Lucene search
+L

3810 matches found

Positive Technologies
Positive Technologies
added 2020/04/14 12:0 a.m.1 views

PT-2020-2280 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in handling objects in memory, which can be exploited by an attacker to elevate their privileges using a specially crafted application. This allows...

7.8CVSS7.6AI score0.04447EPSS
SaveExploits2References12
Positive Technologies
Positive Technologies
added 2020/04/14 12:0 a.m.3 views

PT-2020-2272 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling objects in memory within the Windows operating system kernel. It allows an attacker to potentially elevate their privileges using a specially...

7.8CVSS8.6AI score0.00929EPSS
SaveExploits0References8
NVD
NVD
added 2020/04/13 6:15 p.m.18 views

CVE-2020-6437

Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application...

4.3CVSS5.1AI score0.0172EPSS
SaveExploits1References8
UbuntuCve
UbuntuCve
added 2020/04/13 6:15 p.m.25 views

CVE-2020-6437

Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application...

4.3CVSS6.8AI score0.0172EPSS
SaveExploits1References1
OSV
OSV
added 2020/04/13 6:15 p.m.2 views

UBUNTU-CVE-2020-6437

Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application...

4.3CVSS6.7AI score0.0172EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2020/04/13 5:30 p.m.28 views

CVE-2020-6437

Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application...

4.3CVSS6.1AI score0.0172EPSS
SaveExploits1
CNVD
CNVD
added 2020/04/08 12:0 a.m.3 views

Unspecified Vulnerability in Google Chrome WebView

Google Chrome is a Web browser from Google, and WebView is a Webkit-based control for displaying Web pages. An unspecified vulnerability exists in Google Chrome WebView. An attacker can exploit this vulnerability with a specially crafted application to bypass security restrictions...

4.3CVSS8.9AI score0.0172EPSS
SaveExploits1References1
Huawei
Huawei
added 2020/04/08 12:0 a.m.127 views

Security Advisory - Information Disclosure Vulnerability about SWAPGS Instruction

An information disclosure vulnerability exists when certain x86-64-bit central processing units CPU speculatively access memory, this vulnerability uses the SWAPGS instruction in the CPU. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially...

5.6CVSS6.5AI score0.04521EPSS
SaveExploits4Affected Software4
OSV
OSV
added 2020/03/26 3:15 p.m.5 views

CVE-2020-1800

HUAWEI smartphones P30 with versions earlier than 10.0.0.185C00E85R1P11 have an improper access control vulnerability. The software incorrectly restricts access to a function interface from an unauthorized actor, the attacker tricks the user into installing a crafted application, successful explo...

7.8CVSS7.1AI score
SaveExploits0References1
Prion
Prion
added 2020/03/26 3:15 p.m.22 views

Improper access control

HUAWEI smartphones P30 with versions earlier than 10.0.0.185C00E85R1P11 have an improper access control vulnerability. The software incorrectly restricts access to a function interface from an unauthorized actor, the attacker tricks the user into installing a crafted application, successful explo...

6.8CVSS7.5AI score0.00531EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2020/03/26 12:0 a.m.24 views

Huawei P30 Access Control Error Vulnerability (CNVD-2020-19934)

Huawei P30 is a smartphone from Chinese company Huawei Huawei. An access control error vulnerability exists in the Huawei P30, which stems from the system failing to properly access control some program interfaces. An attacker could exploit this vulnerability by tricking a user into installing a...

7.8CVSS6.8AI score0.00531EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.8 views

The vulnerability of the Windows device installation dispatcher allows a perpetrator to execute processes with elevated privileges.

The vulnerability of the Windows device management agent is related to errors in file operations. Exploiting this vulnerability allows an attacker to execute processes with elevated privileges using a specially created application...

4.2CVSS7.3AI score0.00876EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.9 views

The vulnerability of the Windows User Profile Service (ProfSvc), a system service on Windows operating systems, allows attackers to escalate their privileges.

The vulnerability of the Windows User Profile Service ProfSvc on Windows operating systems is related to errors in processing links that point to file and directory paths. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

7.1CVSS7.1AI score0.00709EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.8 views

The vulnerability of the Network Connections Service in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Network Connections Service in Windows operating systems is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.1AI score0.00952EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.8 views

The vulnerability of the ActiveX Installer Service installation process on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the ActiveX Installer Service for operating systems running on Windows is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00846EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.7 views

The vulnerability of the Windows Background Intelligent Transfer Service, a file transfer service between the client and the HTTP server, allows a hacker to escalate their privileges.

The vulnerability of the Windows Background Intelligent Transfer Service, which is responsible for intelligent file transfer between clients and Windows HTTP servers, is related to errors in processing links that point to file and directory paths. Exploiting this vulnerability can allow an attack...

7.8CVSS7.7AI score0.42524EPSS
SaveExploits7References4
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.5 views

The vulnerability of the Work Folder Service in Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Work Folder Service service in Windows operating systems is related to improper handling of file operations. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.01019EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.6 views

The vulnerability of the Windows Language Pack Installer component on Windows operating systems allows a malicious individual to execute processes under privileged access.

The vulnerability of the Windows Language Pack Installer component in Windows operating systems is related to file operation errors. Exploiting this vulnerability can allow an attacker to execute processes in privileged mode using a specially created application...

7.8CVSS7.3AI score0.00731EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.9 views

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00962EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.6 views

The vulnerability of the Work Folder Service in Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Work Folder Service service in Windows operating systems is related to improper handling of file operations. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00952EPSS
SaveExploits0References2
Rows per page
Query Builder