Lucene search
+L

1606 matches found

ThreatPost
ThreatPost
added 2020/08/19 8:58 p.m.85 views

Researchers Warn of Flaw Affecting Millions of IoT Devices

Researchers are urging connected-device manufacturers to ensure they have applied patches addressing a flaw in a module used by millions of Internet-of-Things IoT devices. If exploited, researchers speculated that the flaw could allow attackers to knock out a city’s electricity or even overdose a...

3.6CVSS7.5AI score0.05272EPSS
SaveExploits1References8
OSV
OSV
added 2020/08/17 7:15 p.m.5 views

CVE-2020-1511

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a...

7.8CVSS7.1AI score0.00795EPSS
SaveExploits0References1
CVE
CVE
added 2020/08/17 7:13 p.m.125 views

CVE-2020-1511

CVE-2020-1511 : A privilege-elevation vulnerability in the Connected User Experiences and Telemetry Service arises from improper handling of file operations. An attacker could run a specially crafted application on the victim’s system to execute code in an elevated context. The threat is mitigate...

7.8CVSS7.7AI score0.00795EPSS
SaveExploits0References1Affected Software3
CNVD
CNVD
added 2020/08/13 12:0 a.m.6 views

Microsoft Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Connected User Experiences and...

7.8CVSS7.1AI score0.00795EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/08/12 12:0 a.m.9 views

Vulnerability of Connected User Experience and Telemetry Service functions in Microsoft Windows operating systems, allowing attackers to induce service failures.

The vulnerability of the Connected User Experience and Telemetry Service services of Microsoft Windows lies in memory object processing errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created application...

5.5CVSS6.6AI score0.01214EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2020/08/11 12:0 a.m.7 views

PT-2020-3822 · Microsoft · Connected User Experiences/Telemetry Service +1

Name of the Vulnerable Software and Affected Versions: Connected User Experiences and Telemetry Service affected versions not specified Description: The issue is related to improper handling of file operations by the Connected User Experiences and Telemetry Service, which could allow an attacker ...

7.8CVSS7.5AI score0.00795EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2020/08/11 12:0 a.m.66 views

KB4566782: Windows 10 Version 2004 August 2020 Security Update

The remote Windows host is missing security update 4566782. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...

10CVSS8.2AI score0.41131EPSS
SaveExploits11References90
Tenable Nessus
Tenable Nessus
added 2020/08/11 12:0 a.m.60 views

KB4571741: Windows 10 Version 1709 August 2020 Security Update

The remote Windows host is missing security update 4571741. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...

9.3CVSS8.2AI score0.41131EPSS
SaveExploits11References82
Tenable Nessus
Tenable Nessus
added 2020/08/11 12:0 a.m.58 views

KB4571709: Windows 10 Version 1803 August 2020 Security Update

The remote Windows host is missing security update 4571709. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...

9.3CVSS8.2AI score0.41131EPSS
SaveExploits11References86
Tenable Nessus
Tenable Nessus
added 2020/08/11 12:0 a.m.329 views

KB4571694: Windows 10 Version 1607 and Windows Server 2016 August 2020 Security Update

The remote Windows host is missing security update 4571694. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...

10CVSS8.7AI score0.99512EPSS
SaveExploits86References70
Tenable Nessus
Tenable Nessus
added 2020/08/11 12:0 a.m.138 views

KB4565349: Windows 10 Version 1809 and Windows Server 2019 August 2020 Security Update

The remote Windows host is missing security update 4565349. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...

10CVSS8.6AI score0.99512EPSS
SaveExploits86References79
Tenable Nessus
Tenable Nessus
added 2020/08/11 12:0 a.m.62 views

KB4565351: Windows 10 Version 1903 and Windows 10 Version 1909 August 2020 Security Update

The remote Windows host is missing security update 4565351. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...

10CVSS8.2AI score0.41131EPSS
SaveExploits11References90
Akamai Blog
Akamai Blog
added 2020/08/05 4:0 a.m.14 views

20 Years of Edge Computing

How long will you wait for something? That depends on what you're waiting for, of course. But in your daily interactions, think about how many "things" you interact with where you expect the response to be instantaneous -- tapping on mobile apps; logging in and transacting with a retailer or a...

3AI score
SaveExploits0
Kitploit
Kitploit
added 2020/08/01 9:30 p.m.57 views

CWFF - Create Your Custom Wordlist For Fuzzing

CWFF is a tool that creates a special High quality fuzzing/content discovery wordlist for you at the highest speed possible using concurrency and it's heavily inspired by @tomnomnom's Who, What, Where, When, Wordlist NahamCon2020. Usage CWFF -h --threads --github --subdomains --recursive...

7.1AI score
SaveExploits0References2
The Hacker News
The Hacker News
added 2020/07/24 8:10 a.m.107 views

Smartwatch Maker Garmin Shuts Down Services After Ransomware Attack

Garmin, the maker of fitness trackers, smartwatches and GPS-based wearable devices, is currently dealing with a massive worldwide service interruption after getting hit by a targeted ransomware attack, an employee of the company told The Hacker News on condition of anonymity. The company's websit...

6.6AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/07/23 12:0 a.m.11 views

The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

5.5CVSS6.2AI score0.01224EPSS
SaveExploits0References4
CNVD
CNVD
added 2020/07/17 12:0 a.m.4 views

Microsoft Windows Connected User Experience and Telemetry Service Information Disclosure Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in the Microsoft Windows Connected User...

5.5CVSS6.2AI score0.01224EPSS
SaveExploits0References1
Wired Threat Level
Wired Threat Level
added 2020/07/16 2:0 p.m.21 views

A New Gadget Stops Voice Assistants From Snooping on You

Meet LeakyPick, the low-cost audio spy detector for your Amazon Alexa, Google Home, and other network-connected devices...

2.2AI score
SaveExploits0
OSV
OSV
added 2020/07/14 11:15 p.m.5 views

CVE-2020-1386

An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Information Disclosure Vulnerability'...

5.5CVSS6.7AI score0.01224EPSS
SaveExploits0References1
CVE
CVE
added 2020/07/14 10:54 p.m.91 views

CVE-2020-1386

CVE-2020-1386 is an information-disclosure vulnerability in Windows Connected User Experiences and Telemetry Service where file information is disclosed improperly. The NVD data shows: Impact on confidentiality: PARTIAL ; attack vector: LOCAL ; authentication: NONE ; user interaction: NONE (CVSS2...

5.5CVSS6.7AI score0.01224EPSS
SaveExploits0References1Affected Software3
Rows per page
Query Builder