Lucene search
K

565 matches found

Positive Technologies
Positive Technologies
added 2022/05/10 12:0 a.m.2 views

PT-2022-2455 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the implementation of the Kerberos protocol in Windows operating systems. It allows a remote attacker to elevate their privileges...

7.5CVSS9.5AI score0.02301EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/05/03 12:0 a.m.5 views

PT-2022-2984 · Microsoft · Windows Container Manager Service +1

Name of the Vulnerable Software and Affected Versions: Windows Container Manager Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Container Manager Service of Windows operating systems. It allows an attacker to elevate...

7.8CVSS9.2AI score0.00659EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2022/05/03 12:0 a.m.1 views

PT-2022-3132 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of Network Address Translation NAT technology in Windows operating systems, which is associated with insufficient input data validation. This can ...

10CVSS9.1AI score0.02652EPSS
Exploits0References8
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.4 views

Microsoft Windows Local Security Authority Subsystem Service 输入验证错误漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

8.8CVSS8.2AI score0.02033EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2022/04/12 12:0 a.m.3 views

PT-2022-2894 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority LSA Server affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Local Security Authority Subsystem Service LSASS of Windows operating systems...

5.5CVSS6AI score0.00764EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2022/04/12 12:0 a.m.3 views

PT-2022-2872 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Win32 Stream Enumeration component of Windows operating systems. This allows remote attackers to execute arbitrary code a...

7.6CVSS7.7AI score0.01558EPSS
Exploits0References7
CNNVD
CNNVD
added 2022/04/05 12:0 a.m.3 views

Samsung portable SSD T5 PC代码问题漏洞

Samsung portable SSD T5 PC is an official software for hard disks from Samsung South Korea. A security vulnerability exists in Samsung portable SSD T5 PC software prior to version 1.6.9, which originates from a DLL hijacking vulnerability that can be exploited by a local attacker to escalate...

7.3CVSS7.4AI score0.0023EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/03/08 12:0 a.m.3 views

Microsoft Windows Point-to-Point Tunneling Protocol 输入验证错误漏洞

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft that enables the secure transmission of data from remote clients to private corporate servers by creating a virtual private network VPN over a TCP/IP-based data network. VPN. An input validation error...

6.5CVSS6.9AI score0.56376EPSS
Exploits0References6
CNNVD
CNNVD
added 2022/03/08 12:0 a.m.9 views

Microsoft Windows HTML Platform 安全特征问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows HTML Platform due to a security feature issue. The following products and versions are affected: Windows 7 for 32-bit Systems Service Pack...

6.5CVSS6.5AI score0.32391EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2022/03/01 12:0 a.m.2 views

The vulnerability of Windows Mobile Device Management for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of Windows Mobile Device Management for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

5.5CVSS6.9AI score0.00656EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:0 a.m.4 views

The vulnerability of Windows Mobile Device Management for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of Windows Mobile Device Management for Windows operating systems is related to improper code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.02414EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/02/16 12:0 a.m.1 views

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a hacker to circumvent security restrictions.

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to circumvent security restrictions...

4.6CVSS7.6AI score0.00731EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/02/10 8:28 p.m.42 views

Path Traversal in Eclipse Vert

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0-milestone1, 4.0.0-milestone2, 4.0.0-milestone3, 4.0.0-milestone4, 4.0.0-milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...

9.8CVSS2.8AI score0.01977EPSS
Exploits0References10Affected Software1
Vulnrichment
Vulnrichment
added 2022/02/09 10:4 p.m.9 views

CVE-2021-33113

Improper input validation for some IntelR PROSet/Wireless WiFi in multiple operating systems and KillerTM WiFi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access...

7.9AI score0.00676EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/02/09 10:4 p.m.7 views

CVE-2021-0170

Exposure of Sensitive Information to an Unauthorized Actor in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow an authenticated user to potentially enable information disclosure via local access...

5.2AI score0.00285EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/02/09 10:4 p.m.8 views

CVE-2021-0172

Improper input validation in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

6.5AI score0.00507EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/02/09 10:4 p.m.5 views

CVE-2021-0168

Improper input validation in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access...

6.7AI score0.00306EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/02/09 10:4 p.m.6 views

CVE-2021-0166

Exposure of Sensitive Information to an Unauthorized Actor in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access...

6.7AI score0.00288EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/02/09 10:4 p.m.7 views

CVE-2021-0066

Improper input validation in firmware for IntelR PROSet/Wireless Wi-Fi in multiple operating systems and KillerTM Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via local access...

8.5AI score0.00316EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/02/07 12:0 a.m.3 views

The driver’s vulnerability related to the functionality of Storage Spaces controllers in Windows operating systems allows attackers to exploit it to increase their privileges. This vulnerability stems from errors in memory object handling.

The vulnerability of the driver for enabling Storage Spaces on Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.2AI score0.00491EPSS
Exploits0References4
Rows per page
Query Builder