GHSA-3V63-F83X-37X4 Improper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQ

Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors...

Vulnerability fixed in Check Point Endpoint Security Client

Check Point has fixed a vulnerability in Check Point Endpoint Security Client for Windows. A local malicious agent could exploit the vulnerability to obtain elevated privileges and then execute arbitrary code under those privileges. To do so, the malicious party must place rogue files in a...

CVE-2022-23742

Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links...

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Failover Cluster component for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Failover Cluster component for Windows operating systems is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Remote Access Connection Manager service for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Remote Access Connection Manager service for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Remote Access Connection Manager service for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Remote Access Connection Manager service for Windows operating systems is related to the disclosure of information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software for Windows operating systems allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software for Windows operating systems is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

CVE-2022-29128

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

CVE-2022-29129

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

CVE-2022-29103

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability...

CVE-2022-26933

Windows NTFS Information Disclosure Vulnerability...

CVE-2022-23270

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability...

CVE-2022-22016

Windows PlayToManager Elevation of Privilege Vulnerability...

EUVD-2022-33551

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

CVE-2022-29128

Technical details for CVE-2022-29128 (affected product/version, root cause, impact, or fix) are not provided in the connected documents. The sources reference general LDAP RCE concerns and Windows updates, but no concrete vulnerability specifics. Monitor for updates.

CVE-2022-26925 Windows LSA Spoofing Vulnerability

...

PT-2022-2645 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource, specifically a "race condition" in the Storage Spaces Direct feature of the Microsoft Windows operating syste...

PT-2022-2651 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass the authentication process. This security-feature bypass vulnerability can affect the system...

Microsoft Lightweight Directory Access Protocol 输入验证错误漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation. Microsoft Windows LDAP is vulnerable to remote code execution, which can be exploited by attackers to execute code on the target host...