Lucene search
K

765 matches found

CNVD
CNVD
added 2020/09/11 12:0 a.m.24 views

Microsoft Windows/Windows Server Information Disclosure Vulnerability (CNVD-2021-63315)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. Microsoft Windows/Windows Server is vulnerable to an information disclosure vulnerability that originates...

5.5CVSS1AI score0.01129EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/09/11 12:0 a.m.2 views

The vulnerability of the Windows Backup Service allows attackers to exploit their privileges.

The vulnerability of the Windows Backup Service in Microsoft Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00912EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/11 12:0 a.m.1 views

The vulnerability of the Windows Backup Service allows attackers to exploit their privileges.

The vulnerability of the Windows Backup Service in Microsoft Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.2AI score0.02678EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/11 12:0 a.m.2 views

The vulnerability of the Windows Backup Service allows attackers to exploit their privileges.

The vulnerability of the Windows Backup Service in Microsoft Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00795EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/09/09 12:0 a.m.24 views

Microsoft SharePoint Server 2019 < 16.0.10364.20001 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected...

9.3CVSS6.5AI score0.04906EPSS
Exploits0References20
BDU FSTEC
BDU FSTEC
added 2020/09/09 12:0 a.m.1 views

The vulnerabilities of Microsoft Office and Microsoft Excel, related to errors in memory object handling, allow attackers to disclose protected information.

The vulnerabilities of Microsoft Office and Microsoft Excel are related to errors in memory object handling. Exploiting these vulnerabilities can allow attackers to disclose sensitive information that is protected by security measures...

5CVSS6.5AI score0.04639EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/09 12:0 a.m.2 views

The vulnerability of Microsoft Word, related to errors in memory object processing, allows attackers to exploit this to disclose protected information.

The vulnerability of Microsoft Word relates to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS6.5AI score0.04553EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/09 12:0 a.m.1 views

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Windows operating system allows a perpetrator to escalate their privileges.

The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

9CVSS7.4AI score0.02905EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/09 12:0 a.m.2 views

The vulnerability of the Windows Speech Shell component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Speech Shell component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00931EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2020/09/08 7:0 a.m.23 views

Windows Function Discovery Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...

7.8CVSS3.8AI score0.00939EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2020/09/02 12:0 a.m.2 views

The vulnerability of the relational database management system used by Microsoft Access programs within the Microsoft Office and Office 365 suites allows a perpetrator to execute arbitrary code.

The vulnerability of the relational database management system used by Microsoft Access programs within the Microsoft Office and Office 365 suites exists due to errors in object processing in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS7.6AI score0.02678EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/02 12:0 a.m.3 views

The vulnerability of the Microsoft Windows Codecs Library, used for processing media content on Windows operating systems, stems from errors in memory object handling. This vulnerability allows attackers to execute arbitrary code.

The vulnerability of the Microsoft Windows Codecs Library, used for processing media content, in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

9.3CVSS8.1AI score0.04926EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/09/02 12:0 a.m.4 views

Microsoft Edge browser’s vulnerability, related to memory object handling errors, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS6.9AI score0.02984EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/02 12:0 a.m.3 views

The vulnerability of the Winsock driver in the Windows operating system, related to errors in object handling in memory, allows attackers to exploit their privileges.

The vulnerability of the Winsock driver in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially crafted application...

7.8CVSS7.2AI score0.00856EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/09/02 12:0 a.m.3 views

The vulnerability of the Win32k component in Windows operating systems, related to errors in memory object handling, allows attackers to exploit this to disclose protected information.

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

5.5CVSS6.2AI score0.04813EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/09/02 12:0 a.m.2 views

The vulnerability of the Windows Backup Engine backup system allows attackers to escalate their privileges.

The vulnerability of the Windows Backup Engine backup system in operating systems involves errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.2AI score0.00795EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/02 12:0 a.m.1 views

The vulnerability of the Internet Explorer browser’s script handler allows a hacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.6AI score0.08839EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/08/28 12:0 a.m.2 views

The vulnerability of the Jet Database Engine database management system in the Windows operating system, related to errors in object processing in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of the Jet Database Engine database management system in the Windows operating system is related to errors in object processing in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

9.3CVSS7.7AI score0.0393EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/08/28 12:0 a.m.2 views

The vulnerability of the Microsoft Office suite relates to errors in memory object handling, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office package is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.03169EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/08/28 12:0 a.m.2 views

The vulnerability of the ChakraCore JavaScript script engine component in the Microsoft Edge web browser, based on EdgeHTML, relates to memory object handling flaws. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script engine component in the Microsoft Edge web browser, based on EdgeHTML, is related to memory object handling flaws. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

9.3CVSS7.8AI score0.0451EPSS
Exploits0References4
Rows per page
Query Builder