582 matches found
The vulnerability of the Windows Update Orchestrator Service component on the Windows operating system, which allows a malicious individual to escalate their privileges
The vulnerability of the Windows Update Orchestrator Service component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the remote desktop service for Windows operating systems allows attackers to disclose sensitive information.
The vulnerability of the remote desktop service for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...
CVE-2020-26966
Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak. Note: This issue only affected Windows operating systems. Other operating systems are unaffected.. This...
Peripherals Easy Test Tool
Peripherals Easy Test Tool v2.0 Created Date: Sep 10, 2015 Updated Date: Jun 14, 2016 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the...
CVE-2019-17640
In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...
Design/Logic Flaw
In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...
CVE-2019-17640
In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...
The vulnerability in the implementation of the TLS (Transport Layer Security) protocol for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the TLS Transport Layer Security protocol implementation in Windows operating systems is related to the use of weak hashing algorithms. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
CVE-2020-15663
If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to ...
The vulnerability of the Windows Text Service Module in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows Text Service Module in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to carry out spoofing attacks.
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to carry out spear-phishing attacks remotely...
The vulnerability of the DirectX component in Windows operating systems allows attackers to gain rights to install programs, view, modify, or delete data, as well as create new accounts with full user privileges.
The vulnerability of the DirectX component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to gain privileges to install programs, view, modify, or delete data, and create new user accounts with full user rights using a...
The vulnerability of the Win32k component in Windows operating systems, related to errors in memory object handling, allows attackers to exploit this to disclose protected information.
The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...
Security Vulnerabilities fixed in Firefox ESR 78.2 — Mozilla
If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to ...
Microsoft Windows and Microsoft Windows Server Information Disclosure Vulnerability (CNVD-2020-48269)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in RPC in Microsoft Windows and Microsoft...
The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems is related to improper handling of file system operations. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...
The vulnerability of the Windows Modules Installer Service in Microsoft Windows operating systems allows a hacker to exploit their privileges.
The vulnerability of the Windows Modules Installer Service in operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems is related to improper handling of file system operations. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Microsoft Internet Information Server (IIS) server allows for unauthorized access by attackers, enabling them to escalate their privileges. This vulnerability is related to the Windows Background Intelligent Transfer Service (BITS), which operates on Windows operating systems.
The vulnerability of the Microsoft Internet Information Server IIS server, due to the Windows Background Intelligent Transfer Service BITS, affects operating systems running on Windows. This vulnerability is related to file operation processing errors. Exploiting this vulnerability can allow an...