Lucene search
+L

4902 matches found

CNNVD
CNNVD
added 2022/07/12 12:0 a.m.30 views

Microsoft Windows 代码问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A code issue vulnerability exists in the Microsoft Windows Client/Server Runtime Subsystem. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

7.8CVSS8.1AI score0.17087EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/07/12 12:0 a.m.2 views

PT-2022-4305 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass the authentication process. It is a security-feature bypass vulnerability that enables attacker...

6.6CVSS6.7AI score0.00759EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2022/07/11 12:0 a.m.10 views

The vulnerability of the Remote Desktop Protocol Client protocol on the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the Remote Desktop Protocol Client on the Windows operating system is related to the disclosure of information in the erroneous data field. Exploiting this vulnerability allows a malicious actor to disclose the protected information from a remote location...

7.8CVSS7AI score0.02439EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/07/08 12:0 a.m.13 views

The vulnerability of the Remote Desktop Protocol Client protocol on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Remote Desktop Protocol Client on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.2AI score0.37987EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/06 12:0 a.m.9 views

Elastic 安全漏洞

Elastic is the Netherlands Elastic company's set of open source distributed RESTful search engine built on Lucene . The product is primarily used in cloud computing and supports data indexing using JSON over HTTP. A security vulnerability exists in Elastic Endpoint Security for Windows. An attack...

7.8CVSS7.4AI score0.00231EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.11 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.06292EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.9 views

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Local Security Authority Subsystem Service LSASS in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.3AI score0.01389EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/06/28 12:0 a.m.8 views

Cloudflare WARP 后置链接漏洞

Cloudflare WARP Cloudflare Vpn is a client application for secure connections from Cloudflare Inc. in the United States. A backlink vulnerability exists in Cloudflare WARP client for Windows versions prior to 2022.5.309.0, which stems from a vulnerability that allows the creation of a mount point...

7.8CVSS7.4AI score0.00294EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/06/28 12:0 a.m.7 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox that originates in the ms-mddt, search, and search-ms protocols in Windows Firefox's applications that pass content to Microsoft applications could le...

6.5CVSS7.7AI score0.00783EPSS
SaveExploits1References17
Snyk
Snyk
added 2022/06/24 10:17 a.m.0 views

Remote Code Execution (RCE)

Overview diffy is a Convenient diffing gem in ruby. Affected versions of this package are vulnerable to Remote Code Execution RCE. The function that calls the diff tool does not properly handle double quotes in a filename when run in a windows environment. This allows attackers to execute arbitra...

9.8CVSS8AI score0.01705EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/06/23 12:0 a.m.8 views

Cloudflare Warp 代码问题漏洞

Cloudflare Warp Cloudflare Vpn is a client application for secure connections from the American company Cloudflare. A security vulnerability exists in Cloudflare Warp for Windows version 2022.2.95.0. An attacker could exploit the vulnerability to execute arbitrary code leading to elevation of...

7.8CVSS8.1AI score0.00263EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/17 12:0 a.m.11 views

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Local Security Authority Subsystem Service LSASS in Windows operating systems is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.6AI score0.00764EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/17 12:0 a.m.12 views

The vulnerability of the Desktop Bridge application converter for Windows operating systems allows a hacker to escalate their privileges.

The vulnerability of the Desktop Bridge application converter for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.3AI score0.00609EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/17 12:0 a.m.8 views

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Windows operating system allows a hacker to bypass security restrictions and increase their privileges.

The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to bypass security restrictions and increase their privileges...

7.8CVSS7.3AI score0.00609EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/06/17 12:0 a.m.54 views

EulerOS 2.0 SP5 : git (EulerOS-SA-2022-1888)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where...

7.8CVSS7.4AI score0.00782EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/06/15 10:15 p.m.5 views

CVE-2022-30152

Windows Network Address Translation NAT Denial of Service Vulnerability...

7.5CVSS7.1AI score0.02671EPSS
SaveExploits0References3Affected Software25
ATTACKERKB
ATTACKERKB
added 2022/06/15 10:15 p.m.3 views

CVE-2022-30161

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

8.8CVSS7.4AI score0.02333EPSS
SaveExploits0References3Affected Software25
ATTACKERKB
ATTACKERKB
added 2022/06/15 10:15 p.m.4 views

CVE-2022-30160

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

7.8CVSS7.1AI score0.06292EPSS
SaveExploits0References3Affected Software25
OSV
OSV
added 2022/06/15 8:15 p.m.5 views

CVE-2021-25261

Local privilege vulnerability in Yandex Browser for Windows prior to 22.5.0.862 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process...

7.8CVSS5.9AI score0.00466EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/06/15 12:0 a.m.9 views

Yandex Browser 安全漏洞

Yandex Browser is a desktop version of the web browser from the Russian company Yandex. A security vulnerability exists in Yandex Browser for Windows prior to 22.3.3.684, which originates from a vulnerability that could allow a local, low-privilege attacker to execute arbitrary code with SYSTEM...

7.8CVSS7.9AI score0.00373EPSS
SaveExploits0References2
Rows per page
Query Builder