Lucene search
+L

23507 matches found

CNNVD
CNNVD
•added 2022/09/13 12:00 a.m.•26 views

Microsoft Graphics Component security vulnerabilities

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...

6.5CVSS7AI score0.02296EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/09/13 12:00 a.m.•27 views

Microsoft Windows Kernel security vulnerabilities

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Kernel. The following products and versions are affected: Windows 10 Version 20H2 for 32-bit Systems,Windows 10 Version 20H2 for ARM64-base...

7.8CVSS7.6AI score0.01344EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2022/09/13 12:00 a.m.•65 views

KB5017305: Windows 10 Version 1607 and Windows Server 2016 Security Update (September 2022)

The remote Windows host is missing security update 5017305. It is, therefore, affected by multiple vulnerabilities - Windows Photo Import API Elevation of Privilege Vulnerability CVE-2022-26928 - Windows Credential Roaming Service Elevation of Privilege Vulnerability CVE-2022-30170 - Windows...

9.8CVSS7.2AI score0.86026EPSS
SaveExploits13References44
Tenable Nessus
Tenable Nessus
•added 2022/09/13 12:00 a.m.•105 views

KB5017315: Windows 10 version 1809 / Windows Server 2019 Security Update (September 2022)

The remote Windows host is missing security update 5017315. It is, therefore, affected by multiple vulnerabilities - Windows Photo Import API Elevation of Privilege Vulnerability CVE-2022-26928 - Windows Credential Roaming Service Elevation of Privilege Vulnerability CVE-2022-30170 - Windows Secu...

9.8CVSS7.1AI score0.86026EPSS
SaveExploits13References46
Tenable Nessus
Tenable Nessus
•added 2022/09/13 12:00 a.m.•85 views

KB5017373: Windows Server 2008 R2 Security Update (September 2022)

The remote Windows host is missing security update 5017373. It is, therefore, affected by multiple vulnerabilities - Windows Credential Roaming Service Elevation of Privilege Vulnerability CVE-2022-30170 - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

9.8CVSS7.2AI score0.86026EPSS
SaveExploits13References41
Tenable Nessus
Tenable Nessus
•added 2022/09/13 12:00 a.m.•77 views

KB5017377: Windows Server 2012 Security Update (September 2022)

The remote Windows host is missing security update 5017377. It is, therefore, affected by multiple vulnerabilities - Windows Credential Roaming Service Elevation of Privilege Vulnerability CVE-2022-30170 - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

9.8CVSS7.2AI score0.86026EPSS
SaveExploits13References40
CNNVD
CNNVD
•added 2022/09/13 12:00 a.m.•57 views

Microsoft Windows security vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows Credential Roaming Service. The following products and versions are affected:Windows 10 Version 1809 for 32-b...

7.3CVSS7.7AI score0.01633EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2022/09/07 12:30 p.m.•40 views

Coercer - A Python Script To Automatically Coerce A Windows Server To Authenticate On An Arbitrary Machine Through 9 Methods

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods. Features Automatically detects open SMB pipes on the remote machine. Calls one by one all the vulnerable RPC functions to coerce the server to authenticate on an arbitrary machine...

8AI score
SaveExploits0References1
Metasploit
Metasploit
•added 2022/09/01 7:50 p.m.•283 views

ManageEngine ADAudit Plus Xnode Enumeration

This module exploits default admin credentials for the DataEngine Xnode server in ADAudit Plus versions prior to 6.0.3 6032 in order to dump the contents of Xnode data repositories tables, which may contain a limited amount of Active Directory information including domain names, host names,...

10CVSS9.1AI score0.77477EPSS
SaveExploits7
Metasploit
Metasploit
•added 2022/09/01 7:50 p.m.•262 views

ManageEngine DataSecurity Plus Xnode Enumeration

This module exploits default admin credentials for the DataEngine Xnode server in DataSecurity Plus versions prior to 6.0.1 6011 in order to dump the contents of Xnode data repositories tables, which may contain a limited amount of Active Directory information including domain names, host names,...

10CVSS9.1AI score0.77477EPSS
SaveExploits7
Microsoft KB
Microsoft KB
•added 2022/08/31 12:00 a.m.•92 views

KB5017221: Update for the Extended Security Updates Licensing Preparation Package for Windows Server 2012

KB5017221: Update for the Extended Security Updates Licensing Preparation Package for Windows Server 2012 Introduction This update provides an additional set of licensing changes to enable installation of the ESU add-on key. This is one of the steps to prepare for installation of Extended Securit...

7.2AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2022/08/31 12:00 a.m.•216 views

KB5017220: Update for the Extended Security Updates Licensing Preparation Package for Windows Server 2012 R2

KB5017220: Update for the Extended Security Updates Licensing Preparation Package for Windows Server 2012 R2 Introduction This update provides an additional set of licensing changes to enable installation of the ESU add-on key. This is one of the steps to prepare for installation of Extended...

7.2AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2022/08/26 12:00 a.m.•22 views

August 26, 2022-KB5016592 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10, version 20H2, Windows Server, version 20H2, Windows 10 Version 21H1, and Windows 10 Version 21H2

None None...

6.1AI score
SaveExploits0
Citrix
Citrix
•added 2022/08/24 12:00 a.m.•91 views

PVS 1912CU5 on Windows 2012 R2 with KB501874: The specified AuthGroup does not exist

PVS console fails to login with error: "The specified AuthGroup does not exist"...

7.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2022/08/24 12:00 a.m.•142 views

KB5016892: Update for the Extended Security Updates Licensing Preparation Package for Windows Server 2008 R2 SP1

KB5016892: Update for the Extended Security Updates Licensing Preparation Package for Windows Server 2008 R2 SP1 Introduction This update provides an additional set of licensing changes to enable installation of the ESU add-on key. This is one of the steps to prepare for installation of Extended...

5.9AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2022/08/24 12:00 a.m.•41 views

KB5016891: Update for the Extended Security Updates Licensing Preparation Package for Windows Server 2008 SP2

KB5016891: Update for the Extended Security Updates Licensing Preparation Package for Windows Server 2008 SP2 Introduction This update provides an additional set of licensing changes to enable installation of the ESU add-on key. This is one of the steps to prepare for installation of Extended...

7.2AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2022/08/16 12:00 a.m.•16 views

August 16, 2022-KB5016595 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2

None None...

6.1AI score
SaveExploits0
Talos
Talos
•added 2022/08/16 12:00 a.m.•51 views

Microsoft DirectComposition CCompositionSurfaceBitmapMarshaler null pointer dereference vulnerability

Talos Vulnerability Report TALOS-2022-1514 Microsoft DirectComposition CCompositionSurfaceBitmapMarshaler null pointer dereference vulnerability August 16, 2022 CVE Number CVE-2022-40732 SUMMARY An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver...

7.5CVSS5.9AI score0.00766EPSS
SaveExploits1
CNNVD
CNNVD
•added 2022/08/15 12:00 a.m.•21 views

Microsoft Windows Defender security vulnerabilities

Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Defender Credential Guard, which can be exploited by an attacker to gain system privileges, affecting the following...

7.8CVSS7.3AI score0.00816EPSS
SaveExploits0References6
Akamai Blog
Akamai Blog
•added 2022/08/13 8:00 a.m.•188 views

CVE-2022-30216 - Authentication coercion of the Windows ?Server? service

In this blog, see how an off-by-one error could lead to domain controller access in Microsoft Server Service...

3.3AI score0.88617EPSS
SaveExploits0
Rows per page
Query Builder