Lucene search
+L

1881 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/15 12:00 a.m.•5 views

CVE-2020-0944: Undefined Security Weakness

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0942, CVE-2020-1029...

7.8CVSS7.2AI score0.00788EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2020/04/14 7:00 a.m.•60 views

Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a...

7.8CVSS3.1AI score0.01019EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2020/04/14 7:00 a.m.•23 views

Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a...

7.8CVSS3.1AI score0.00788EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2020/04/14 12:00 a.m.•54 views

KB4550927: Windows 10 Version 1709 April 2020 Security Update

The remote Windows host is missing security update 4550927. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully exploited this vulnerability could...

9.3CVSS8.3AI score0.6895EPSS
SaveExploits4References63
Positive Technologies
Positive Technologies
•added 2020/04/14 12:00 a.m.•4 views

PT-2020-2198

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insecure privilege management in Windows operating systems, specifically affecting the Connected User Experiences and Telemetry Service. It allows an attacker to run...

7.8CVSS5.8AI score0.00788EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2020/04/14 12:00 a.m.•2 views

PT-2020-2262

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in object handling in memory within the Connected User Experiences and Telemetry Service of Windows operating systems. It allows an attacker to potentially...

7.8CVSS6AI score0.01019EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2020/04/14 12:00 a.m.•5 views

PT-2020-2197

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insecure privilege management in the Connected User Experience and Telemetry Service of Windows operating systems. It allows an attacker to overwrite files in arbitrar...

7.1CVSS6AI score0.00787EPSS
SaveExploits0References6
Citrix
Citrix
•added 2020/03/18 12:00 a.m.•14 views

The Supplemental Grace Period is active and all installed licenses are currently in use

This alertisseen on the Director andCitrix Studio. The Supplemental Grace Period is active and all installed licenses are currently in use License server status on Director shows "not connected"...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2020/03/18 12:00 a.m.•11 views

The vulnerability of the Connected User Experiences and Telemetry operating system services allows attackers to enhance their privileges.

The vulnerability of the Connected User Experiences and Telemetry operating system services is related to file operation processing errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00756EPSS
SaveExploits0References3
OSV
OSV
•added 2020/03/13 7:15 p.m.•18 views

CVE-2019-19611

An issue was discovered in Halvotec RaQuest 10.23.10801.0. One of the exposed web services allows an anonymous user to access the list of connected users as well as the session cookie for each user. Fixed in Release 10.24.11206.1...

7.5CVSS7.1AI score0.01114EPSS
SaveExploits0References1
NVD
NVD
•added 2020/03/13 7:15 p.m.•30 views

CVE-2019-19611

An issue was discovered in Halvotec RaQuest 10.23.10801.0. One of the exposed web services allows an anonymous user to access the list of connected users as well as the session cookie for each user. Fixed in Release 10.24.11206.1...

7.5CVSS7.5AI score0.01114EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/03/13 6:54 p.m.•30 views

CVE-2019-19611

An issue was discovered in Halvotec RaQuest 10.23.10801.0. One of the exposed web services allows an anonymous user to access the list of connected users as well as the session cookie for each user. Fixed in Release 10.24.11206.1...

7.5AI score0.01114EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/03/13 12:00 a.m.•12 views

Microsoft Windows Connected User Experiences and Telemetry Service Information Disclosure Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in Microsoft Windows Connected User...

5.5CVSS6.1AI score0.01531EPSS
SaveExploits0References1
OSV
OSV
•added 2020/03/12 4:15 p.m.•7 views

CVE-2020-0863

An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Information Disclosure Vulnerability'...

5.5CVSS6.1AI score0.01531EPSS
SaveExploits0References1
OSV
OSV
•added 2020/03/12 4:15 p.m.•9 views

CVE-2020-0844

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'...

7.8CVSS7.1AI score0.00756EPSS
SaveExploits0References1
NVD
NVD
•added 2020/03/12 4:15 p.m.•17 views

CVE-2020-0844

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'...

7.8CVSS8.7AI score0.00756EPSS
SaveExploits0References1
Prion
Prion
•added 2020/03/12 4:15 p.m.•21 views

Information disclosure

An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Information Disclosure Vulnerability'...

2.1CVSS5.4AI score0.01531EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2020/03/12 3:48 p.m.•35 views

CVE-2020-0863

An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Information Disclosure Vulnerability'...

7.1AI score0.01531EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/03/12 3:48 p.m.•36 views

CVE-2020-0844

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'...

8.7AI score0.00756EPSS
SaveExploits0References1
CVE
CVE
•added 2020/03/12 3:48 p.m.•99 views

CVE-2020-0844

CVE-2020-0844 is an elevation of privilege in Windows, tied to the Connected User Experiences and Telemetry Service. The underlying issue is improper handling of file operations by this service, which could allow a local attacker to run code with elevated privileges. Remediation text in connected...

7.8CVSS8.5AI score0.00756EPSS
SaveExploits0References1Affected Software8
Rows per page
Query Builder