Lucene search
K

241 matches found

Positive Technologies
Positive Technologies
added 2019/08/13 12:0 a.m.4 views

PT-2019-3277 · Intel · Intel Driver & Support Assistant

Name of the Vulnerable Software and Affected Versions: Intel Driver & Support Assistant versions prior to 19.7.30.2 Description: The issue is related to improper file verification, which may allow an authenticated user to potentially enable escalation of privilege via local access. It is also...

7.8CVSS7.5AI score0.00305EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2019/07/30 12:0 a.m.4 views

The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.01742EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/07/25 12:0 a.m.4 views

The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

5.5CVSS5.4AI score0.01742EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/07/23 12:0 a.m.6 views

The vulnerability of the wlansvc.dll library in the Windows operating system allows a hacker to execute arbitrary code with elevated privileges.

The vulnerability of the wlansvc.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially created application...

7.8CVSS6AI score0.00856EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/07/23 12:0 a.m.4 views

The vulnerability of the DirectWrite programming interface in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the DirectWrite programming interface in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created web page or document...

7.8CVSS5.9AI score0.16936EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/07/23 12:0 a.m.5 views

The vulnerability of the dnsrslvr.dll library in the Windows operating system allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the dnsrslvr.dll library in the Windows operating system is related to errors in memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

7.8CVSS5.8AI score0.00992EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2019/07/18 12:0 a.m.4 views

The vulnerability of the DirectWrite programming interface in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the DirectWrite application programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.16936EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/07/18 12:0 a.m.3 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object handling, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

4.2CVSS6AI score0.09205EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/18 12:0 a.m.2 views

The vulnerability of the DirectWrite programming interface in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the DirectWrite application programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.23668EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/07/16 12:0 a.m.5 views

The vulnerability of the daemon/gvfsbackendadmin.c component of the GVFS subsystem in GNOME desktop environments on Linux operating systems allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.

The vulnerability of the daemon/gvfsbackendadmin.c component in the GVFS subsystem of GNOME desktop environments on Linux operating systems is related to permission handling errors when copying files using GFILECOPYALLMETADATA from admin:// to file:// URIs. Exploiting this vulnerability allows an...

10CVSS5.5AI score0.0184EPSS
Exploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/07/11 12:0 a.m.4 views

The vulnerability of browsers Internet Explorer and Microsoft Edge, related to errors in memory object handling, allows attackers to gain unauthorized access to protected information.

The vulnerability of Internet Explorer and Microsoft Edge relates to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially crafted web page...

6.5CVSS5.5AI score0.02335EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/11 12:0 a.m.3 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object handling, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

7.6CVSS6AI score0.02403EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/11 12:0 a.m.4 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object handling, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

7.6CVSS6AI score0.0256EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/11 12:0 a.m.4 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object handling, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

7.6CVSS6AI score0.02403EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/27 12:0 a.m.3 views

The vulnerability of the DirectX component of the Windows operating system, which allows a hacker to execute arbitrary code in kernel mode

The vulnerability of the DirectX component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode using a specially created program...

7CVSS6AI score0.00903EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/06/27 12:0 a.m.3 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, which allows a hacker to exploit it to disclose protected information

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information by using a specially crafted web page...

7.8CVSS5.4AI score0.05406EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.3 views

The vulnerability of the Storage Service component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s Storage Service component is related to file handling errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS5.5AI score0.0107EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.3 views

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and network device management system, as well as the Cisco Evolved Programmable Network (EPN) Manager software, relates to errors in handling HTTP requests. This vulnerability allows an attacker to gain access to protected information.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network EPN Manager software relates to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to gain access to protected...

6.5CVSS5.5AI score0.13856EPSS
Exploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.3 views

The vulnerability of the Win32k component of the Windows operating system allows a hacker to increase their privileges and execute arbitrary code in kernel mode.

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode through a specially created application...

7.8CVSS5.9AI score0.00903EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.13 views

The vulnerability of the Windows Jet Database Engine database management system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine database management system in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...

9.3CVSS6AI score0.04071EPSS
Exploits0References3
Rows per page
Query Builder