Lucene search
K

1946 matches found

Positive Technologies
Positive Technologies
added 2022/04/02 12:0 a.m.2 views

PT-2022-2349 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Advanced Local Procedure Call ALPC handler of the Windows operating system. This can allow an attacker to...

7CVSS7AI score0.00313EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.3 views

The vulnerability in the fax sending and scanning services of the Microsoft Windows operating system allows a hacker to escalate their privileges.

The vulnerability of the Microsoft Windows operating system’s fax and scanning services is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.6AI score0.0062EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:0 a.m.3 views

The vulnerability of the WinSock driver of the Microsoft Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the WinSock driver in the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.1AI score0.00445EPSS
Exploits0References3
OSV
OSV
added 2022/03/21 10:15 p.m.0 views

UBUNTU-CVE-2022-26184

Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute Poetry commands in a directory containing malicious content. This vulnerability occurs when the application is ran on Windows OS...

9.8CVSS7.3AI score0.01828EPSS
Exploits0References4
hivepro
hivepro
added 2022/03/21 1:54 p.m.37 views

Environment Variables Leak affect Multiple browsers

THREAT LEVEL: Amber. For a detailed advisory, download the pdf file here. A system environment variables leak security bug was found in Chromium 92 version. Multiple web browsers are based on the chromium engine, such as Google Chrome, Microsoft Edge, Opera, and Brave. Most of them are reported t...

1.3AI score0.01266EPSS
Exploits2
BDU FSTEC
BDU FSTEC
added 2022/03/21 12:0 a.m.2 views

The vulnerability of the Win32k component of the Microsoft Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Win32k component of the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS6.7AI score0.0119EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:0 a.m.4 views

The vulnerability of the Windows Common Log File System Driver in the Microsoft Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows Common Log File System Driver in the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.2AI score0.00832EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:0 a.m.2 views

The vulnerability of the SymCrypt library in the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of the SymCrypt library in the Windows operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.4AI score0.03663EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:0 a.m.3 views

The vulnerability of the Redirected Drive Buffering Subsystem in the operating system of Microsoft Windows allows a hacker to disclose protected information.

The vulnerability of the Redirected Drive Buffering Subsystem in the Microsoft Windows operating system is related to information disclosure. Exploiting this vulnerability can allow attackers to disclose protected information...

5.5CVSS6.2AI score0.0074EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:0 a.m.3 views

The vulnerability of the WLAN AutoConfig service in the Microsoft Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the WLAN AutoConfig service in the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.3CVSS7.2AI score0.00734EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:0 a.m.3 views

The vulnerability of the WinSock driver of the Microsoft Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the WinSock driver in the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.1AI score0.00445EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:0 a.m.3 views

The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Win32k component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS6.7AI score0.01198EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:0 a.m.3 views

The vulnerability of the Remote Desktop Protocol implementation in the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Remote Desktop Protocol implementation in the Microsoft Windows operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.5AI score0.06793EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:0 a.m.2 views

The vulnerability of the Windows operating system arises from insufficient validation of input data, allowing attackers to trigger a service failure.

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a perpetrator to cause service failures...

5.5CVSS6.6AI score0.0061EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:0 a.m.2 views

The vulnerability of the Redirected Drive Buffering Subsystem in the operating system of Microsoft Windows allows a hacker to disclose protected information.

The vulnerability of the Redirected Drive Buffering Subsystem in the Microsoft Windows operating system is related to information disclosure. Exploiting this vulnerability can allow attackers to disclose protected information...

5.5CVSS6.2AI score0.0074EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:0 a.m.2 views

The vulnerability in the implementation of the Windows SMB network protocol of the Microsoft operating system allows a perpetrator to disclose protected information.

The vulnerability of the Windows SMB network protocol implementation in Microsoft Windows is related to information disclosure. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS6.2AI score0.0074EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:0 a.m.3 views

The vulnerability of the DNS server service in the Microsoft Windows operating system allows a hacker to increase their privileges.

The vulnerability of the DNS server service in the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.4AI score0.00463EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/03/10 12:0 a.m.2 views

PT-2022-2461 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to information disclosure in Windows operating systems. It allows a remote attacker to gain unauthorized access to protected information. This can potentially lead to t...

6.8CVSS9.1AI score0.02656EPSS
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2022/03/09 5:15 p.m.4 views

CVE-2022-23293

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability...

7.8CVSS7.1AI score0.0063EPSS
Exploits0References3Affected Software26
ATTACKERKB
ATTACKERKB
added 2022/03/09 5:15 p.m.5 views

CVE-2022-23253

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability...

6.5CVSS6.8AI score0.56376EPSS
Exploits0References3Affected Software23
Rows per page
Query Builder