies in the unsafe operations at the mount points in the Windows operating system. This allows a malicious actor to cause service failures.

The vulnerability of the software delivery and installation tool for Dell Digital Delivery relates to a unsafe operation at the mount point in the Windows operating system. Exploiting this vulnerability could allow an attacker to cause service failures...

5.5CVSS5.9AI score0.00154EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/28 12:0 a.m.6 views

The vulnerability of the VMware Tools utility for Windows operating systems stems from flaws in the authentication process, which allows attackers to escalate their privileges.

The vulnerability of the VMware Tools utility for Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

7.5CVSS6.5AI score0.00672EPSS
SaveExploits0References9Affected Software4
CNNVD
CNNVD
added 2023/10/25 12:0 a.m.8 views

Alexander Maier EisBaer Scada Trust Management Issues Vulnerabilities

Alexander Maier EisBaer Scada is a visual reality display and control program created on Windows operating systems by Alexander Maier of Germany. A security vulnerability exists in Alexander Maier EisBaer Scada that stems from the use of hard-coded keys...

9.8CVSS6.8AI score0.00425EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2023/10/24 6:28 p.m.25 views

CVE-2023-5727

The Mozilla Foundation Security Advisory describes this flaw as: The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer. Note: This issue only affected Windows operating systems. Other operating...

6.1CVSS7AI score0.00863EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2023/10/24 12:47 p.m.70 views

CVE-2023-5727

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer. Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox 119,...

6.5CVSS8AI score0.00863EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/10/24 12:0 a.m.8 views

The vulnerability of the RDP protocol implementation in graphical driver software for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the RDP protocol implementation in graphical driver software for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.3AI score0.00529EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.8 views

The vulnerability of the Microsoft WDAC ODBC driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft WDAC ODBC driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00965EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.8 views

The vulnerability of the Active Directory Domain Services service on the Windows operating system allows a perpetrator to disclose protected information.

The vulnerability of the Active Directory Domain Services service on the Windows operating system is related to the lack of protection for service-related data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

4.6CVSS6.4AI score0.01238EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.9 views

The vulnerability of the TCP/IP protocol implementation in the Windows operating system allows a hacker to cause a service failure.

The vulnerability of the TCP/IP protocol implementation in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.02314EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.9 views

The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.3AI score0.1185EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.11 views

The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.3AI score0.0784EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.8 views

The vulnerability in the set of tools for developing Common Data Model (CDM) SDKs for the Windows operating system allows a attacker to perform a type of attack known as a “Denial-of-Service” (DoS) attack.

The vulnerability of the Common Data Model CDM SDK for application development on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute a DoS Denial-of-Service attack...

6.8CVSS7.1AI score0.02802EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.8 views

The vulnerability of the Setup Files Cleanup component of the Windows operating system allows a hacker to execute remote code.

The vulnerability of the Setup Files Cleanup component of the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute malicious code...

7.8CVSS7.5AI score0.00836EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.10 views

The vulnerability of the Named Pipe File System component of the Windows operating system, which allows a hacker to exploit their privileges

The vulnerability of the Named Pipe File System component in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.3AI score0.00589EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.8 views

The vulnerability of Windows operating systems’ message queues allows a perpetrator to execute arbitrary code.

The vulnerability of Windows operating systems’ message queues is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.3CVSS7.6AI score0.00967EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.12 views

The vulnerability in the implementation of the QUIC network protocol in Windows operating systems allows a attacker to cause a service failure.

The vulnerability of the QUIC network protocol implementation in Windows operating systems is related to insufficient input data validation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS6.5AI score0.69494EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.9 views

The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.3AI score0.00807EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/16 10:15 p.m.6 views

CVE-2023-38740

IBM Db2 for Linux, UNIX, and Windows includes Db2 Connect Server 11.5 is vulnerable to a denial of service with a specially crafted SQL statement. IBM X-Force ID: 262613...

7.5CVSS5.8AI score0.00782EPSS
SaveExploits0References4
Rows per page
Query Builder