Lucene search
+L

1884 matches found

Prion
Prion
added 2018/12/12 12:29 a.m.21 views

Privilege escalation

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka "Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability." This affects Microsoft Visual Studio, Windows Server 2019,...

4.6CVSS8.1AI score0.00998EPSS
SaveExploits0References2Affected Software4
OSV
OSV
added 2018/12/12 12:29 a.m.2 views

CVE-2018-8599

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka "Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability." This affects Microsoft Visual Studio, Windows Server 2019,...

7.8CVSS5.8AI score0.00998EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2018/12/12 12:29 a.m.3 views

CVE-2018-8599

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka "Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability." This affects Microsoft Visual Studio, Windows Server 2019,...

7.8CVSS5.5AI score0.00998EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2018/12/12 12:29 a.m.27 views

CVE-2018-8599

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka "Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability." This affects Microsoft Visual Studio, Windows Server 2019,...

7.8CVSS8.2AI score0.00998EPSS
SaveExploits0References2
CVE
CVE
added 2018/12/12 12:0 a.m.142 views

CVE-2018-8599

CVE-2018-8599 is the Diagnostics Hub Standard Collector Service Elevation of Privilege vulnerability. The NVD entry states a local attacker could exploit improper impersonation of certain file operations to gain privileges on affected Microsoft software, including Visual Studio, Windows Server 20...

7.8CVSS8.4AI score0.00998EPSS
SaveExploits0References2Affected Software5
Cvelist
Cvelist
added 2018/12/12 12:0 a.m.30 views

CVE-2018-8599

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka "Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability." This affects Microsoft Visual Studio, Windows Server 2019,...

8.6AI score0.00998EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/12/12 12:0 a.m.18 views

SolarWinds Active Diagnostics Detection (Windows SMB Login)

This script detects the installed version of SolarWinds Active Diagnostics for Windows. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2018/12/12 12:0 a.m.64 views

Microsoft Windows Multiple Vulnerabilities (KB4471327)

This host is missing a critical security update according to Microsoft KB4471327 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.2AI score0.69214EPSS
SaveExploits15References3
Microsoft CVE
Microsoft CVE
added 2018/12/11 8:0 a.m.31 views

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. An attacker with unprivileged access to a vulnerable system...

7.8CVSS5.2AI score0.00998EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2018/12/11 12:0 a.m.173 views

KB4471321: Windows 10 Version 1607 and Windows Server 2016 December 2018 Security Update

The remote Windows host is missing security update 4471321. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly. An attacker who successfully exploited this vulnerability could...

10CVSS8.2AI score0.69214EPSS
SaveExploits15References22
Tenable Nessus
Tenable Nessus
added 2018/12/11 12:0 a.m.73 views

KB4471332: Windows 10 Version 1809 and Windows Server 2019 December 2018 Security Update

The remote Windows host is missing security update 4471332. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain informati...

10CVSS8.2AI score0.69214EPSS
SaveExploits15References26
Tenable Nessus
Tenable Nessus
added 2018/12/11 12:0 a.m.125 views

KB4471329: Windows 10 Version 1709 and Windows Server Version 1709 December 2018 Security Update

The remote Windows host is missing security update 4471329. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly. An attacker who successfully exploited this vulnerability could...

10CVSS8.3AI score0.22179EPSS
SaveExploits1References14
Packet Storm
Packet Storm
added 2018/12/06 12:0 a.m.275 views

Rockwell Automation Allen-Bradley 1752-EN2T/C / 1769-L33ER/A LOGIX5333ER XSS

Exploit Title: Rockwell Automation Allen-Bradley 1752-EN2T/C, 1769-L33ER/A LOGIX5333ER Cross Site Scripting Google Dork: N/A Date: 5/12/2018 Exploit Author: n4pst3r Vendor Homepage: https://www.rockwellautomation.com/ Software Link: unkn0wn Version: 1752-EN2T/C, 1769-L33ER/A LOGIX5333ER Tested on...

0.1AI score
SaveExploits0
zdt
zdt
added 2018/12/05 12:0 a.m.102 views

Rockwell Automation Allen-Bradley 1752-EN2T/C, 1769-L33ER/A Cross Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Rockwell Automation Allen-Bradley 1752-EN2T/C, 1769-L33ER/A LOGIX5333ER Cross Site Scripting Google Dork: N/A Date: 5/12/2018 Exploit Author: n4pst3r Vendor Homepage: https://www.rockwellautomation.com/ Software Link: unkn0...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2018/12/04 12:0 a.m.15 views

Drobo 5N2 Improper Access Control Vulnerability (CNVD-2019-05929)

The Drobo 5N2 NAS is a networked storage appliance NAS from Drobo, USA. The device features data sharing, data backup, remote access and disaster recovery. An access control error vulnerability exists in the /mysql/api/diags.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115. An attacker can...

7.5CVSS6.7AI score0.01313EPSS
SaveExploits1References1
OSV
OSV
added 2018/12/03 10:29 p.m.13 views

CVE-2018-14695

Incorrect access control in the /mysql/api/diags.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retrieve diagnostic information via the "name" URL parameter...

7.5CVSS5.8AI score0.01313EPSS
SaveExploits1References1
ICS
ICS
added 2018/11/06 12:0 a.m.70 views

Roche Diagnostics Point of Care Handheld Medical Devices (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.3 ATTENTION: Exploitable with adjacent access/low skill level to exploit --------- Begin Update A Part 1 of 3 -------- Vendor: Roche Diagnostics Equipment: Accu-Chek Inform II, CoaguChek Pro II/XS Plus/XS Pro, cobas h 232 POC handheld medical devices --------- End...

9.6CVSS8.6AI score0.0097EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2018/10/17 9:30 p.m.47 views

Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product

Summary DB2 contains several vulnerabilities which can affect the IBM Performance Management product. Some of the information about security vulnerabilities affecting DB2 has been published in security bulletins. Vulnerability Details CVEID: CVE-2018-2783 DESCRIPTION: An unspecified vulnerability...

7.7CVSS1.4AI score0.03966EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
added 2018/10/07 9:34 p.m.87 views

DNSDiag - DNS Diagnostics And Performance Measurement Tools

Ever been wondering if your ISP is hijacking your DNS traffic? Ever observed any misbehavior with your DNS responses? Ever been redirected to wrong address and suspected something is wrong with your DNS? Here we have a set of tools to perform basic audits on your DNS requests and responses to mak...

7.3AI score
SaveExploits0References3
Microsoft KB
Microsoft KB
added 2018/09/20 12:0 a.m.22 views

September 20, 2018—KB4457139 (Preview of Monthly Rollup)

None None...

6.1AI score
SaveExploits0
Rows per page
Query Builder