Lucene search
+L

457 matches found

CNVD
CNVD
added 2019/03/14 12:00 a.m.26 views

Microsoft Windows DHCP Client Memory Corruption Vulnerability (CNVD-2020-31120)

Microsoft Windows is a set of operating systems for personal devices from Microsoft.Windows DHCP Client is a Dynamic Host IP Configuration Protocol client. A memory corruption vulnerability exists in the Microsoft Windows DHCP Client. An attacker could exploit this vulnerability by sending a...

9.8CVSS7.4AI score0.32915EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/03/13 12:00 a.m.30 views

Microsoft Windows DHCP Client Memory Corruption Vulnerability (CNVD-2020-31121)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows DHCP Client is one of the Dynamic Host IP Configuration Protocol clients. ...

9.8CVSS7.8AI score0.6285EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2019/03/12 9:52 p.m.140 views

Microsoft Patches Two Win32k Bugs Under Active Attack

Microsoft released patches for two Win32k bugs actively under attack, along with fixes for four additional bugs that are publicly known, as part of its March Patch Tuesday security bulletin. The Win32k bugs are both elevation of privilege vulnerabilities, rated important, and tied to the way...

7.6CVSS8.8AI score0.6285EPSS
SaveExploits19References18
Qualys Blog
Qualys Blog
added 2019/03/12 6:14 p.m.99 views

March 2019 Patch Tuesday – 65 Vulns, 18 Critical, RCEs in DHCP Client, Adobe Vulns

This month's Patch Tuesday addresses 65 vulnerabilities, with 18 of them labeled as Critical. Thirteen of the Critical vulns are for scripting engines and browser components, impacting Microsoft browsers and Office. Three remote code execution RCE vulnerabilities are patched in the Windows DHCP...

7.4AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/03/12 7:00 a.m.43 views

Windows DHCP Client Remote Code Execution Vulnerability

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine. To exploit the vulnerability, an attacker could send...

9.8CVSS3.4AI score0.54459EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/03/12 7:00 a.m.34 views

Windows DHCP Client Remote Code Execution Vulnerability

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine. To exploit the vulnerability, an attacker could send...

9.8CVSS3.4AI score0.6285EPSS
SaveExploits0
Symantec
Symantec
added 2019/03/12 12:00 a.m.66 views

Microsoft Windows DHCP Client CVE-2019-0698 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successfully exploiting this issue may result in the execution of arbitrary code in the context of the affected system. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affecte...

1.3AI score0.6285EPSS
SaveExploits0Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2019/03/12 12:00 a.m.55 views

Microsoft Windows DHCP Client Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DHCP Client service. A crafted DHCP packet can trigger an integer...

5CVSS4.1AI score0.54459EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2019/03/12 12:00 a.m.158 views

KLA11438 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...

9.8CVSS9.6AI score0.6285EPSS
SaveExploits0References68
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:00 a.m.9 views

The vulnerability of the DHCP Client component of the Oracle Solaris operating system allows a hacker to gain full control over the application.

The vulnerability of the DHCP Client component of the Oracle Solaris operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain full control over the application using the DHCP protocol...

7.5CVSS7.2AI score0.00928EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2019/01/16 7:30 p.m.21 views

CVE-2019-2541

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

7.5CVSS7.1AI score0.00928EPSS
SaveExploits0References2
OSV
OSV
added 2019/01/16 7:30 p.m.9 views

CVE-2019-2541

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

7.5CVSS7.1AI score0.00928EPSS
SaveExploits0References2
Prion
Prion
added 2019/01/16 7:30 p.m.24 views

Design/Logic Flaw

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

5.4CVSS7.6AI score0.00928EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/01/16 7:00 p.m.31 views

CVE-2019-2541

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

7.2AI score0.00928EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2019/01/16 7:00 p.m.15 views

CVE-2019-2541

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

6.3AI score0.00928EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/01/16 12:00 a.m.20 views

Unspecified Vulnerability in Oracle Solaris (CNVD-2019-28425)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the DHCP Client subcomponent of the Solaris component version 10 of the Oracle Sun Systems Products...

7.5CVSS8.6AI score0.00928EPSS
SaveExploits0References1
Veracode
Veracode
added 2019/01/15 9:16 a.m.26 views

Arbitrary Code Execution

bash is vulnerable to arbitrary code execution. A flaw was found in the way bash processed the hostname value. A malicious DHCP server could use this flaw to execute arbitrary commands on the DHCP client machines running bash under specific circumstances...

7.5CVSS8.4AI score0.06019EPSS
SaveExploits0References19Affected Software3
Tenable Nessus
Tenable Nessus
added 2019/01/15 12:00 a.m.29 views

Solaris 10 (x86) : 148310-10

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

7.5CVSS7.4AI score0.00928EPSS
SaveExploits0References2
Krebs on Security
Krebs on Security
added 2019/01/09 2:46 p.m.125 views

Patch Tuesday, January 2019 Edition

Microsoft on Tuesday released updates to fix roughly four dozen security issues with its Windows operating systems and related software. All things considered, this first Patch Tuesday of 2019 is fairly mild, bereft as it is of any new Adobe Flash updates or zero-day exploits. But there are a few...

9.3CVSS0.8AI score0.71365EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2019/01/09 7:33 a.m.2 views

Microsoft Patch Tuesday — January 2019 Security Updates Released

Microsoft has issued its first Patch Tuesday for this year to address 49 CVE-listed security vulnerabilities in its Windows operating systems and other products, 7 of which are rated critical, 40 important and 2 moderate in severity. Just one of the security vulnerabilities patched by the tech...

9.3CVSS7.9AI score0.29822EPSS
SaveExploits2
Rows per page
Query Builder