Lucene search
+L

2815 matches found

Positive Technologies
Positive Technologies
•added 2021/07/13 12:00 a.m.•7 views

PT-2021-5647

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to insufficient protection of internal data in the GDI+ graphics library of Microsoft Windows operating systems. This can allow an attacker to gain unauthorized...

5.5CVSS5.4AI score0.0088EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2021/07/02 12:00 a.m.•11 views

Vulnerability of Windows operating systems related to insecure management of privileges, allowing attackers to escalate their privileges

Vulnerabilities of Windows operating systems are related to insecure management of privileges. Exploiting these vulnerabilities can allow attackers, who operate remotely, to enhance their privileges...

9.3CVSS7.8AI score0.85305EPSS
SaveExploits64References5
Prion
Prion
•added 2021/06/29 6:15 p.m.•29 views

Design/Logic Flaw

The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace...

7.2CVSS7.5AI score0.00251EPSS
SaveExploits0References2Affected Software4
NVD
NVD
•added 2021/06/24 2:15 p.m.•20 views

CVE-2021-29951

The Mozilla Maintenance Service granted SERVICESTART access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop the service. This could be used to prevent the browser update service from operating if an attacker spammed the 'Stop' command; but also...

6.5CVSS0.01852EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2021/06/24 2:15 p.m.•35 views

CVE-2021-29951

The Mozilla Maintenance Service granted SERVICESTART access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop the service. This could be used to prevent the browser update service from operating if an attacker spammed the 'Stop' command; but also...

6.5CVSS6.6AI score0.01852EPSS
SaveExploits0References3
Prion
Prion
•added 2021/06/24 2:15 p.m.•27 views

Command injection

The Mozilla Maintenance Service granted SERVICESTART access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop the service. This could be used to prevent the browser update service from operating if an attacker spammed the 'Stop' command; but also...

6.4CVSS5.9AI score0.01852EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
•added 2021/06/18 12:00 a.m.•15 views

The vulnerability of NFS servers in Microsoft Windows systems, which allows a hacker to gain unauthorized access to protected information

The vulnerability of NFS servers on Microsoft Windows operating systems is related to security flaws in the handling of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

7.8CVSS7.1AI score0.03659EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/06/18 12:00 a.m.•14 views

The vulnerability of NFS servers in Microsoft Windows systems, which allows a hacker to gain unauthorized access to protected information

The vulnerability of NFS servers on Microsoft Windows operating systems is related to security flaws in the handling of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

7.8CVSS7.1AI score0.03659EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/06/17 12:00 a.m.•113 views

Mozilla Thunderbird Permissions and Access Control Issues Vulnerability

Mozilla Thunderbird is an open source email client. Mozilla Thunderbird is vulnerable to permission permission and access control issues, which stem from the way Mozilla maintenance services are installed on the Windows operating system. No detailed vulnerability details are currently available...

6.5CVSS3AI score0.01852EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/06/16 12:00 a.m.•20 views

The vulnerability of the ntoskrnl.exe file in Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ntoskrnl.exe file in operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS7.1AI score0.81107EPSS
SaveExploits2References4
BDU FSTEC
BDU FSTEC
•added 2021/06/16 12:00 a.m.•12 views

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a hacker to carry out an attack using a spoofing technique.

The vulnerability of Remote Desktop Services RDS for Windows operating systems is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.2AI score0.03179EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/06/16 12:00 a.m.•16 views

The vulnerability of the Intune management extension for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Intune management extension for Windows operating systems is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8AI score0.02526EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/06/16 12:00 a.m.•22 views

The vulnerability of the ntfs.sys driver in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the ntfs.sys driver in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS7.8AI score0.22273EPSS
SaveExploits4References5
BDU FSTEC
BDU FSTEC
•added 2021/06/15 12:00 a.m.•17 views

The vulnerability of the Microsoft Enhanced Cryptographic Provider on Microsoft Windows operating systems allows attackers to enhance their privileges.

The vulnerability of Microsoft’s Enhanced Cryptographic Provider on Microsoft Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.02954EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/06/15 12:00 a.m.•20 views

The vulnerability of the Microsoft Enhanced Cryptographic Provider on Microsoft Windows operating systems allows attackers to enhance their privileges.

The vulnerability of Microsoft’s Enhanced Cryptographic Provider on Microsoft Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.02617EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/06/08 11:15 p.m.•11 views

CVE-2021-31970

Windows TCP/IP Driver Security Feature Bypass Vulnerability...

5.5CVSS6.2AI score0.00859EPSS
SaveExploits0References3Affected Software18
Positive Technologies
Positive Technologies
•added 2021/06/08 12:00 a.m.•10 views

PT-2021-3288 · Microsoft · Intune Management Extension

Name of the Vulnerable Software and Affected Versions: Microsoft Intune Management Extension affected versions not specified Description: The issue is related to privilege management errors in the Intune management extension for Windows operating systems. Exploitation of this issue may allow a...

10CVSS8.5AI score0.02526EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/06/08 12:00 a.m.•21 views

Microsoft Windows Codecs Library 代码注入漏洞

Microsoft Windows is a desktop operating system from the U.S. company Microsoft. A security vulnerability exists in the Microsoft Windows Codecs Library. The following products and versions are affected:VP9 Video Extensions,...

8.8CVSS7.3AI score0.0253EPSS
SaveExploits0References3
ICS
ICS
•added 2021/06/08 12:00 a.m.•72 views

Schneider Electric IGSS

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Schneider Electric Equipment: IGSS Interactive Graphical SCADA System Vulnerabilities: Out-of-bounds Write, Out-of-bounds Read, Access of Uninitialized Pointer, Use After Free, Release of Invalid Pointer or Reference,...

7.8CVSS8.6AI score0.01395EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2021/06/02 12:00 a.m.•19 views

The vulnerability of the Remote Desktop Protocol (RDP) implementation on Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Remote Desktop Protocol RDP implementation on Microsoft Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.5CVSS7.6AI score0.02966EPSS
SaveExploits0References4
Rows per page
Query Builder