Exploit for Uncontrolled Search Path Element in Nodejs Node.Js

CVE-2022-32223 Source files for generating a demonstration ex...

CVE-2022-37989

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

CVE-2022-37989

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

CVE-2022-37994

Windows Group Policy Preference Client Elevation of Privilege Vulnerability...

CVE-2022-38032

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability...

CVE-2022-38044 Windows CD-ROM File System Driver Remote Code Execution Vulnerability

...

PT-2022-5496 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Local Security Authority Subsystem Service LSASS and involves incorrect cleanup or release of resources. This can be exploited by a remote attacker to cause a...

PT-2022-5467 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Advanced Local Procedure Call ALPC handler of the Windows operating system. This can allow an attacker to...

PT-2022-5634 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in the Windows GDI component, allowing remote attackers to execute arbitrary code. This can affect the system, potentially leading to unauthorized...

PT-2022-5295 · Microsoft · Windows Active Directory Domain Services +1

Name of the Vulnerable Software and Affected Versions: Windows Active Directory Domain Services affected versions not specified Description: The issue is related to insufficient access restrictions in the Active Directory Domain Services of the Windows operating system. It allows a remote attacke...

Microsoft Windows Security Support Provider Interface 安全漏洞

Microsoft Windows is an operating system for personal devices from Microsoft Corporation USA. An attacker could exploit the vulnerability to gain access to sensitive information...

PT-2022-5643 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a spoofing vulnerability in the NTLM protocol of the Windows operating system, allowing attackers to bypass authentication through spoofing. This can enable a remote...

PT-2022-5427 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Local Security Authority LSA component, which can be exploited to elevate privileges. This allows an attacker to affe...

VulnCheck KEV: CVE-2022-41033

Microsoft Windows COM+ Event System Service contains an unspecified vulnerability that allows for privilege escalation...

Microsoft Windows Point-to-Point Tunneling Protocol 竞争条件问题漏洞

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft that enables the secure transmission of data from remote clients to private corporate servers by creating a virtual private network VPN over a TCP/IP-based data network. VPN. A competitive conditions iss...

Microsoft Client Server Run-time Subsystem (CSRSS) 安全漏洞

Microsoft Client Server Run-time Subsystem is a client/server run-time subsystem from Microsoft Corporation of the United States, manifested as the csrss.exe process. It is a component of the Windows NT operating system family, appearing in Windows NT 3.1 and later systems, providing the user mod...

PT-2022-5368 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Point-to-Point Tunneling Protocol PPTP in Microsoft Windows. This can allow a...

PT-2022-5405 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Point-to-Point Tunneling Protocol PPTP in Microsoft Windows. This can be exploite...

Microsoft Windows 安全漏洞

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA.An elevation of privilege vulnerability exists in the Microsoft Windows COM Event System Service, which stems from improper privilege assignment in applications and can be exploited by attackers to...

PT-2022-5374 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Microsoft Security Support Provider Interface SSPI in the Windows operating system, which is associated with access control weaknesses...