565 matches found
PT-2022-24867 · Unknown · Fat Free Crm
Name of the Vulnerable Software and Affected Versions: fat free crm versions prior to 0.20.1 Description: The issue allows an authenticated user to perform a remote Denial of Service attack against Fat Free CRM via bucket access. There are no known workarounds for this issue. Recommendations: For...
Fat Free CRM vulnerable to Remote Denial of Service via Tasks endpoint
Impact An authenticated user can perform a remote Denial of Service attack against Fat Free CRM. This vulnerability has been assigned the CVE identifier: CVE-2022-39281 Affected versions: All Not affected: None Fixed versions: 0.20.1 All users running an affected release should either upgrade or...
Vulnerability of the mkfs.fat and fatlabel utilities in the “EMIAS” operating system, allowing a hacker to create a user account and elevate its privileges to administrator level
The vulnerability of the mkfs.fat and fatlabel utilities in the “EMIAS” operating system is related to the invocation of functions with incorrectly defined arguments. Exploiting this vulnerability allows an attacker to create a user account and elevate its privileges to administrator level using...
The vulnerability of the Fast FAT File System Driver for the Windows operating system allows a hacker to gain increased privileges.
The vulnerability of the Fast FAT File System Driver for the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CVE-2022-22043
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability...
CVE-2022-22043
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability...
CVE-2022-22043
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability...
Privilege escalation
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability...
CVE-2022-22043 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
...
CVE-2022-22043
CVE-2022-22043 is a Windows vulnerability affecting the Fast FAT File System Driver, described as an Elevation of Privilege. The NVD entry lists a Local attack vector, Low privileges required, and no user interaction, with a high impact on confidentiality, integrity, and availability (CVSSv3.1: A...
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
...
PT-2022-3743 · Microsoft · Windows Fast Fat File System Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Fast FAT File System Driver affected versions not specified Description: The issue is related to the Windows Fast FAT File System Driver and concerns an elevation of privilege vulnerability due to unsafe privilege management. This cou...
Microsoft Windows Fast Fat Driver 权限许可和访问控制问题漏洞
Microsoft Windows Fast Fat Driver is a complete file system from Microsoft that solves a variety of problems such as storing data on disk, interacting with cache managers, and handling various I/O operations such as file creation, performing reads/writes to files, setting up file information, and...
KLA12581 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of...
GHSA-HPJ2-4HFJ-G233 Fat-Free Framework arbitrary code execution
In Fat-Free Framework 3.7.1, attackers can achieve arbitrary code execution if developers choose to pass user controlled input e.g., $REQUEST, $GET, or $POST to the framework's Clear method...
Fat-Free Framework arbitrary code execution
In Fat-Free Framework 3.7.1, attackers can achieve arbitrary code execution if developers choose to pass user controlled input e.g., $REQUEST, $GET, or $POST to the framework's Clear method...
Cross-site Scripting (XSS)
Overview fatfreecrm is a customer relationship management platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS via an authenticated request to the /comments URI. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a...
Withdrawn Advisory: Fat Free CRM Cross-site Scripting vulnerability
Withdrawn This advisory has been withdrawn because the CVE has been disputed and the underlying vulnerability is likely invalid. This link is maintained to preserve external references. According to maintainers of Fat Free CRM, the CRM comment feature allows certain HTML markup, but santizes the...
GHSA-GMG5-R3C4-3FM9 Withdrawn Advisory: Fat Free CRM Cross-site Scripting vulnerability
Withdrawn This advisory has been withdrawn because the CVE has been disputed and the underlying vulnerability is likely invalid. This link is maintained to preserve external references. According to maintainers of Fat Free CRM, the CRM comment feature allows certain HTML markup, but santizes the...