Lucene search
+L

2815 matches found

CNVD
CNVD
•added 2020/04/16 12:00 a.m.•19 views

Microsoft Windows Push Notification Service Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems.Push Notification Service is one of the push notification services. An...

7.8CVSS7.1AI score0.00914EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/04/16 12:00 a.m.•16 views

Microsoft Windows Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system.Connected User Experiences and Telemetry Service is one of the components that can...

7.8CVSS7.2AI score0.00788EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/04/16 12:00 a.m.•17 views

Microsoft Windows Graphics Device Interface Information Disclosure Vulnerability (CNVD-2020-30654)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Graphics Device Interface GDI is one of the graphic device interfaces. An...

6.5CVSS6.2AI score0.05907EPSS
SaveExploits0References1
Krebs on Security
Krebs on Security
•added 2020/04/14 10:24 p.m.•255 views

Microsoft Patch Tuesday, April 2020 Edition

Microsoft today released updates to fix 113 security vulnerabilities in its various Windows operating systems and related software. Those include at least three flaws that are actively being exploited, as well as two others which were publicly detailed prior to today, potentially giving attackers...

7.6CVSS7.4AI score0.9981EPSS
SaveExploits129
Microsoft KB
Microsoft KB
•added 2020/04/09 12:00 a.m.•12 views

Compatibility update is available for Windows RT, Windows 8, and Windows Server 2012: September 2013

Compatibility update is available for Windows RT, Windows 8, and Windows Server 2012: September 2013 Summary This compatibility update improves the compatibility experience in Windows RT, Windows 8, and Windows Server 2012. Microsoft regularly releases Windows compatibility updates to improve the...

5.6AI score
SaveExploits0
OSV
OSV
•added 2020/04/08 7:15 p.m.•14 views

CVE-2020-1988

An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user with file creation privileges on the root of the OS disk C:\ or to Program Files directory to gain system privileges. This issue affects Palo Alto Networks GlobalProtect Agent 5...

6.7CVSS6.7AI score0.0037EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2020/03/30 8:14 a.m.•146 views

CVE-2019-0232

A flaw was discovered in Apache Tomcat, where a Java Runtime Environment can pass a command-line argument in the Windows operating system. The execution of arbitrary commands via Tomcat’s Common Gateway Interface CGI Servlet, allows an attacker to perform remote code execution...

9.3CVSS6.5AI score0.99923EPSS
SaveExploits11References2
BDU FSTEC
BDU FSTEC
•added 2020/03/25 12:00 a.m.•13 views

The vulnerability of the ActiveX Installer Service installation process on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the ActiveX Installer Service for operating systems running on Windows is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00846EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/03/25 12:00 a.m.•15 views

The vulnerability of the Windows Imaging Component (WIC) framework in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows Imaging Component WIC framework in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially created web page or document...

4.3CVSS6AI score0.06579EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/03/25 12:00 a.m.•16 views

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS6.6AI score0.01043EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/03/20 3:15 a.m.•11 views

CVE-2020-9345

An issue was discovered in signotec signoPAD-API/Web formerly Websocket Pad Server before 3.1.1 on Windows. It is possible to perform a Denial of Service attack because the application doesn't limit the number of opened WebSocket sockets. If a victim visits an attacker-controlled website, this...

6.5CVSS6.5AI score0.00916EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2020/03/20 12:00 a.m.•12 views

Vulnerability of Windows operating systems related to insecure privilege management, allowing attackers to execute arbitrary code

The vulnerability of the Windows operating system is related to the insecure management of privileges. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially crafted .LNK file...

9.3CVSS8.1AI score0.08964EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/03/20 12:00 a.m.•15 views

Vulnerability of Windows operating systems, related to improper handling of hard links, allows attackers to enhance their privileges and gain full control over the system.

The vulnerability of Windows operating systems is related to the incorrect handling of hard links. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain full control over the system through a specially created application...

7.8CVSS7.2AI score0.00727EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/03/20 12:00 a.m.•21 views

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of Windows GDI components in Windows operating systems is related to security flaws in the system’s mechanisms. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...

7.1CVSS6.1AI score0.05853EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/03/18 12:00 a.m.•15 views

The vulnerability of the Graphics Device Interface (GDI) component in Windows operating systems allows a hacker to gain full control over the system or execute arbitrary code.

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain full control over the system or execute arbitrary code using a specially created documen...

6.7CVSS7.5AI score0.16784EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/03/18 12:00 a.m.•16 views

Vulnerability of Windows operating systems, related to errors in handling hard links, allows attackers to escalate their privileges.

The vulnerability of Windows operating systems is related to errors in handling hard links. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS6.8AI score0.00876EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/03/18 12:00 a.m.•13 views

The vulnerability of the Graphics Device Interface (GDI) component in Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

4.7CVSS6AI score0.01719EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/03/18 12:00 a.m.•22 views

The vulnerability of the win32k component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the win32k component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7CVSS7.2AI score0.02244EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/03/18 12:00 a.m.•13 views

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS6.5AI score0.01013EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/03/18 12:00 a.m.•13 views

The vulnerability of the Graphics Device Interface (GDI) component in Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created document or a...

5.5CVSS6.1AI score0.06288EPSS
SaveExploits0References2
Rows per page
Query Builder