3945 matches found
RUSTSEC-2022-0072 Location header incorporates user input, allowing open redirect
When hyper-staticfile performs a redirect for a directory request e.g. a request for /dir that redirects to /dir/, the Location header value was derived from user input the request path, simply appending a slash. The intent was to perform an origin-relative redirect, but specific inputs allowed...
Location header incorporates user input, allowing open redirect
When hyper-staticfile performs a redirect for a directory request e.g. a request for /dir that redirects to /dir/, the Location header value was derived from user input the request path, simply appending a slash. The intent was to perform an origin-relative redirect, but specific inputs allowed...
The vulnerability of the Hyper-V hardware virtualization system for Microsoft Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Hyper-V hardware virtualization technology in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
December 20, 2022—KB5022553 (OS Build 20348.1368) Out-of-band
None None...
December 20, 2022—KB5022554 (OS Build 17763.3772) Out-of-band
None None...
Microsoft Windows Multiple Vulnerabilities (KB5021237)
This host is missing an important security update according to Microsoft KB5021237 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Windows Multiple Vulnerabilities (KB5021233)
This host is missing an important security update according to Microsoft KB5021233 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2022-44682
Windows Hyper-V Denial of Service Vulnerability...
CVE-2022-44682
Windows Hyper-V Denial of Service Vulnerability...
CVE-2022-41094
Windows Hyper-V Elevation of Privilege Vulnerability...
CVE-2022-41094
Windows Hyper-V Elevation of Privilege Vulnerability...
CVE-2022-41094
Windows Hyper-V Elevation of Privilege Vulnerability...
Denial of service
Windows Hyper-V Denial of Service Vulnerability...
Privilege escalation
Windows Hyper-V Elevation of Privilege Vulnerability...
Windows Hyper-V Denial of Service Vulnerability
...
Windows Hyper-V Elevation of Privilege Vulnerability
...
December 13, 2022—KB5021249 (OS Build 20348.1366)
None None...
PT-2022-5951 · Microsoft · Windows Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insufficient access controls in the Hyper-V hardware virtualization system of Microsoft Windows, allowing an attacker to potentially elevate their privileges...
PT-2022-5846 · Microsoft · Windows Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insufficient input validation in the Windows Hyper-V hardware virtualization system, which can be exploited to cause a denial of service. This allows an...