497 matches found
CVE-2023-28252 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2023-28266 Windows Common Log File System Driver Information Disclosure Vulnerability
...
CVE-2023-28266
Technical details (affected product/component, root cause, impact, fix) are not provided in the connected documents. Monitor for updates.
Nokoyawa ransomware attacks with Windows zero-day
Updated April 20, 2023 In February 2023, Kaspersky technologies detected a number of attempts to execute similar elevation-of-privilege exploits on Microsoft Windows servers belonging to small and medium-sized businesses in the Middle East, in North America, and previously in Asia regions. These...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2023-28252
Windows Common Log File System Driver Elevation of Privilege Vulnerability Recent assessments: ccondon-r7 at April 12, 2023 3:18pm UTC reported: This was discovered because of zero-day exploitation perpetrated by a skilled adversary — final payload was Nokoyawa ransomware in at least one case, as...
Microsoft Windows Common Log File System Driver 安全漏洞
The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...
CVE-2023-1595 novel-plus list sql injection
A vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the file common/log/list. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...
CVE-2023-1595
CVE-2023-1595 affects novel-plus 3.6.2, specifically the file path common/log/list. The root cause is manipulation of the sort argument, enabling SQL injection. The vulnerability can be exploited remotely, and public disclosure exists. Connected sources describe it as a high-severity issue with S...
CVE-2023-1595 novel-plus list sql injection
A vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the file common/log/list. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...
PT-2023-17104 · Unknown · Novel-Plus
Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.2 Description: A critical issue has been found in an unknown functionality of the file common/log/list. The manipulation of the sort argument leads to SQL injection. The attack can be launched remotely. Recommendations:...
The vulnerability of the Windows Common Log File System Driver in the Windows operating system allows a hacker to gain increased privileges.
The vulnerability of the Windows Common Log File System Driver in the operating system is caused by an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Common Log File System (CLFS) driver exists due to errors in handling objects in memory. Exploiting this vulnerability can allow an attacker to increase their privileges.
The vulnerability of the Common Log File System Driver for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Update now! February's Patch Tuesday tackles three zero-days
The Patch Tuesday roundup from Microsoft for February 2023 includes three zero-days. Not exactly what we had in mind for Valentine's Day. Microsoft classifies a vulnerability as a zero-day if it is publicly disclosed or actively exploited with no official fix available. As far as we can tell, onl...
CVE-2023-21812
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2023-21812
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
Privilege escalation
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2023-23376 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2023-21812
CVE-2023-21812 is a Windows vulnerability in the Common Log File System Driver (CLFS) that enables Elevation of Privilege. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction; impact is HIGH on ...