Lucene search
+L

135 matches found

Cvelist
Cvelist
added 2021/12/07 7:30 p.m.29 views

CVE-2021-42977

NoMachine Enterprise Desktop is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I...

9AI score0.00481EPSS
SaveExploits1References1
Prion
Prion
added 2021/08/05 9:15 p.m.22 views

Information disclosure

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet IRP can lead to privileged reads in the context of a driver which can result in sensitive information...

2.1CVSS5AI score0.0034EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/07/07 12:00 a.m.12 views

IOBit Advanced SystemCare 安全漏洞

Iobit IOBit Advanced SystemCare is a system management utility program from the British company IOBit Iobit. The program is mainly used for scanning, repairing and optimizing the system, among other things. A security vulnerability exists in IOBit Advanced SystemCare Ultimate, which stems from a...

8.8CVSS7.9AI score0.00321EPSS
SaveExploits1References3
Veracode
Veracode
added 2021/04/17 8:20 a.m.38 views

Use-after-free

linux is vulnerable to use after free. An attacker is able to exploit the vulnerability via an I/O request at a certain point during device setup...

7CVSS3.2AI score0.00251EPSS
SaveExploits0References5Affected Software6
OSV
OSV
added 2021/02/15 7:24 p.m.9 views

MGASA-2021-0085 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.14 and fixes at least the following security issues: nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O...

7CVSS7.3AI score0.01589EPSS
SaveExploits2References5
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:00 a.m.7 views

The vulnerability of the irp-functionality of the FreeRDP protocol allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of irp functions parallelprocessirpcreate, serialprocessirpcreate, driveprocessirpwrite, printerprocessirpwrite, rdpeirecvpdu, serialprocessirpwrite in the implementation of the remote desktop protocol FreeRDP is related to reading data beyond the buffer boundaries in memory...

6CVSS7.1AI score0.01151EPSS
SaveExploits0References6Affected Software2
NVD
NVD
added 2021/02/01 4:15 a.m.23 views

CVE-2021-3348

nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, aka CID-b98e762e3d71...

7CVSS7AI score0.00251EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2021/02/01 4:15 a.m.42 views

CVE-2021-3348

nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, aka CID-b98e762e3d71...

7CVSS6.7AI score0.00251EPSS
SaveExploits0References7
Prion
Prion
added 2021/02/01 4:15 a.m.28 views

Design/Logic Flaw

nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, aka CID-b98e762e3d71...

4.4CVSS6.5AI score0.00251EPSS
SaveExploits0References4Affected Software2
Cvelist
Cvelist
added 2021/02/01 3:43 a.m.36 views

CVE-2021-3348

nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, aka CID-b98e762e3d71...

7.1AI score0.00251EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2021/02/01 3:43 a.m.41 views

CVE-2021-3348

nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, aka CID-b98e762e3d71...

7CVSS6.8AI score0.00251EPSS
SaveExploits0
CNVD
CNVD
added 2020/12/21 12:00 a.m.40 views

NZXT CAM Privilege Permission and Access Control Issues Vulnerability (CNVD-2021-03263)

NZXT CAM is a performance monitoring software for gaming computers from NZXT. A vulnerability exists in the NZXT CAM WinRing0x64 Driver Privilege I/O Write IRPs feature, which can be exploited by a remote attacker to elevate privileges by submitting a special I/O request...

8.8CVSS6.9AI score0.00527EPSS
SaveExploits1References1
NVD
NVD
added 2020/12/18 8:15 p.m.30 views

CVE-2020-13513

A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause increased privileges. Using the IRP 0x9c40a0dc gives a low privilege user direct access to the OUT instruction that...

8.8CVSS8.8AI score0.00527EPSS
SaveExploits1References1
NVD
NVD
added 2020/12/18 12:15 a.m.32 views

CVE-2020-13510

An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP using the IRP 0x9c4060d0 gives a low privilege user direct access to the IN instruction that is completely unrestrained at ...

6.5CVSS6.2AI score0.00375EPSS
SaveExploits1References1
Prion
Prion
added 2020/12/18 12:15 a.m.22 views

Information disclosure

An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP using the IRP 0x9c4060d0 gives a low privilege user direct access to the IN instruction that is completely unrestrained at ...

2.1CVSS6.2AI score0.00375EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2020/12/18 12:15 a.m.19 views

Information disclosure

An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406104 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability...

2.1CVSS5.1AI score0.00524EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2020/12/18 12:00 a.m.8 views

PT-2020-13590 · Nzxt · Winring0X64 Driver +1

Name of the Vulnerable Software and Affected Versions: NZXT CAM version 4.8.0 Description: A privilege escalation issue exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality. A specially crafted I/O request packet IRP can cause increased privileges. Using the IRP 0x9c40a0dc giv...

8.8CVSS8.7AI score0.00527EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2020/12/18 12:00 a.m.10 views

PT-2020-13591 · Nzxt · Nzxt Cam

Name of the Vulnerable Software and Affected Versions: NZXT CAM version 4.8.0 Description: A privilege escalation issue exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality. A specially crafted I/O request packet IRP can cause increased privileges. Using the IRP 0x9c40a0e0 giv...

8.8CVSS8.7AI score0.00527EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2020/12/18 12:00 a.m.10 views

PT-2020-13592 · Nzxt · Winring0X64 Driver +1

Name of the Vulnerable Software and Affected Versions: NZXT CAM version 4.8.0 Description: A privilege escalation issue exists in the WinRing0x64 Driver IRP 0x9c40a148 functionality. This allows an adversary to obtain elevated privileges by sending a specially crafted I/O request packet IRP. An...

8.8CVSS8.8AI score0.00527EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2020/12/18 12:00 a.m.17 views

PT-2020-13589 · Nzxt · Nzxt Cam

Name of the Vulnerable Software and Affected Versions: NZXT CAM version 4.8.0 Description: A privilege escalation issue exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality. A specially crafted I/O request packet IRP can cause increased privileges. Using the IRP 0x9c40a0d8 giv...

8.8CVSS8.7AI score0.00527EPSS
SaveExploits1References5
Rows per page
Query Builder