Lucene search
K

565 matches found

BDU FSTEC
BDU FSTEC
added 2023/07/17 12:0 a.m.2 views

The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to circumvent security restrictions.

The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

6.8CVSS6.8AI score0.01018EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/07/17 12:0 a.m.3 views

The vulnerability of the Remote Procedure Call (RPC) technology in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

6.8CVSS7.3AI score0.01435EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/07/17 12:0 a.m.2 views

The vulnerability of the Remote Procedure Call (RPC) technology in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

6.8CVSS7.3AI score0.01435EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/07/17 12:0 a.m.1 views

The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.3AI score0.00422EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/07/17 12:0 a.m.2 views

The vulnerability of the Remote Procedure Call (RPC) technology in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

6.8CVSS7.3AI score0.01435EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/07/11 12:0 a.m.3 views

Microsoft PostScript Printer Driver 安全漏洞

Microsoft PostScript Printer Driver is a Microsoft standard printer driver for PostScript printers from Microsoft Corporation USA. A security vulnerability exists in the Microsoft PostScript Printer Driver. The following products and versions are affected: Windows 11 Version 22H2 for ARM64-based...

5.5CVSS6.7AI score0.00513EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.1 views

PT-2023-3507 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Remote Procedure Call RPC technology of Windows operating systems. This can be exploited by a remote attacker to cause a denial ...

7.5CVSS9.2AI score0.01435EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.1 views

PT-2023-3682 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Message Queuing MSMQ for Windows operating systems. It allows a remote attacker to execute arbitrar...

10CVSS9.5AI score0.01923EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.1 views

PT-2023-3855 · Microsoft · Directmusic +1

Name of the Vulnerable Software and Affected Versions: Microsoft DirectMusic affected versions not specified Description: The issue is related to insufficient protection of internal data in the DirectMusic component of Windows operating systems. This can allow an attacker to gain unauthorized...

6.2CVSS9.2AI score0.00502EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2023/06/23 12:0 a.m.3 views

The vulnerability of Group Policy Services in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of Group Policy Services in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

8.5CVSS7.6AI score0.01805EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/06/21 12:0 a.m.3 views

The vulnerability of the Windows Container Manager service on Windows operating systems allows a hacker to escalate their privileges.

The vulnerability of the Windows Container Manager service in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.3CVSS7.3AI score0.00507EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/05/15 12:0 a.m.3 views

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.1CVSS7.2AI score0.00622EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/05/10 12:0 a.m.3 views

The vulnerability of the App-V software service for virtualizing and delivering Citrix Virtual Apps and Desktops (formerly XenApp and XenDesktop), operating systems Windows, allows a malicious individual to escalate their privileges and execute arbitrary commands.

The vulnerability of the App-V software service for virtualizing and delivering Citrix Virtual Apps and Desktops formerly XenApp and XenDesktop on Windows operating systems is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiti...

9CVSS7.9AI score0.03336EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/22 12:0 a.m.2 views

The vulnerability in the implementation of the Internet Key Exchange (IKE) protocol in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Internet Key Exchange IKE protocol implementation in Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

7.5CVSS7.9AI score0.00877EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/13 12:0 a.m.1 views

The vulnerability of the Netlogon Remote Protocol (RPC) interface in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Netlogon Remote Protocol RPC interface in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

8.1CVSS7.2AI score0.01486EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/04/11 12:0 a.m.3 views

Microsoft Windows RDP Client 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows RDP Client. The following products and versions are affected: Windows 10 Version 20H2 for ARM64-based...

5.5CVSS6.7AI score0.00453EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/04/11 12:0 a.m.2 views

PT-2023-2434 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions affected versions not specified Description: The issue is related to the implementation of the Secure Socket Tunneling Protocol SSTP in Windows operating systems, which is associated with insufficient input validation. This c...

7.8CVSS7.5AI score0.01986EPSS
Exploits0References6
CNNVD
CNNVD
added 2023/04/11 12:0 a.m.11 views

Microsoft Windows Internet Key Exchange 安全漏洞

Microsoft Windows Internet Key Exchange is the Internet Key Exchange protocol in Windows from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Internet Key Exchange IKE Protocol. The following products and editions are affected:Windows 10 Version 1809 for...

7.5CVSS8.1AI score0.00877EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/04/11 12:0 a.m.2 views

PT-2023-2412 · Microsoft · Postscript/Pcl6 Class Printer Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft PostScript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to insufficient input validation in the PostScript Printer Driver Pscript and PCL6 Class Printer drivers for Windows operatin...

9CVSS9.5AI score0.0164EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2023/03/14 12:0 a.m.1 views

PT-2023-1783 · Microsoft · Windows Internet Key Exchange (Ike) Extension +1

Name of the Vulnerable Software and Affected Versions: Windows Internet Key Exchange IKE Extension affected versions not specified Description: The issue is related to insufficient input validation in the implementation of the Internet Key Exchange IKE protocol in Windows operating systems. This...

7.8CVSS9.1AI score0.01654EPSS
Exploits0References8
Rows per page
Query Builder