Lucene search
+L

582 matches found

CNNVD
CNNVD
added 2022/04/12 12:0 a.m.10 views

Microsoft Windows Local Security Authority Subsystem Service 输入验证错误漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

8.8CVSS8.2AI score0.02143EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/04/12 12:0 a.m.12 views

PT-2022-2872 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Win32 Stream Enumeration component of Windows operating systems. This allows remote attackers to execute arbitrary code a...

7.6CVSS7.7AI score0.01644EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2022/04/05 12:0 a.m.7 views

Samsung portable SSD T5 PC代码问题漏洞

Samsung portable SSD T5 PC is an official software for hard disks from Samsung South Korea. A security vulnerability exists in Samsung portable SSD T5 PC software prior to version 1.6.9, which originates from a DLL hijacking vulnerability that can be exploited by a local attacker to escalate...

7.3CVSS7.4AI score0.00235EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/03/08 12:0 a.m.26 views

Microsoft Windows HTML Platform 安全特征问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows HTML Platform due to a security feature issue. The following products and versions are affected: Windows 7 for 32-bit Systems Service Pack...

6.5CVSS6.5AI score0.33063EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/03/08 12:0 a.m.10 views

Microsoft Windows Point-to-Point Tunneling Protocol 输入验证错误漏洞

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft that enables the secure transmission of data from remote clients to private corporate servers by creating a virtual private network VPN over a TCP/IP-based data network. VPN. An input validation error...

6.5CVSS6.9AI score0.56376EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2022/03/01 12:0 a.m.14 views

The vulnerability of Windows Mobile Device Management for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of Windows Mobile Device Management for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

5.5CVSS6.9AI score0.00656EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:0 a.m.14 views

The vulnerability of Windows Mobile Device Management for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of Windows Mobile Device Management for Windows operating systems is related to improper code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.02496EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/02/16 12:0 a.m.17 views

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a hacker to circumvent security restrictions.

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to circumvent security restrictions...

4.6CVSS7.6AI score0.00731EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/02/10 8:28 p.m.54 views

Path Traversal in Eclipse Vert

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0-milestone1, 4.0.0-milestone2, 4.0.0-milestone3, 4.0.0-milestone4, 4.0.0-milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...

9.8CVSS2.8AI score0.02002EPSS
SaveExploits0References10Affected Software1
Vulnrichment
Vulnrichment
added 2022/02/09 10:4 p.m.9 views

CVE-2021-33113

Improper input validation for some IntelR PROSet/Wireless WiFi in multiple operating systems and KillerTM WiFi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access...

7.9AI score0.00687EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/02/09 10:4 p.m.8 views

CVE-2021-0170

Exposure of Sensitive Information to an Unauthorized Actor in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow an authenticated user to potentially enable information disclosure via local access...

5.2AI score0.00289EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/02/09 10:4 p.m.9 views

CVE-2021-0172

Improper input validation in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

6.5AI score0.00515EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/02/09 10:4 p.m.6 views

CVE-2021-0168

Improper input validation in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access...

6.7AI score0.00311EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/02/09 10:4 p.m.7 views

CVE-2021-0166

Exposure of Sensitive Information to an Unauthorized Actor in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access...

6.7AI score0.00293EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/02/09 10:4 p.m.8 views

CVE-2021-0066

Improper input validation in firmware for IntelR PROSet/Wireless Wi-Fi in multiple operating systems and KillerTM Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via local access...

8.5AI score0.00321EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/02/07 12:0 a.m.14 views

The driver’s vulnerability related to the functionality of Storage Spaces controllers in Windows operating systems allows attackers to exploit it to increase their privileges. This vulnerability stems from errors in memory object handling.

The vulnerability of the driver for enabling Storage Spaces on Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.2AI score0.00564EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.14 views

The vulnerability of the Active Directory Federation Services (AD FS) for Windows operating systems allows a perpetrator to circumvent security restrictions and enhance their privileges.

The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and increase their privileges...

8.5CVSS7.7AI score0.0239EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.10 views

The vulnerability of the HTTP Protocol Stack of Microsoft Windows operating systems arises from the possibility of operations going beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the HTTP Protocol Stack in Microsoft Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

10CVSS8.7AI score0.9279EPSS
SaveExploits21References4
CNNVD
CNNVD
added 2022/01/11 12:0 a.m.10 views

Microsoft Graphics Component 安全漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. The following products and versions are affected:Windows 10 for 32-bit Systems,Windows 10 for x64-based Systems,Windows 10 Version 1607 for...

7.5CVSS7.6AI score0.035EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/01/11 12:0 a.m.9 views

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows AppContracts API Server with privilege license and access control issues. The following products and editions are affected:Windows 10 Version...

7CVSS7.3AI score0.00772EPSS
SaveExploits0References4
Rows per page
Query Builder