Lucene search
K

13 matches found

OSV
OSV
added 2025/06/18 2:57 p.m.8 views

BIT-NODE-MIN-2024-3566 Command injection vulnerability in programing languages on Microsoft Windows operating system.

A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied...

10CVSS9AI score0.80539EPSS
Exploits14References8
OSV
OSV
added 2025/06/18 2:56 p.m.7 views

BIT-NODE-2024-3566 Command injection vulnerability in programing languages on Microsoft Windows operating system.

A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied...

10CVSS9AI score0.80539EPSS
Exploits14References8
RedhatCVE
RedhatCVE
added 2025/05/23 10:12 a.m.6 views

CVE-2024-3566

A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied...

9.8CVSS7.3AI score0.09605EPSS
Exploits4
NVD
NVD
added 2024/04/10 4:15 p.m.14 views

CVE-2024-3566

A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied...

9.8CVSS7AI score0.09605EPSS
Exploits4References8
Cvelist
Cvelist
added 2024/04/10 3:22 p.m.79 views

CVE-2024-3566 Command injection vulnerability in programing languages on Microsoft Windows operating system.

A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied...

9.9AI score0.09605EPSS
Exploits4References7
CVE
CVE
added 2024/04/10 3:22 p.m.306 views

CVE-2024-3566

Technical details about CVE-2024-3566 are not provided in the connected documents. The initial description notes a command injection risk, but no affected products, versions, impact, or fixes are specified here. Monitor for updated technical disclosures.

9.8CVSS9.6AI score0.09605EPSS
Exploits4References8Affected Software5
Debian CVE
Debian CVE
added 2024/04/10 3:22 p.m.38 views

CVE-2024-3566

A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied...

9.8CVSS8AI score0.09605EPSS
Exploits4
The Hacker News
The Hacker News
added 2024/04/10 3:5 a.m.90 views

Critical 'BatBadBut' Rust Vulnerability Exposes Windows Systems to Attacks

A critical security flaw in the Rust standard library could be exploited to target Windows users and stage command injection attacks. The vulnerability, tracked as CVE-2024-24576, has a CVSS score of 10.0, indicating maximum severity. That said, it only impacts scenarios where batch files are...

10CVSS9.9AI score0.80539EPSS
Exploits14
CNNVD
CNNVD
added 2024/04/10 12:0 a.m.3 views

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows due to a command injection issue in Windows applications that indirectly rely on the CreateProcess function when certain conditions ar...

10CVSS7.6AI score0.80539EPSS
Exploits14References8
seebug.org
seebug.org
added 2015/12/09 12:0 a.m.25 views

2345王牌输入法本地权限提升漏洞

Microsoft Windows API使用CreateProcess函数创建新的进程及其主线程。 CreateProcess函数的格式如下: BOOL CreateProcess LPCTSTR lpApplicationName, LPTSTR lpCommandLine, LPSECURITYATTRIBUTES lpProcessAttributes, LPSECURITYATTRIBUTES lpThreadAttributes, BOOL bInheritHandles, DWORD dwCreationFlags, LPVOID lpEnvironment, LPCTST...

7AI score
Exploits0
NVD
NVD
added 2008/10/15 12:12 a.m.9 views

CVE-2008-3466

Microsoft Host Integration Server HIS 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS...

10CVSS7.5AI score0.8472EPSS
Exploits9References9
Prion
Prion
added 2008/10/15 12:12 a.m.7 views

Authentication flaw

Microsoft Host Integration Server HIS 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS...

10CVSS7.7AI score0.8472EPSS
Exploits9References9
Cvelist
Cvelist
added 2008/10/15 12:0 a.m.16 views

CVE-2008-3466

Microsoft Host Integration Server HIS 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS...

7.4AI score0.8472EPSS
Exploits9References9
Rows per page
Query Builder