Lucene search
+L

474 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 3:28 a.m.7 views

CVE-2018-17341

BigTree 4.2.23 on Windows, when Advanced or Simple Rewrite routing is enabled, allows remote attackers to bypass authentication via a ..\ substring, as demonstrated by a launch.php?bigtreehtaccessurl=admin/images/..\ URI...

8.1CVSS7.3AI score0.01939EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:57 p.m.14 views

CVE-2009-3097

Multiple unspecified vulnerabilities in HP Performance Insight 5.3 on Windows allow attackers to obtain sensitive information via unknown vectors, as demonstrated by certain modules in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However,...

7.8CVSS6.7AI score0.01665EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:25 p.m.10 views

CVE-2002-1858

Oracle Oracle9i Application Server 1.0.2.2 and 9.0.2 through 9.0.2.0.1, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...

5CVSS6.7AI score0.04534EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:23 p.m.9 views

CVE-2002-1779

The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 NPW does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 CVE-2000-0305...

7.8CVSS7AI score0.38358EPSS
SaveExploits1References1
Krebs on Security
Krebs on Security
added 2025/05/14 11:57 a.m.43 views

Patch Tuesday, May 2025 Edition

Microsoft on Tuesday released software updates to fix at least 70 vulnerabilities in Windows and related products, including five zero-day flaws that are already seeing active exploitation. Adding to the sense of urgency with this month's patch batch from Redmond are fixes for two other weaknesse...

7.8CVSS8AI score0.21228EPSS
SaveExploits11
OpenVAS
OpenVAS
added 2025/05/14 12:0 a.m.142 views

Microsoft Windows Multiple Vulnerabilities (KB5058383)

This host is missing an important security update according to Microsoft KB5058383 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS9.8AI score0.21228EPSS
SaveExploits9References3
OpenVAS
OpenVAS
added 2025/05/14 12:0 a.m.120 views

Microsoft Windows Multiple Vulnerabilities (KB5058379)

This host is missing an important security update according to Microsoft KB5058379 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS9.8AI score0.21228EPSS
SaveExploits10References3
OpenVAS
OpenVAS
added 2025/05/14 12:0 a.m.156 views

Microsoft Windows Multiple Vulnerabilities (KB5058392)

This host is missing an important security update according to Microsoft KB5058392 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS9.8AI score0.21228EPSS
SaveExploits10References3
OpenVAS
OpenVAS
added 2025/05/14 12:0 a.m.63 views

Microsoft Windows Multiple Vulnerabilities (KB5058405)

This host is missing an important security update according to Microsoft KB5058405 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS9.8AI score0.58338EPSS
SaveExploits10References3
OpenVAS
OpenVAS
added 2025/05/14 12:0 a.m.26 views

Microsoft Windows Multiple Vulnerabilities (KB5058387)

This host is missing a critical security update according to Microsoft KB5058387 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.8AI score0.21228EPSS
SaveExploits9References3
Kaspersky
Kaspersky
added 2025/05/13 12:0 a.m.26 views

KLA83567 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, execute arbitrary code, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. An informati...

8.8CVSS10AI score0.58338EPSS
SaveExploits10References64
Positive Technologies
Positive Technologies
added 2025/05/09 12:0 a.m.9 views

PT-2025-20562 · Avg · Avg Tuneup

Name of the Vulnerable Software and Affected Versions: AVG TuneUp version 24.2.16593.9844 Description: The issue allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging the service to delete a directory. This is...

7.8CVSS7AI score0.00184EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2025/04/28 12:0 a.m.11 views

The vulnerability of Windows operating systems relates to the use of memory after it is freed, allowing an attacker to increase their privileges.

Vulnerabilities of Windows operating systems are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow attackers to increase their privileges...

7.8CVSS7.6AI score0.00445EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2025/04/23 10:25 p.m.25 views

YoutubeDLSharp allows command injection on windows system due to non sanitized arguments

Summary This vulnerability only apply when running on a Windows OS. An unsafe conversion of arguments allows the injection of a malicous commands when starting yt-dlp from a commands prompt. !CAUTION NOTE THAT DEPENDING ON THE CONTEXT AND WHERE THE LIBRARY IS USED, THIS MAY HAVE MORE SEVERE...

9.2CVSS7.6AI score0.00236EPSS
SaveExploits0References5Affected Software1
OpenVAS
OpenVAS
added 2025/04/16 12:0 a.m.14 views

Oracle VirtualBox Security Update (Apr 2025) - Windows

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

8.1CVSS7.6AI score0.00581EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.11 views

The vulnerability of the MoTw mechanism in Microsoft Windows operating systems allows a hacker to circumvent security restrictions.

The vulnerability of the MoTe-Web mechanism in Microsoft Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass security restrictions from a remote location...

6.4CVSS7.7AI score0.01544EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2025/04/09 7:6 a.m.41 views

Microsoft Patches 126 Flaws Including Actively Exploited Windows CLFS Vulnerability

Microsoft has released security fixes to address a massive set of 126 flaws affecting its software products, including one vulnerability that it said has been actively exploited in the wild. Of the 126 vulnerabilities, 11 are rated Critical, 112 are rated Important, and two are rated Low in...

8.1CVSS8.5AI score0.48973EPSS
SaveExploits23
Krebs on Security
Krebs on Security
added 2025/04/09 3:9 a.m.31 views

Patch Tuesday, April 2025 Edition

Microsoft today released updates to plug at least 121 security holes in its Windows operating systems and software, including one vulnerability that is already being exploited in the wild. Eleven of those flaws earned Microsoft's most-dire "critical" rating, meaning malware or malcontents could...

8.1CVSS8.1AI score0.13475EPSS
SaveExploits6
OpenVAS
OpenVAS
added 2025/04/09 12:0 a.m.131 views

Microsoft Windows Multiple Vulnerabilities (KB5055519)

This host is missing an important security update according to Microsoft KB5055519 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS8.5AI score0.13475EPSS
SaveExploits7References4
OpenVAS
OpenVAS
added 2025/04/09 12:0 a.m.115 views

Microsoft Windows Multiple Vulnerabilities (KB5055521)

This host is missing an important security update according to Microsoft KB5055521 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS9.1AI score0.13475EPSS
SaveExploits7References4
Rows per page
Query Builder