Lucene search
+L

59 matches found

CNVD
CNVD
added 2020/04/16 12:0 a.m.4 views

Microsoft Windows Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system.Connected User Experiences and Telemetry Service is one of the components that can...

7.8CVSS7.2AI score0.00771EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/16 12:0 a.m.4 views

Microsoft Windows Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system.Connected User Experiences and Telemetry Service is one of the components that can...

7.8CVSS7.9AI score0.00996EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/01/13 12:0 a.m.6 views

The vulnerability of Siemens S7-1200 microprogramming software lies in the presence of unsafe functions during physical connection via the UART interface. This allows attackers to obtain additional diagnostic information during the device loading process.

The vulnerability of Siemens S7-1200 microprogramming software is related to the presence of unsafe functions during physical connection via the UART interface. Exploiting this vulnerability can allow an attacker to obtain additional diagnostic information during the device loading process...

6.8CVSS6.6AI score0.00532EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2019/11/18 12:0 a.m.32 views

SYS.2.2.3.A1

Ziel des Bausteins SYS.2.2.3 ist der Schutz von Informationen, die durch und auf Windows 10-Clients verarbeiten werden. Die Basis-Anforderung SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

7.3AI score
SaveExploits0References1
GithubExploit
GithubExploit
added 2019/01/24 10:12 a.m.31 views

Exploit for Improper Input Validation in Cisco Rv320_Firmware

CiscoRV320Dump CVE-2019-1653/CVE-2019-1652 Exploits For Dumpin...

9CVSS8.4AI score0.99876EPSS
SaveExploits27
ATTACKERKB
ATTACKERKB
added 2019/01/24 12:0 a.m.46 views

CVE-2019-1653

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit th...

7.5CVSS7AI score0.99876EPSS
SaveIn wildExploits20References22
OpenVAS
OpenVAS
added 2018/08/07 12:0 a.m.58 views

Microsoft Windows: Turn on MSDT interactive communication with support provider

This policy setting configures Microsoft Support Diagnostic Tool MSDT interactive communication with the support provider. MSDT gathers diagnostic data for analysis by support professionals. If you enable this policy setting, users can use MSDT to collect and send diagnostic data to a support...

7.2AI score
SaveExploits0References3
OpenVAS
OpenVAS
added 2018/06/28 12:0 a.m.46 views

Microsoft Windows 10: Do not use diagnostic data for tailored experiences

This policy setting lets you prevent Windows from using diagnostic data to provide tailored experiences to the user. If you enable this policy setting, Windows will not use diagnostic data from this device this data may include browser, app and feature usage, depending on the...

7.2AI score
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 7:2 a.m.10 views

Security Bulletin: Vulnerability in SSLv3 affects IBM Monitoring and Diagnostic Tools for Java - Interactive Diagnostic Data Explorer (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 may be used in connections between Interactive Diagnostic Data Explorer client and the server running in IBM Support Assistant Team Server Vulnerability...

4.3CVSS2.3AI score0.99999EPSS
SaveExploits7Affected Software1
Citrix
Citrix
added 2018/06/01 12:0 a.m.8 views

Performing NetScaler SD-WAN Log Analysis

This article describes the logs description that are captured in a Citrix SD-WAN´s diagnostic data file. SD-WAN Logs Location In the SD-WAN version 9.x the logs will be in the following path: /home/talariuser/log/diag/vwstsdir.zip In the SD-WAN version 10.x the logs will be in the following path:...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2018/04/23 12:0 a.m.45 views

Microsoft Windows 10: Allow Telemetry

This policy setting determines the amount of Windows diagnostic data sent to Microsoft. A value of 0 Security will send minimal data to Microsoft to keep Windows secure. Windows security components such as Malicious Software Removal Tool MSRT and Windows Defender may send data to Microsoft at thi...

7.3AI score
SaveExploits0References6
Citrix
Citrix
added 2017/12/30 12:0 a.m.8 views

How to Collect Diagnostic Data by using the Command Line Interface on a WANOP

This article explains an alternative method for collecting Diagnostic Data by using the command line interface when the Graphical User Interface GUI is not accessible on a NetScaler SD-WAN WANOP appliance or WANOP VPX instance...

7.3AI score
SaveExploits0
Citrix
Citrix
added 2017/12/25 12:0 a.m.9 views

How to Collect Diagnostic Data on NetScaler SD-WAN Appliance

This article describes how to capture diagnostic data on NetScaler SD-WAN WANOP appliance using Graphical User Interface GUI...

7.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2017/10/19 2:48 p.m.4 views

kernel: Out of bounds read in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() in SCTP stack

A kernel data leak due to an out-of-bound read was found in the Linux kernel in inetdiagmsgsctp,laddrfill and sctpgetsctpinfo functions present since version 4.7-rc1 through version 4.13. A data leak happens when these functions fill in sockaddr data structures used to export socket's diagnostic...

7.5CVSS7AI score0.03763EPSS
SaveExploits4References4
RedHat Linux
RedHat Linux
added 2017/10/19 2:47 p.m.6 views

kernel: Out of bounds read in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() in SCTP stack

A kernel data leak due to an out-of-bound read was found in the Linux kernel in inetdiagmsgsctp,laddrfill and sctpgetsctpinfo functions present since version 4.7-rc1 through version 4.13. A data leak happens when these functions fill in sockaddr data structures used to export socket's diagnostic...

7.5CVSS7AI score0.03763EPSS
SaveExploits4References4
Veeam
Veeam
added 2015/03/10 12:0 a.m.34 views

How to Simulate Veeam Backup & Replication Disk I/O

Purpose This article provides examples of using common workload simulators diskspd and fio to simulate Veeam Backup & Replication disk I/O. Do Not Send Test Output Files to Veeam Support The write test output files testfile.dat do not contain diagnostic data. As such, please do not attach them to...

6.3AI score
SaveExploits0
securityvulns
securityvulns
added 2012/04/02 12:0 a.m.88 views

[security bulletin] HPSBUX02755 SSRT100667 rev.1 - HP-UX WBEM, Remote Unauthorized Access to Diagnostic Data

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03221589 Version: 1 HPSBUX02755 SSRT100667 rev.1 - HP-UX WBEM, Remote Unauthorized Access to Diagnostic Data NOTICE: The information in this Security Bulletin should be acted upon as soon as...

5.8CVSS0.8AI score0.01843EPSS
SaveExploits1
seebug.org
seebug.org
added 2012/03/29 12:0 a.m.30 views

HP-UX WBEM 远程未授权访问漏洞(CVE-2012-0126)

Bugtraq ID: 52734 CVE ID:CVE-2012-0126 HP-UX是一款商业性质的操作系统 HP-UX WBEM组件存在安全漏洞,远程攻击者可以获得对诊断数据的未授权访问 0 HP-UX 11.23 HP-UX 11.11 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息: http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emrna-c03221589&ac.admitted=1332896220596.876444892.199480143...

5.8CVSS6.4AI score0.01843EPSS
SaveExploits1
ThreatPost
ThreatPost
added 2011/12/05 7:23 p.m.12 views

Researchers Say Carrier IQ Not Logging Texts or Emails, But Has Some Worrisome Capabilities

Security researchers who have investigated the inner workings of the Carrier IQ software and its capabilities say that the application has some powerful, and potentially worrisome capabilities, but that as it’s currently deployed by carriers it doesn’t have the ability to record SMS messages, pho...

0.1AI score
SaveExploits0References3
Rows per page
Query Builder