Lucene search
+L

2502 matches found

BDU FSTEC
BDU FSTEC
•added 2020/11/05 12:00 a.m.•20 views

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 wireless controller and Catalyst 9100 access points allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation in the Cisco IOS XE operating system for Cisco Catalyst 9800 wireless controller and Catalyst 9100 access points is related to errors in processing input data. Exploiting this vulnerability can allow...

7.4CVSS7.2AI score0.00507EPSS
SaveExploits0References3Affected Software1
Hacker One
Hacker One
•added 2020/10/26 5:00 a.m.•100 views

U.S. Dept Of Defense: [████] SQL Injections on Referer Header exploitable via Time-Based method

Summary: SQL Injections on Referer Header exploitable via Time-Based method Description: https://owasp.org/www-community/attacks/SQLInjection Impact https://owasp.org/www-community/attacks/SQLInjection Step-by-step Reproduction Instructions First, vulnerable points:...

7.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/10/20 10:35 a.m.•15 views

lookn4u.com Cross Site Scripting vulnerability OBB-1428481

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
OSV
OSV
•added 2020/10/16 11:15 p.m.•12 views

CVE-2020-16940

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first...

7.8CVSS7.1AI score0.01553EPSS
SaveExploits0References2
OSV
OSV
•added 2020/10/16 11:15 p.m.•9 views

CVE-2020-16877

An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targeted file that would normally require elevated permissions. To exploit this vulnerability, an attacker...

7.1CVSS7.1AI score0.00958EPSS
SaveExploits0References1
NVD
NVD
•added 2020/10/16 11:15 p.m.•26 views

CVE-2020-16877

An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targeted file that would normally require elevated permissions. To exploit this vulnerability, an attacker...

7.1CVSS0.00958EPSS
SaveExploits0References1
Prion
Prion
•added 2020/10/16 11:15 p.m.•25 views

Privilege escalation

An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targeted file that would normally require elevated permissions. To exploit this vulnerability, an attacker...

3.6CVSS7.6AI score0.00958EPSS
SaveExploits0References1Affected Software2
Prion
Prion
•added 2020/10/16 11:15 p.m.•39 views

Privilege escalation

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first...

4.9CVSS8.2AI score0.01553EPSS
SaveExploits0References2Affected Software5
Openbugbounty
Openbugbounty
•added 2020/10/16 12:27 p.m.•14 views

diskmoe.com Cross Site Scripting vulnerability OBB-1414911

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/16 12:00 a.m.•3 views

CVE-2020-16877: Undefined Security Weakness

An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targeted file that would normally require elevated permissions. To exploit this vulnerability, an attacker...

7.1CVSS5.9AI score0.00958EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/16 12:00 a.m.•7 views

CVE-2020-16940: Improper Privilege Management

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first...

7.8CVSS5.9AI score0.01553EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2020/10/13 7:00 a.m.•51 views

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targeted file that would normally require elevated permissions. To exploit this vulnerability, an attacker...

7.1CVSS4AI score0.00958EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2020/10/13 7:00 a.m.•49 views

Windows - User Profile Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first...

7.8CVSS4.2AI score0.01553EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2020/10/13 12:00 a.m.•5 views

PT-2020-4337 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: An elevation of privilege issue exists due to improper handling of reparse points by Microsoft Windows. This could allow an attacker to overwrite or delete targeted files that...

7.1CVSS6.5AI score0.00958EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2020/10/13 12:00 a.m.•14 views

PT-2020-4375 · Microsoft · Windows User Profile Service +1

Name of the Vulnerable Software and Affected Versions: Windows User Profile Service ProfSvc affected versions not specified Description: The issue is related to the improper handling of junction points by the Windows User Profile Service ProfSvc, which can allow an attacker to elevate their...

7.8CVSS7.2AI score0.01553EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2020/10/08 12:00 a.m.•20 views

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause service interruptions.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to...

7.4CVSS7.2AI score0.00507EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/10/08 12:00 a.m.•19 views

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to...

7.4CVSS7.2AI score0.00507EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/10/08 12:00 a.m.•22 views

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to...

7.4CVSS6.9AI score0.00571EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/10/08 12:00 a.m.•25 views

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to...

7.4CVSS6.9AI score0.00458EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2020/09/29 12:00 a.m.•18 views

Cisco IOS and IOS XE Input Validation Error Vulnerability (CNVD-2020-70878)

Cisco IOS and IOS XE are both products of Cisco USA. the CLI is one of the command line interfaces. A security vulnerability exists in the Control and Provisioning Wireless Access Point CAPWAP protocol of the Cisco IOS XE software for the Cisco Catalyst 9800 series wireless controllers, which ste...

7.4CVSS7.1AI score0.00433EPSS
SaveExploits0References1
Rows per page
Query Builder