5520 matches found
CVE-2022-3531
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2022-3528
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
audioauthority.com Cross Site Scripting vulnerability OBB-2997238
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Microsoft Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
Microsoft Windows Local Security Authority LSA is an internal program of Microsoft Corporation USA that runs Windows system security policies. An elevation of privilege vulnerability exists in the Microsoft Windows Local Security Authority LSA, which stems from improper privilege assignment in th...
CVE-2022-33937
Dell GeoDrive, Versions 1.0 - 2.2, contain a Path Traversal Vulnerability in the reporting function. A local, low privileged attacker could potentially exploit this vulnerability, to gain unauthorized delete access to the files stored on the server filesystem, with the privileges of the GeoDrive...
Path traversal
Dell GeoDrive, Versions 1.0 - 2.2, contain a Path Traversal Vulnerability in the reporting function. A local, low privileged attacker could potentially exploit this vulnerability, to gain unauthorized delete access to the files stored on the server filesystem, with the privileges of the GeoDrive...
CVE-2022-33937
Dell GeoDrive, Versions 1.0 - 2.2, contain a Path Traversal Vulnerability in the reporting function. A local, low privileged attacker could potentially exploit this vulnerability, to gain unauthorized delete access to the files stored on the server filesystem, with the privileges of the GeoDrive...
CVE-2022-38016
Windows Local Security Authority LSA Elevation of Privilege Vulnerability...
CVE-2022-38016
Windows Local Security Authority LSA Elevation of Privilege Vulnerability...
CVE-2022-37977
Local Security Authority Subsystem Service LSASS Denial of Service Vulnerability...
CVE-2022-37977
Local Security Authority Subsystem Service LSASS Denial of Service Vulnerability...
Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
...
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
...
August 9, 2022—KB5016683 (Security-only update)
None None...
PT-2022-5427 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Local Security Authority LSA component, which can be exploited to elevate privileges. This allows an attacker to affe...
Microsoft Windows Local Security Authority Subsystem Service (LSASS) 安全漏洞
Microsoft Windows Local Security Authority Subsystem Service is an internal program of Microsoft Corporation USA that runs Windows system security policies. It verifies user identity, manages user password changes, and generates access characters when a user logs on to a computer standalone or...
Microsoft Windows Local Security Authority (LSA) 安全漏洞
Microsoft Windows Local Security Authority LSA is an internal program of Microsoft Corporation USA that runs Windows system security policies. An elevation of privilege vulnerability exists in the Microsoft Windows Local Security Authority LSA, which stems from improper privilege assignment in th...
CVE-2022-38016 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
...
PT-2022-5496 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Local Security Authority Subsystem Service LSASS and involves incorrect cleanup or release of resources. This can be exploited by a remote attacker to cause a...