2008 matches found
Information disclosure
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability...
Privilege escalation
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability...
CVE-2021-31191
CVE-2021-31191 refers to a Windows Projected File System FS Filter Driver information disclosure vulnerability. The available sources identify the affected component as the FS Filter Driver in Windows and indicate a potential confidentiality impact. CVSS metrics from NVD/Microsoft show: CVSS v3.1...
CVE-2021-31191 Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
...
CVE-2021-31190 Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
...
CVE-2021-31190
CVE-2021-31190 is a Windows Container Isolation FS Filter Driver elevation of privilege vulnerability. Affects Windows components including Windows 10 (1809) and Windows Server 2019 family and related Server Core variants; CVSSv3.1 base score 7.8 (LOCAL, Privileges Required: LOW, User Interaction...
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
...
PT-2021-3096 · Microsoft · Windows Container Isolation Fs Filter Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Container Isolation FS Filter Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Container Isolation FS Filter Driver, which can be exploited to elevate privileges...
KLA12174 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...
An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.
...
Improper access control
Improper access control vulnerability in Buffalo broadband routers BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and...
Abusing Replication: Stealing AD FS Secrets Over the Network
Organizations are increasingly adopting cloud-based services such as Microsoft 365 to host applications and data. Sophisticated threat actors are catching on and Mandiant has observed an increased focus on long-term persistent access to Microsoft 365 as one of their primary objectives. The focus ...
Buffalo broadband routers 安全漏洞
Buffalo Firmware is a networking device from Buffalo Japan. A security vulnerability exists in Buffalo broadband routers that originates from allowing an unauthenticated, remote attacker to gain access to information, such as configurations, via unspecified vectors. The following products and...
RHEL 7 : kernel (RHSA-2021:1376)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1376 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: SCSI target LIO write to any...
SUSE: Security Advisory (SUSE-SU-2020:1748-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Terramaster TerraMaster FS-210 安全漏洞
The Terramaster TerraMaster FS-210 is a NAS Network Attached Storage device from Tumi Electronic Technology Terramaster of Shenzhen, China. A security vulnerability exists in the TerraMaster F2-210 devices that originates from allowing access to the device over the Internet on TCP port 8181...
@codedungeon/gunner (>=0.0.1-dev.9, <=0.80.1), @codedungeon/laravel-versions-cli (>=0.0.3, <=0.1.0) +74 more potentially affected by CVE-2020-8298 via fs-path (>=0.0.22, <=0.0.24)
fs-path NPM version =0.0.22, =0.0.1-dev.9, =0.0.3, =0.0.9, =1.0.2, =1.0.1, =0.0.1, =1.0.0, =1.0.0, =0.0.40, =1.0.1, =0.0.1, =1.0.1, =0.1.0, =1.0.0, =1.0.2 and more Source cves: CVE-2020-8298 Source advisory: OSV:GHSA-8MRF-64FW-2X75...
GHSA-8MRF-64FW-2X75 Command injection in fs-path
fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the copy, copySync, remove, and removeSync methods...
Command injection in fs-path
fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the copy, copySync, remove, and removeSync methods...