4912 matches found
CVE-2023-39143
PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. This leads to remote code execution when external device integration is enabled a very common configuration...
The vulnerability of the MSHTML platform in Windows operating systems allows attackers to circumvent security restrictions.
The vulnerability of the MSHTML platform in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
The vulnerability of the PostScript Printer Driver (Pscript) and PCL6 Class Printer operating systems for Windows allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the PostScript Printer Driver Pscript and PCL6 Class Printer operating systems for Windows is related to insufficient protection of operational data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability of the Remote Desktop Client on the Microsoft Windows operating system allows attackers to circumvent existing security restrictions.
The vulnerability of the Remote Desktop Client on the Microsoft Windows operating system relates to security configuration errors. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...
The vulnerability of the Windows operating system’s Layer-2 Bridge network driver allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Windows Layer-2 Bridge network driver is related to information disclosure. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Connected User Experiences and Telemetry operating system service allows attackers to enhance their privileges.
The vulnerability of the Connected User Experiences and Telemetry services in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the HTTP.sys driver on Windows operating systems, which allows a hacker to trigger a service failure
The vulnerability of the HTTP.sys driver in the Windows operating system is related to insufficient input validation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2023-32231
An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.818. During installation, binaries gets executed out of a subfolder in C:\Windows\Temp. A standard user can create the folder and path file ahead of time and obtain elevated code execution...
PT-2023-20474 · Atera · Atera Agent
Name of the Vulnerable Software and Affected Versions: Atera Agent versions 1.8.4.4 and prior Description: A privilege escalation issue was discovered due to the mishandling of privileged APIs. This issue affects Atera Agent on Windows. Recommendations: For Atera Agent versions 1.8.4.4 and prior,...
The vulnerability of the Remote Procedure Call (RPC) technology in Windows operating systems allows a perpetrator to trigger a service failure.
The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the Remote Procedure Call (RPC) technology in Windows operating systems allows a perpetrator to trigger a service failure.
The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
Exploit for CVE-2023-21746
It is an exploit module/toolkit targeting a vulnerability in a s...
CVE-2023-37849
A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via placing a crafted DLL file in the same directory as PANDAVPN.exe...
CVE-2023-37849
A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via placing a crafted DLL file in the same directory as PANDAVPN.exe...
CVE-2023-37849
A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via placing a crafted DLL file in the same directory as PANDAVPN.exe...
Vulnerabilities fixed in Citrix Secure Access Clients
Citrix has fixed vulnerabilities in the Secure Access Client for Windows and Ubuntu. The vulnerability with reference CVE-2023-24491 is located in the Windows client and allows a local malicious person to grant themselves elevated privileges and execute code with privileges of SYSTEM The...
The vulnerability of the SmartScreen security component, which prevents unauthorized access and malicious programs from being executed on Windows operating systems, allows attackers to circumvent security restrictions.
The vulnerability of the SmartScreen security component against phishing and malicious programs in Windows operating systems is related to errors in security settings. Exploiting this vulnerability allows a remote attacker to circumvent security restrictions by accessing a specially crafted...
CVE-2023-35331
Windows Local Security Authority LSA Denial of Service Vulnerability...