Lucene search
+L

3306 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2021/09/14 8:7 p.m.54 views

Security Bulletin: Security Vulnerabilities in IBM® Java SDK July 2021 CPU affect multiple IBM Continuous Engineering products based on IBM Jazz Technology

Summary There are multiple vulnerabilities in IBM® SDK Java Technology Edition from July 2021 CPU that are used by IBM Jazz Team Server affecting the following IBM Jazz Team Server based Applications: Engineering Lifecycle Management ELM, IBM Engineering Requirements Management DOORS Next DOORS...

7.5CVSS0.5AI score0.04008EPSS
SaveExploits0Affected Software9
CNNVD
CNNVD
added 2021/09/14 12:0 a.m.10 views

Microsoft Windows Update Assistant 权限许可和访问控制问题漏洞

Microsoft Windows Update Assistant is a system update tool from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Update Assistant due to privilege permission and access control issues. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

7.8CVSS7.1AI score0.00829EPSS
SaveExploits0References7
Openbugbounty
Openbugbounty
added 2021/09/13 3:1 p.m.24 views

location.transdev.com Cross Site Scripting vulnerability OBB-2139704

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/09/08 12:0 a.m.10 views

The vulnerability of the Windows Update Assistant’s software for handling updates leads to a lack of access control, allowing attackers to escalate their privileges.

The vulnerability of the Windows Update Assistant software relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.3CVSS7.2AI score0.01729EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/09/05 12:0 a.m.9 views

Huawei HarmonyOS 输入验证错误漏洞

Huawei HarmonyOS is an operating system from Huawei China Inc. A vulnerability exists in the Huawei HarmonyOS component due to an input validation error. The vulnerability stems from a network system or product that does not properly validate input data, and can be exploited by an attacker to...

9.8CVSS5.7AI score0.00741EPSS
SaveExploits0References3
NVD
NVD
added 2021/08/12 6:15 p.m.23 views

CVE-2021-36945

Windows 10 Update Assistant Elevation of Privilege Vulnerability...

7.8CVSS0.01729EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/08/12 6:15 p.m.5 views

CVE-2021-36945

Windows 10 Update Assistant Elevation of Privilege Vulnerability...

7.8CVSS7AI score0.01729EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/08/12 6:15 p.m.22 views

Privilege escalation

Windows 10 Update Assistant Elevation of Privilege Vulnerability...

6.8CVSS7.7AI score0.01729EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/08/12 6:12 p.m.26 views

CVE-2021-36945 Windows 10 Update Assistant Elevation of Privilege Vulnerability

...

7.3CVSS7.6AI score0.01729EPSS
SaveExploits0References1
CVE
CVE
added 2021/08/12 6:12 p.m.123 views

CVE-2021-36945

CVE-2021-36945 affects Windows 10 Update Assistant. Connected sources describe an elevation-of-privilege flaw caused by insufficient access control in Update Assistant, enabling local privilege escalation. Root cause: improper access control within the Update Assistant component; affected surface...

7.8CVSS7.1AI score0.01729EPSS
SaveExploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/08/11 12:0 a.m.30 views

Microsoft Windows Update Assistant Incorrect Permission Assignment Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within Windows Update...

7.3CVSS5.7AI score0.01729EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2021/08/10 7:0 a.m.70 views

Windows 10 Update Assistant Elevation of Privilege Vulnerability

...

7.8CVSS7.8AI score0.01729EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2021/08/10 7:0 a.m.47 views

Some versions of Windows 10 display a notification to install the latest version

None None...

7.8CVSS7AI score0.01729EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/08/10 12:0 a.m.12 views

Microsoft Windows Update Assistant 缓冲区错误漏洞

Microsoft Windows Update Assistant is a system update tool from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Update. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...

7.8CVSS8.1AI score0.1991EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/08/10 12:0 a.m.21 views

Microsoft Windows Update Assistant 安全漏洞

Microsoft Windows Update Assistant is a system update tool from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Update Assistant. The following products and versions are affected: Windows 10 Version 21H1 for ARM64-based Systems, Windows 10 Version 21H1 for 32-bit...

7.8CVSS7.2AI score0.01097EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/08/10 12:0 a.m.10 views

Microsoft Windows Update Assistant 权限许可和访问控制问题漏洞

Microsoft Windows Update Assistant is a system update tool from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Update Assistant with privilege permission and access control issues. The following products and versions are affected: Windows Update Assistant...

7.8CVSS7.3AI score0.01729EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/08/10 12:0 a.m.7 views

PT-2021-3920 · Microsoft · Windows 10 Update Assistant

Name of the Vulnerable Software and Affected Versions: Windows 10 Update Assistant affected versions not specified Description: The issue is related to insufficient access control in the Windows Update Assistant, which can be exploited to elevate privileges. Recommendations: At the moment, there ...

7.8CVSS6.9AI score0.01729EPSS
SaveExploits0References6
IBM Security Bulletins
IBM Security Bulletins
added 2021/07/16 5:54 p.m.69 views

Security Bulletin: Multiple vulnerabilites affect IBM Jazz Foundation and IBM Engineering products.

Summary There are multiple vulnerabilities that are used by IBM Jazz Team Server affecting the following IBM Jazz Team Server based Applications: Engineering Lifecycle Management ELM, IBM Engineering Requirements Management DOORS Next DOORS Next, IBM Engineering Workflow Management EWM, IBM...

9.8CVSS9AI score0.99019EPSS
SaveExploits15Affected Software5
CNVD
CNVD
added 2021/07/14 12:0 a.m.7 views

Unauthorized Access Vulnerability in Synology Web Assistant at Synology Inc.

Qunhui Technology Co., Ltd. is a company whose main business scope is the sale of camera modules, lenses, optical products, optoelectronic products, etc.. An unauthorized access vulnerability exists in Synology Web Assistant of QunHui Technology Co. that can be exploited by an attacker to conduct...

6.9AI score
SaveExploits0
OSV
OSV
added 2021/06/21 3:15 p.m.25 views

CVE-2019-25047

Greenbone Security Assistant GSA before 8.0.2 and Greenbone OS GOS before 5.0.10 allow XSS during 404 URL handling in gsad...

6.1CVSS6.1AI score
SaveExploits0References3
Rows per page
Query Builder