Lucene search
+L

5276 matches found

CVE
CVE
added 2020/10/27 1:28 p.m.57 views

CVE-2020-23864

CVE-2020-23864 affects IOBit Malware Fighter 8.0.2.547. The issue is a local privilege escalation: an attacker can drop a malicious DLL into the WindowsApps folder to gain higher privileges. The connected documents corroborate the same description across multiple sources (NVD, Red Hat, PRION, CVE...

7.8CVSS7.8AI score0.00513EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/10/27 1:28 p.m.31 views

CVE-2020-23864

An issue exits in IOBit Malware Fighter version 8.0.2.547. Local escalation of privileges is possible by dropping a malicious DLL file into the WindowsApps folder...

7.9AI score0.00513EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/10/27 12:0 a.m.27 views

NVIDIA GeForce Experience Denial of Service and Elevation of Privilege Vulnerability

NVIDIA GeForce Experience is graphics card driver update software that helps to check your computer's geforce drivers and update them to the latest version. A denial of service and elevation of privilege vulnerability exists in NVIDIA GeForce Experience versions prior to 3.20.5.70. The...

7.8CVSS7.1AI score0.00323EPSS
SaveExploits0References1
NVD
NVD
added 2020/10/23 6:15 p.m.40 views

CVE-2020-5978

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in its services in which a folder is created by nvcontainer.exe under normal user login with LOCALSYSTEM privileges which may lead to a denial of service or escalation of privileges...

7.8CVSS0.00323EPSS
SaveExploits0References1
OSV
OSV
added 2020/10/23 6:15 p.m.12 views

CVE-2020-5978

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in its services in which a folder is created by nvcontainer.exe under normal user login with LOCALSYSTEM privileges which may lead to a denial of service or escalation of privileges...

7.8CVSS7.1AI score0.00323EPSS
SaveExploits0References1
Prion
Prion
added 2020/10/23 6:15 p.m.31 views

Design/Logic Flaw

NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in its services in which a folder is created by nvcontainer.exe under normal user login with LOCALSYSTEM privileges which may lead to a denial of service or escalation of privileges...

4.6CVSS7.7AI score0.00323EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2020/10/22 7:15 p.m.28 views

CVE-2020-9986

A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.7. A malicious application may be able to read sensitive location information...

4.3CVSS0.00932EPSS
SaveExploits0References2
OSV
OSV
added 2020/10/22 7:15 p.m.9 views

CVE-2020-9986

A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.7. A malicious application may be able to read sensitive location information...

3.3CVSS6.9AI score0.00932EPSS
SaveExploits0References2
Prion
Prion
added 2020/10/22 7:15 p.m.21 views

Design/Logic Flaw

A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.7. A malicious application may be able to read sensitive location information...

4.3CVSS3.5AI score0.00932EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/10/22 6:6 p.m.70 views

CVE-2020-9986

CVE-2020-9986 affects macOS Find My / Offline Finding in Catalina. The root issue is a file access vulnerability where cached rolling advertisement keys and related location data could be exposed via a malicious macOS application reading home-folder files. Threat research described two flaws: (1)...

4.3CVSS4.2AI score0.00932EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/10/21 1:7 p.m.11 views

MGASA-2020-0391 Updated claw-mail packages fix a security vulnerability

In imapscantreerecursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree CVE-2020-16094...

7.5CVSS7.5AI score0.01781EPSS
SaveExploits1References3
Veracode
Veracode
added 2020/10/18 1:47 a.m.21 views

Denial Of Service (DoS)

claws-mail is vulnerable to denial of service DoS. The vulnerability exists in imapscantreerecursive where a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree...

7.5CVSS3.3AI score0.01781EPSS
SaveExploits1References7Affected Software1
Hacker One
Hacker One
added 2020/10/17 9:59 a.m.15 views

Acronis: DLL Hijacking when creating Rescue Media Builder leading to Privilege Escalation

Vulnerability description not provided...

7.1AI score
SaveExploits0
Prion
Prion
added 2020/10/16 11:15 p.m.13 views

Information disclosure

An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages. An attacker who took advantage of this information disclosure could view the folder path of scripts loaded on the page. To take advantage of...

2.1CVSS4.9AI score0.0088EPSS
SaveExploits0References1Affected Software3
Prion
Prion
added 2020/10/16 11:15 p.m.22 views

Information disclosure

An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages. An attacker who took advantage of this information disclosure could view the folder path of scripts loaded on the page. To take advantage of...

2.1CVSS4.9AI score0.00898EPSS
SaveExploits0References1Affected Software3
CVE
CVE
added 2020/10/16 10:17 p.m.144 views

CVE-2020-16941

CVE-2020-16941 describes an information-disclosure vulnerability in Microsoft SharePoint Server where, on certain pages, the server improperly discloses the folder structure by revealing the folder path of scripts loaded on the page. An attacker must have access to the affected SharePoint page to...

5.5CVSS5AI score0.00898EPSS
SaveExploits0References1Affected Software3
OSV
OSV
added 2020/10/15 9:15 p.m.17 views

CVE-2019-17640

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...

9.8CVSS6.8AI score
SaveExploits0References6
Cvelist
Cvelist
added 2020/10/15 8:30 p.m.29 views

CVE-2019-17640

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...

9.6AI score0.02002EPSS
SaveExploits0References6
zdt
zdt
added 2020/10/15 12:0 a.m.23 views

Guild Wars 2 - Insecure Folder Permissions Vulnerability

Exploit Title: Guild Wars 2 - Insecure Folder Permissions Exploit Author: George Tsimpidas Software Link : https://account.arena.net/welcome Version Build : 106915 Tested on: Microsoft Windows 10 Home 10.0.18362 N/A Build 18362 Category: local Vulnerability Description: Guild Wars 2 Launcher...

7.4AI score
SaveExploits0
Hacker One
Hacker One
added 2020/10/14 1:17 p.m.21 views

Acronis: DLL Hijacking when sending feedback and crash report leading to Privilege Escalation

Vulnerability description not provided...

7.1AI score
SaveExploits0
Rows per page
Query Builder