Lucene search
+L

4902 matches found

CNNVD
CNNVD
added 2021/07/07 12:0 a.m.7 views

Iobit IOBit Advanced SystemCare 访问控制错误漏洞

Advanced SystemCare Ultimate is a Windows optimization suite from Iobit that analyzes system performance bottlenecks. advanced SystemCare Ultimate version 14.2.0.220 contains an elevation of privilege vulnerability. An attacker can exploit the vulnerability by sending a malicious I/O request pack...

8.8CVSS5.6AI score0.00295EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/07/02 12:0 a.m.5 views

Microsoft Windows 安全漏洞

Microsoft Windows is an operating system for personal devices from Microsoft Corporation USA. Microsoft Windows is vulnerable to an access control error, which stems from an elevation of privilege vulnerability because the system has an overly loose access control list for multiple system files. ...

7.8CVSS6AI score0.67252EPSS
SaveExploits11References8
NCSC
NCSC
added 2021/07/02 12:0 a.m.14 views

Vulnerability found in Microsoft Windows

There is a vulnerability in the Printer Spooler service from Microsoft. The vulnerability allows an authenticated malicious person able to execute arbitrary code and obtain elevated privileges. obtain. By exploiting the vulnerability, it is possible to take over a Domain Controller. Earlier this...

10CVSS7.3AI score0.99759EPSS
SaveExploits77
ATTACKERKB
ATTACKERKB
added 2021/06/24 8:15 p.m.4 views

CVE-2021-35448

Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by using the Image Transfer Folder feature to navigate to cmd.exe. It binds to local ports to listen for incoming connections...

7.8CVSS7.3AI score0.01045EPSS
SaveExploits2References4
Prion
Prion
added 2021/06/24 2:15 p.m.24 views

Out-of-bounds

A locally-installed hostile program could send WMCOPYDATA messages that Firefox would process incorrectly, leading to an out-of-bounds read. This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Thunderbird 78.11, Firefox 89, and Firefox ESR...

5.8CVSS6.6AI score0.00787EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:0 a.m.8 views

The vulnerability of the dynamically linked script handler library (jscript9.dll) in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the dynamically linked script handler library jscript9.dll in Microsoft Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.8CVSS7.7AI score0.0923EPSS
SaveExploits0References4
NCSC
NCSC
added 2021/06/17 12:0 a.m.15 views

Vulnerabilities fixed in Cisco Jabber for Windows

Vulnerabilities have been fixed in Cisco Jabber for Windows. A malicious party could exploit the vulnerabilities to obtain sensitive information or to cause a denial-of-service to the recipient of a specially prepared XMPP message. Cisco has released updates to fix the vulnerabilities. For more...

6.5CVSS6.8AI score0.00796EPSS
SaveExploits0
CNVD
CNVD
added 2021/06/17 12:0 a.m.11 views

Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability (CNVD-2021-45151)

The Cisco AnyConnect Secure Mobility Client is a virtual private network VPN client for a variety of operating systems and hardware configurations. A denial of service vulnerability exists in Cisco AnyConnect Secure Mobility Client for Windows versions prior to 4.10.01075. The vulnerability stems...

5.5CVSS6.5AI score0.00208EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2021/06/16 5:23 p.m.59 views

CVE-2021-34551

PHPMailer before 6.5.0 on Windows allows remote code execution if langpath is untrusted data and has a UNC pathname...

8.1CVSS8.4AI score0.02803EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/06/16 12:0 a.m.3 views

PT-2021-4650 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to an integer overflow in the storport.sys driver component, which provides functionality for Storage Spaces in Microsoft Windows operating systems. This can ...

7.8CVSS7.4AI score0.00807EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2021/06/16 12:0 a.m.7 views

Cisco AnyConnect Secure Mobility Client 安全漏洞

The Cisco AnyConnect Secure Mobility Client is a virtual private network VPN client for a variety of operating systems and hardware configurations. A denial of service vulnerability exists in Cisco AnyConnect Secure Mobility Client for Windows versions prior to 4.10.01075. The vulnerability stems...

5.5CVSS5.7AI score0.00208EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/06/16 12:0 a.m.5 views

PT-2021-3319 · Cisco · Cisco Anyconnect Secure Mobility Client For Windows

Name of the Vulnerable Software and Affected Versions: Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description: A vulnerability in the DLL loading mechanism could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device...

7CVSS6.6AI score0.00178EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/06/16 12:0 a.m.7 views

The vulnerability of the Group Policy Services in the Windows operating system allows a perpetrator to increase their privileges.

The vulnerability of the Windows Group Policy Services relates to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.1AI score0.0055EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/06/16 12:0 a.m.11 views

The vulnerability in the implementation of the network authentication protocol NT LAN Manager (NTLM) on Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Windows operating system’s Network Authentication Protocol NTLM implementation is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to elevate their privileges remotely...

10CVSS7.1AI score0.0266EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/06/11 12:0 a.m.9 views

AMD Graphics Driver 输入验证错误漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver suffers from a security vulnerability that stems from an insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10, which could lead to privilege escalation or denial of service...

7.8CVSS7.3AI score0.00261EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2021/06/08 10:46 p.m.12 views

CVE-2021-33742 Windows MSHTML Platform Remote Code Execution Vulnerability

...

7.5CVSS7.2AI score0.59139EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/06/08 12:0 a.m.6 views

PT-2021-3461

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions affected versions not specified Description This issue concerns a remote code execution flaw in the Windows Print Spooler service, also known as PrintNightmare. The vulnerability allows remote attackers to execute...

9.3CVSS9.4AI score0.84814EPSS
SaveExploits63References126
Prion
Prion
added 2021/06/04 5:15 p.m.18 views

Design/Logic Flaw

A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this...

6.9CVSS7.8AI score0.00326EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
added 2021/06/02 12:0 a.m.7 views

OpenText Brava! 安全漏洞

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An untrusted pointer dereference vulnerability exists in the parsing of DWF files in OpenText Brava! Desktop. The vulnerability stems from failure to properly...

7.8CVSS5.9AI score0.01419EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/06/02 12:0 a.m.12 views

OpenText Brava! 缓冲区错误漏洞

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An out-of-bounds write vulnerability exists in the parsing of DWF files in OpenText Brava! Desktop. The vulnerability stems from a lack of proper validation of...

7.8CVSS5.9AI score0.01419EPSS
SaveExploits0References4
Rows per page
Query Builder