1685 matches found
CVE-2022-48482
3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electron/download directory traversal. Files may have credentials, full backups, call recordings, and chat logs...
CVE-2023-2282
Improper access control in the Web Login listener in Devolutions Remote Desktop Manager 2023.1.22 and earlier on Windows allows an authenticated user to bypass administrator-enforced Web Login restrictions and gain access to entries via an unexpected vector...
CVE-2023-28124
Improper usage of symmetric encryption in UI Desktop for Windows Version 0.59.1.71 and earlier could allow users with access to UI Desktop configuration files to decrypt their content.This vulnerability is fixed in Version 0.62.3 and later...
Fortinet FortiClientWindows Path Traversal Vulnerability
Fortinet FortiClientWindows is a Windows-based mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. Fortinet FortiClientWindows suffers...
CVE-2023-28229
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...
CVE-2023-28266 Windows Common Log File System Driver Information Disclosure Vulnerability
...
CVE-2023-28235 Windows Lock Screen Security Feature Bypass Vulnerability
...
Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability
...
Windows Bluetooth Driver Remote Code Execution Vulnerability
...
Windows Enroll Engine Security Feature Bypass Vulnerability
...
Windows Secure Channel Denial of Service Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Automating Citrix Probe Agent Installation and Configuration
Purpose This article contains instructions on using PowerShell to automate the installation and configuration of Citrix Probe Agent. The PowerShell script can be downloaded from this page. The same script can also be used to update the configured values for an existing installation of Probe Agent...
CVE-2023-1412
An unprivileged non-admin user can exploit an Improper Access Control vulnerability in the Cloudflare WARP Client for Windows = 2022.12.582.0 to perform privileged operations with SYSTEM context by working with a combination of opportunistic locks oplock and symbolic links which can both be creat...
Windows 11 and 10’s Snipping Tools Vulnerable to Data Exposure
By Waqas Microsoft has stated that they are aware of the issue and are investigating, adding that they will take action to help keep customers protected. This is a post from HackRead.com Read the original post: Windows 11 and 10s Snipping Tools Vulnerable to Data Exposure...
The vulnerability of the SmartScreen security component, which prevents unauthorized access and malicious programs from being executed on Windows operating systems, allows attackers to circumvent security restrictions.
The vulnerability of the SmartScreen security component against phishing and malicious programs in Windows operating systems is related to errors in security settings. Exploiting this vulnerability allows a remote attacker to circumvent security restrictions by downloading specially created malwa...
CVE-2023-24861
Windows Graphics Component Elevation of Privilege Vulnerability...