Lucene search
+L

2076 matches found

Openbugbounty
Openbugbounty
added 2020/10/20 10:35 a.m.12 views

lookn4u.com Cross Site Scripting vulnerability OBB-1428481

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
OSV
OSV
added 2020/10/16 11:15 p.m.6 views

CVE-2020-16940

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first...

7.8CVSS7.1AI score0.01553EPSS
SaveExploits0References2
OSV
OSV
added 2020/10/16 11:15 p.m.5 views

CVE-2020-16877

An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targeted file that would normally require elevated permissions. To exploit this vulnerability, an attacker...

7.1CVSS7.1AI score0.00958EPSS
SaveExploits0References1
NVD
NVD
added 2020/10/16 11:15 p.m.20 views

CVE-2020-16877

An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targeted file that would normally require elevated permissions. To exploit this vulnerability, an attacker...

7.1CVSS0.00958EPSS
SaveExploits0References1
Prion
Prion
added 2020/10/16 11:15 p.m.22 views

Privilege escalation

An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targeted file that would normally require elevated permissions. To exploit this vulnerability, an attacker...

3.6CVSS7.6AI score0.00958EPSS
SaveExploits0References1Affected Software2
Prion
Prion
added 2020/10/16 11:15 p.m.31 views

Privilege escalation

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first...

4.9CVSS8.2AI score0.01553EPSS
SaveExploits0References2Affected Software5
Openbugbounty
Openbugbounty
added 2020/10/16 12:27 p.m.11 views

diskmoe.com Cross Site Scripting vulnerability OBB-1414911

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/10/13 7:0 a.m.45 views

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targeted file that would normally require elevated permissions. To exploit this vulnerability, an attacker...

7.1CVSS4AI score0.00958EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/10/13 7:0 a.m.42 views

Windows - User Profile Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first...

7.8CVSS4.2AI score0.01553EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/10/13 12:0 a.m.7 views

PT-2020-4375 · Microsoft · Windows User Profile Service +1

Name of the Vulnerable Software and Affected Versions: Windows User Profile Service ProfSvc affected versions not specified Description: The issue is related to the improper handling of junction points by the Windows User Profile Service ProfSvc, which can allow an attacker to elevate their...

7.8CVSS7.2AI score0.01553EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2020/10/13 12:0 a.m.3 views

PT-2020-4337 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: An elevation of privilege issue exists due to improper handling of reparse points by Microsoft Windows. This could allow an attacker to overwrite or delete targeted files that...

7.1CVSS6.5AI score0.00958EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2020/10/08 12:0 a.m.11 views

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to...

7.4CVSS6.9AI score0.00571EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/08 12:0 a.m.10 views

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause service interruptions.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to...

7.4CVSS7.2AI score0.00507EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/08 12:0 a.m.11 views

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to...

7.4CVSS6.9AI score0.00458EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/08 12:0 a.m.10 views

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to...

7.4CVSS7.2AI score0.00507EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2020/09/29 12:0 a.m.7 views

Cisco IOS and IOS XE Input Validation Error Vulnerability (CNVD-2020-70878)

Cisco IOS and IOS XE are both products of Cisco USA. the CLI is one of the command line interfaces. A security vulnerability exists in the Control and Provisioning Wireless Access Point CAPWAP protocol of the Cisco IOS XE software for the Cisco Catalyst 9800 series wireless controllers, which ste...

7.4CVSS7.1AI score0.00433EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/24 6:15 p.m.11 views

CVE-2020-3560

A vulnerability in Cisco Aironet Access Points APs could allow an unauthenticated, remote attacker to cause a denial of service DoS on an affected device. The vulnerability is due to improper resource management while processing specific packets. An attacker could exploit this vulnerability by...

8.6CVSS7.3AI score0.01415EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/24 6:15 p.m.18 views

CVE-2020-3552

A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points APs Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this...

7.4CVSS0.00486EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/24 6:15 p.m.8 views

CVE-2020-3494

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition of an affected...

7.4CVSS7.1AI score0.00433EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/24 6:15 p.m.7 views

CVE-2020-3399

A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition of an affected device. The...

8.6CVSS7.6AI score0.01361EPSS
SaveExploits0References1
Rows per page
Query Builder