3810 matches found
PT-2022-4348 · Aveva · Aveva Edge
Name of the Vulnerable Software and Affected Versions: AVEVA Edge version 20.0 Build: 4201.2111.1802.0000 Service Pack 2 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page ...
PT-2022-4336 · Microsoft · Azure Rtos Guix Studio
Name of the Vulnerable Software and Affected Versions: Azure RTOS GUIX Studio affected versions not specified Description: The issue is related to access control errors in Azure RTOS GUIX Studio, which can allow an attacker to disclose protected information using a specially crafted application...
PT-2022-4423 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in access control within the Windows operating system kernel. It allows an attacker to disclose protected information using a specially crafted application...
PT-2022-4422 · Microsoft · Azure Rtos Guix Studio
Name of the Vulnerable Software and Affected Versions: Azure RTOS GUIX Studio affected versions not specified Description: The issue is related to access control errors in the Azure RTOS GUIX Studio development environment, which can lead to information disclosure. An attacker could exploit this ...
Digital Watchdog DW MEGApix IP 信息泄露漏洞
Digital Watchdog DW MEGApix IP is a camera from Digital Watchdog. A security vulnerability exists in Digital Watchdog DW MEGApix IP version 4.2.0.32842, which stems from a vulnerability that allows an attacker to access sensitive information via a crafted API call...
The vulnerability of the Intel Manageability Commander console for connecting and utilizing Intel Active Management functions, allowing a hacker to increase their privileges.
The vulnerability of the Intel Manageability Commander console for connecting and utilizing Intel Active Management functions is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges
The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges by using a specially created application...
Microsoft Windows Kernel Privilege Escalation Vulnerability
The kernel in Microsoft Windows contains a vulnerability that allows local users to gain privileges via a crafted application...
Apple iOS Memory Corruption Vulnerability
A memory corruption vulnerability in Apple iOS kernel allows attackers to execute code in a privileged context or cause a denial-of-service DoS via a crafted application...
Apple iOS Information Disclosure Vulnerability
The Apple iOS kernel allows attackers to obtain sensitive information from memory via a crafted application...
Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability
The Graphics Device Interface GDI in Microsoft Windows allows local users to gain privileges via a crafted application...
Improper Authentication in Hibernate Validator
ReflectionHelper org.hibernate.validator.util.ReflectionHelper in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager JSM restrictions and execute restricted reflection calls via a crafted application...
GHSA-845H-985R-JRQH Improper Authentication in Hibernate Validator
ReflectionHelper org.hibernate.validator.util.ReflectionHelper in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager JSM restrictions and execute restricted reflection calls via a crafted application...
The vulnerability of the modules related to antivirus protection software, such as Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Small Office Security, Kaspersky Security Cloud, and Kaspersky Endpoint Security, is related to vulnerabilities in access control. These vulnerabilities allow attackers to trigger an emergency shutdown of the Microsoft Windows operating system.
The vulnerability of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Small Office Security, Kaspersky Security Cloud, and Kaspersky Endpoint Security modules is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to...
VulnCheck KEV: CVE-2016-0040
The kernel in Microsoft Windows allows local users to gain privileges via a crafted application...
VulnCheck KEV: CVE-2016-0151
The Client-Server Run-time Subsystem CSRSS in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application...
Microsoft Windows CSRSS Security Feature Bypass Vulnerability
The Client-Server Run-time Subsystem CSRSS in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application...
Microsoft Windows Kernel Privilege Escalation Vulnerability
The kernel in Microsoft Windows allows local users to gain privileges via a crafted application...
Microsoft Windows Improper Input Validation Vulnerability
The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application...
The vulnerability of the Windows File History backup application on Windows operating systems arises from memory object processing errors, allowing attackers to exploit their privileges.
The vulnerability of the Windows File History backup application on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...