Lucene search
+L

15415 matches found

CNNVD
CNNVD
added 2022/05/10 12:00 a.m.9 views

Microsoft Lightweight Directory Access Protocol 输入验证错误漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation. Microsoft Windows LDAP is vulnerable to remote code execution, which can be exploited by attackers to execute code on the target host...

8.8CVSS8.5AI score0.02336EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.115 views

Microsoft Windows Active Directory Certificate Services Improper Authorization Privilege Escalation Vulnerability

This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of Microsoft Windows Active Directory Certificate Services. Authentication is required to exploit this vulnerability. The specific flaw exists within the issuance of certificates. By including...

9CVSS3.9AI score0.82989EPSS
SaveExploits8References1
Check Point Advisories
Check Point Advisories
added 2022/05/10 12:00 a.m.35 views

Microsoft Windows Print Spooler Elevation of Privilege (CVE-2022-29104)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

4.6CVSS5.7AI score0.1209EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2022/05/10 12:00 a.m.166 views

KLA12526 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, bypass security restrictions, gain privileges, cause denial of service, spoof user interface. Below is a complete list of...

9.8CVSS9.8AI score0.82989EPSS
SaveExploits11References86
CNNVD
CNNVD
added 2022/05/10 12:00 a.m.10 views

Microsoft Lightweight Directory Access Protocol 输入验证错误漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation. Microsoft Windows LDAP is vulnerable to remote code execution, which can be exploited by attackers to execute code on the target host...

9CVSS8.5AI score0.02736EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.49 views

Microsoft Windows Print Spooler Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Print Spooler...

7CVSS6.2AI score0.1209EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.48 views

Microsoft Windows CreateObjectHandler Deserialization of Untrusted Data Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS6.8AI score0.00848EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.58 views

Microsoft Windows Print Spooler Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Print Spooler...

7CVSS6.2AI score0.1209EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.43 views

Microsoft Windows Print Spooler Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Print Spooler...

7CVSS6.2AI score0.1209EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.46 views

Microsoft Windows Print Spooler Service Directory Traversal Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Pri...

5.5CVSS3AI score0.0123EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.21 views

Microsoft Windows Kernel Bitmap Surface Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

8.8CVSS4.6AI score0.09154EPSS
SaveExploits0References1
Fedora
Fedora
added 2022/05/07 5:12 a.m.42 views

[SECURITY] Fedora 36 Update: freerdp-2.7.0-1.fc36

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

9.8CVSS8.6AI score0.02752EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2022/05/05 12:00 a.m.12 views

The vulnerability of the Windows Event Tracing service in Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Event Tracing service in Microsoft Windows is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.2AI score0.00523EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/04/28 12:00 a.m.27 views

Schneider Electric Uncontrolled Search Path Element in embedded Rockwell Automation ISaGRAF5 Runtime (CVE-2020-25182)

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled loading of dynamic libraries could allow a local, unauthenticated attacker to execute arbitrary code. This vulnerability only affects ISaGRAF Runtime when running on Microsoft...

6.7CVSS6.6AI score0.00446EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2022/04/28 12:00 a.m.24 views

Rockwell Automation ISaGRAF5 Runtime Uncontrolled Search Path Element (CVE-2020-25182)

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled loading of dynamic libraries could allow a local, unauthenticated attacker to execute arbitrary code. This vulnerability only affects ISaGRAF Runtime when running on Microsoft...

6.7CVSS6.7AI score0.00446EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2022/04/28 12:00 a.m.209 views

Link-Local Multicast Name Resolution (LLMNR) Service Detection

The Link-Local Multicast Name Resolution LLMNR service allows both IPv4 and IPv6 hosts to perform name resolution for hosts on the same local link %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid160301;...

5.4AI score
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2022/04/27 12:00 a.m.17 views

Microsoft Windows Active Directory Privilege Escalation Multiple Vulnerabilities (CVE-2021-42278; CVE-2021-42287)

Multiple Privilege Escalation vulnerabilities exists in Microsoft Windows Active Directory. Successful exploitation of this vulnerability could allow a remote attacker to easily elevate their privilege to that of a domain admin once he compromise a regular user in the domain...

6.5CVSS3.9AI score0.75805EPSS
SaveExploits10
CISA KEV Catalog
CISA KEV Catalog
added 2022/04/25 12:00 a.m.59 views

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation...

7CVSS3.8AI score0.09817EPSS
SaveIn wildExploits2
CISA KEV Catalog
CISA KEV Catalog
added 2022/04/25 12:00 a.m.38 views

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation...

7CVSS3.8AI score0.0295EPSS
SaveIn wildExploits2
VulnCheck KEV
VulnCheck KEV
added 2022/04/25 12:00 a.m.8 views

VulnCheck KEV: CVE-2022-21919

Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation...

7CVSS7.3AI score0.0295EPSS
SaveExploits2References1
Rows per page
Query Builder