CVE-2022-24285

CVE-2022-24285 affects Acer Care Center 4.00.30xx prior to 4.00.3042. The issue arises when a user process communicates with the ACCsvc System Privileges service via a named pipe that is granted Read/Write rights to general users, and the service does not authenticate the user. A thread may trigg...

CVE-2022-24286

Acer QuickAccess 2.01.300x before 2.01.3030 and 3.00.30xx before 3.00.3038 contains a local privilege escalation vulnerability. The user process communicates with a service of system authority through a named pipe. In this case, the Named Pipe is also given Read and Write rights to the general...

Exposure of Sensitive Information to an Unauthorized Actor in httpie

Impact HTTPie have the practical concept of sessions, which help users to persistently store some of the state that belongs to the outgoing requests and incoming responses on the disk for further usage. As an example, we can make an authenticated request and save it to a named session called api:...

CVE-2021-40376

otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interfaces over a .NET named pipe. A remote attack may be possible as well, by leveraging WsHTTPBinding for HTTP traffic on TCP port 9000...

CVE-2021-40376

CVE-2021-40376 affects otris Update Manager 1.2.1.0. The vulnerability allows local users to obtain SYSTEM privileges by sending unauthenticated calls to exposed interfaces via a .NET named pipe. A remote attack may be possible by abusing WsHTTPBinding for HTTP traffic on TCP port 9000. CVSS data...

The vulnerability of the Named Pipe File System component of the Windows operating system, which allows a hacker to exploit their privileges

The vulnerability of the Named Pipe File System component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2021-44550

An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java lines 158 and 159...

EulerOS Virtualization 3.0.6.6 : bind (EulerOS-SA-2022-1109)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In BIND 9.8.5 - 9.8.8, 9.9.3 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIN...

CVE-2022-24924

An improper access control in LiveWallpaperService prior to versions 3.0.9.0 allows to create a specific named system directory without a proper permission...

PT-2022-16985 · Unknown · Livewallpaperservice

Name of the Vulnerable Software and Affected Versions: LiveWallpaperService versions prior to 3.0.9.0 Description: The issue is related to improper access control in LiveWallpaperService, allowing the creation of a specific named system directory without proper permission. Recommendations: For...

CVE-2022-22715

Named Pipe File System Elevation of Privilege Vulnerability...

CVE-2022-22715

Named Pipe File System Elevation of Privilege Vulnerability...

Privilege escalation

Named Pipe File System Elevation of Privilege Vulnerability...

CVE-2022-22715

CVE-2022-22715 corresponds to a Windows Named Pipe File System Elevation of Privilege vulnerability. The Electronically published data indicate a local, low‑privilege attack with no user interaction that could yield high impact to confidentiality, integrity, and availability. The connected record...

CVE-2022-22715 Named Pipe File System Elevation of Privilege Vulnerability

...

Named Pipe File System Elevation of Privilege Vulnerability

...

Microsoft Windows Named Pipe File System 数字错误漏洞

Microsoft Windows Named Pipe File System is a named pipe file system from Microsoft Corporation USA. A numeric error vulnerability exists in Microsoft Windows Named Pipe File System. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 180...

KLA12457 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. The vulnerabilities potentially enable a malicious person to launch attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code execution User rights...

PT-2022-1678 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Named Pipe File System component of the Windows operating system and involves insecure privilege management. Exploitation of this issue may allow an attacker to...