CVE-2022-24493

Microsoft Local Security Authority LSA Server Information Disclosure Vulnerability...

Remote code execution

Windows Local Security Authority LSA Remote Code Execution Vulnerability...

CVE-2022-24496 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

...

CVE-2022-24493 Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

...

CVE-2022-29268

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2022-23448

A vulnerability has been identified in SIMATIC Energy Manager Basic All versions V7.3 Update 1, SIMATIC Energy Manager PRO All versions V7.3 Update 1. Affected applications improperly assign permissions to critical directories and files used by the application processes. This could allow a local...

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

...

PT-2022-2706 · Microsoft · Local Security Authority Subsystem Service +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description: The issue is related to insufficient input validation in the Windows Local Security Authority Subsystem Service LSASS, which can be exploite...

Microsoft Windows Local Security Authority Subsystem Service 输入验证错误漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

Microsoft Local Security Authority Server 信息泄露漏洞

Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Local Security Authority Server lsasrv. The following products and editions are affected:Windows 10 Version 1809 for x64-based...

PT-2022-2894 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority LSA Server affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Local Security Authority Subsystem Service LSASS of Windows operating systems...

Microsoft Windows Local Security Authority Subsystem Service 权限许可和访问控制问题漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

PT-2022-2888 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Local Security Authority Subsystem Service LSASS in the Windows operating system and is associated with inadequate access control. Exploitation of this issue may...

CVE-2022-27306

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2022-0759

A flaw was found in all versions of kubeclient up to but not including v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate it wrongly returns...

ManageIQ MiqExpression 信任管理问题漏洞

ManageIQ MiqExpression is a functional module. A security vulnerability exists in ManageIQ MiqExpression that stems from a problem with parsing files in the Ruby client of the application. kubeclient of the Kubernetes REST API ends up accepting any certificate when the kubeconfig file is not...

CVE-2021-43085

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2021-44907

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

User Profile Arbitrary Junction Creation Local Privilege Elevation

The user profile service, identified as ProfSrv, is vulnerable to a local privilege elevation vulnerability in its CreateDirectoryJunction function due to a lack of appropriate checks on the directory structure of the junctions it tries to link together. Attackers can leverage this vulnerability ...

openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates

The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a...