Lucene search
K

241 matches found

BDU FSTEC
BDU FSTEC
added 2019/10/01 12:0 a.m.5 views

The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by opening a specially...

7.8CVSS5.5AI score0.12056EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2019/10/01 12:0 a.m.3 views

The vulnerability of the Windows AppX Deployment Server component on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows AppX Deployment Server component in Windows operating systems is related to errors in connection handling. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.8CVSS5.5AI score0.01142EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/10/01 12:0 a.m.5 views

The vulnerability of the Microsoft JET Database Engine database driver on Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.17364EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/10/01 12:0 a.m.5 views

The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created document or visiting a...

5.5CVSS5.5AI score0.01585EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/09/17 12:0 a.m.2 views

The vulnerability of the DirectX component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the DirectX component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

5.5CVSS5.4AI score0.01585EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/09/17 12:0 a.m.3 views

The vulnerability of Microsoft Graphics Components in the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Microsoft Graphics Components in the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.0151EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/09/17 12:0 a.m.4 views

The vulnerability of the driver ws2ifsl.sys (Winsock) of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the ws2ifsl.sys driver Winsock in the Windows operating system is related to object handling errors in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system with administrator privileges through a specially created application...

7.8CVSS6AI score0.19403EPSS
Exploits2References2
BDU FSTEC
BDU FSTEC
added 2019/09/17 12:0 a.m.7 views

The vulnerability of the Windows Audio service on Windows operating systems allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the Windows Audio service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

7.8CVSS5.9AI score0.00756EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/09/17 12:0 a.m.5 views

The vulnerability of the Win32k component of the Windows operating system allows a hacker to increase their privileges and execute arbitrary code in kernel mode.

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode using a specially created application...

7.8CVSS5.9AI score0.00876EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2019/09/12 12:0 a.m.6 views

PT-2019-5545 · Sqlite +9 · Sqlite +9

Name of the Vulnerable Software and Affected Versions: SQLite versions 3.30.1 and earlier Description: The issue is related to errors in handling numbers, which can be exploited by a remote attacker to cause a denial of service. It is also reported that certain SELECT statements with a nonexisten...

9.8CVSS6.5AI score0.45426EPSS
Exploits8References195
BDU FSTEC
BDU FSTEC
added 2019/09/10 12:0 a.m.3 views

The vulnerability of the Cisco RoomOS operating system, related to permission handling errors, allows a intruder to write arbitrary files to the device’s file system.

The vulnerability of the Cisco RoomOS operating system is related to permission handling errors. Exploiting this vulnerability allows an attacker to write arbitrary files to the device’s file system with root privileges...

7.2CVSS5.6AI score0.00262EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/09/02 12:0 a.m.3 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

4.2CVSS6AI score0.01934EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/09/02 12:0 a.m.5 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

4.2CVSS6AI score0.01934EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/08/30 12:0 a.m.5 views

The vulnerability of the unistore.dll library in the Windows operating system allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the Unistore.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code using a specially created application...

7CVSS5.9AI score0.00816EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/08/30 12:0 a.m.5 views

The vulnerability of the WCMSVC.dll library in the Windows operating system allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the wcmsvc.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

7CVSS5.9AI score0.00742EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/08/27 12:0 a.m.2 views

The vulnerability of the Windows Graphics component of the Windows operating system allows attackers to disclose protected information.

The vulnerability of the Windows Graphics component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

5.5CVSS5.4AI score0.01639EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/08/27 12:0 a.m.5 views

The vulnerability of Azure Active Directory (AAD) for managing authentication and access to Windows operating systems allows a perpetrator to gain access to a user account.

The vulnerability of Azure Active Directory AAD for managing authentication and access control on Windows operating systems is related to errors in processing MSA Managed Service Accounts cookie files. Exploiting this vulnerability could allow a malicious actor to gain access to a user account...

5CVSS5.5AI score0.03989EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/08/16 12:0 a.m.7 views

The vulnerability of the Windows operating system’s DHCP client allows a hacker to execute arbitrary code.

The vulnerability of the Windows operating system’s DHCP client is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by sending specially crafted packets that simulate DHCP server responses...

8.8CVSS6AI score0.03968EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2019/08/13 12:0 a.m.4 views

PT-2019-3066 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in handling objects in memory by the Chakra scripting engine in Microsoft Edge. This could allow a remote attacker to execute arbitrary code using a...

7.6CVSS8.3AI score0.01934EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2019/08/13 12:0 a.m.4 views

PT-2019-3277 · Intel · Intel Driver & Support Assistant

Name of the Vulnerable Software and Affected Versions: Intel Driver & Support Assistant versions prior to 19.7.30.2 Description: The issue is related to improper file verification, which may allow an authenticated user to potentially enable escalation of privilege via local access. It is also...

7.8CVSS7.5AI score0.00305EPSS
Exploits0References4
Rows per page
Query Builder