Lucene search
K

33 matches found

RedhatCVE
RedhatCVE
added 2025/12/17 7:0 p.m.4 views

CVE-2025-46294

To enhance security, the FileMaker Server 22.0.4 installer now includes an option to disable IIS short filename enumeration by setting NtfsDisable8dot3NameCreation in the Windows registry. This prevents attackers from using the tilde character to discover hidden files and directories. This...

5.3CVSS6.7AI score0.00041EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/16 6:7 p.m.25 views

CVE-2025-46294

To enhance security, the FileMaker Server 22.0.4 installer now includes an option to disable IIS short filename enumeration by setting NtfsDisable8dot3NameCreation in the Windows registry. This prevents attackers from using the tilde character to discover hidden files and directories. This...

0.00041EPSS
Exploits0References1
CVE
CVE
added 2025/12/16 6:7 p.m.7 views

CVE-2025-46294

The CVE describes a vulnerability in FileMaker Server relating to IIS short filename enumeration (8.3) that could enable information disclosure. Affected: FileMaker Server, prior to/including version 22.0.4; remediation is addressed in 22.0.4 with an option to disable 8.3 name creation. Root caus...

5.3CVSS6.3AI score0.00041EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2009-0269

Malware in sbrugna...

10CVSS6.4AI score0.00427EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/09/29 12:0 a.m.1 views

PT-2025-39898

Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 25.1.102 Vasion Print formerly PrinterLogic Application versions prior to 25.1.1413 Description Vasion Print formerly PrinterLogic Virtual Appliance Host and Applicati...

9.5CVSS7.9AI score0.00756EPSS
Exploits1References11
RedhatCVE
RedhatCVE
added 2025/03/12 10:48 a.m.6 views

CVE-2025-27254

CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass. The software's startup authentication can be disabled by altering a Windows registry setting that any user can modify...

8CVSS7AI score0.0001EPSS
Exploits0References1
NVD
NVD
added 2025/03/10 9:15 a.m.6 views

CVE-2025-27254

CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass. The software's startup authentication can be disabled by altering a Windows registry setting that any user can modify...

8CVSS0.0001EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/03/10 9:5 a.m.5 views

CVE-2025-27254

CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass. The software's startup authentication can be disabled by altering a Windows registry setting that any user can modify...

8CVSS6.6AI score0.0001EPSS
Exploits0References2
Citrix
Citrix
added 2024/10/16 12:0 a.m.13 views

"An Account is not Configured" Displayed On Startup when AllowAddStore is set to N in Registry

Citrix Workspace app for Windows is being configured via command line arguments and then launched programmatically The following error is displayed: An Account is not Configured. Please contact your administrator...

7.3AI score
Exploits0
Citrix
Citrix
added 2023/12/01 12:0 a.m.9 views

UviProcessExcludes registry setting disappears after Citrix VDA upgrade

After upgrading Citrix VDA, the UviProcessExcludes registry setting disappears...

7.1AI score
Exploits0
Citrix
Citrix
added 2023/10/27 12:0 a.m.8 views

Unable to Create Memory Dump from Windows 2008 R2 Servers after Installing Service Pack 1

Unable to get the operating system to generate complete memory dumps on Windows 2008 R2 servers after updating the server to Service Pack 1 for Windows 2008 R2. The issue was observed on XenApp 6 servers in various environments: Physical servers XenServer virtual machine XenServer with Provisioni...

7.1AI score
Exploits0
Carbon Black Blog
Carbon Black Blog
added 2020/11/24 4:0 p.m.57 views

3 Ways to Hunt for the ZeroLogon Vulnerability on Your Windows Servers

Vulnerability assessment and patch management can be painful time-consuming processes. From the Security team looking at vulnerability reports and prioritizing the riskiest ones for their environment to the IT or Infrastructure team determining exactly which machines need to be patched and...

1.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2020/05/28 12:0 a.m.1292 views

Windows 10 / Windows Server 2016 September 2017 Information Disclosure Vulnerability (CVE-2017-8529)

The remote Windows host is missing a security update or a registry setting required to enable protections for CVE-2017-8529. It is, therefore, affected by an information disclosure vulnerability: - An information disclosure vulnerability exists when affected Microsoft scripting engines do not...

6.5CVSS6.5AI score0.25242EPSS
Exploits0References2
Microsoft KB
Microsoft KB
added 2020/04/14 12:0 a.m.5 views

January 7, 2020, update for Office 2016 (KB4464586)

January 7, 2020, update for Office 2016 KB4464586 This article describes update 4464586 for Microsoft Office 2016 that was released on January 7, 2020.Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2016. It doesn't apply t...

6.3AI score
Exploits0
0day.today
0day.today
added 2020/04/06 12:0 a.m.36 views

Microsoft NET USE win10 - Insufficient Authentication Logic Exploit

Title: Microsoft NET USE win10 - Insufficient Authentication Logic Date: 2020-04-04 Author: hyp3rlinx Vendor: www.microsoft.com CVE: N/A + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source:...

0.2AI score
Exploits0
Veeam
Veeam
added 2019/10/18 8:38 p.m.35 views

Veeam Recovery Media creating fails with "This access control list is not in canonical form and therefore cannot be modified" error

Challenge During a Veeam Agent for Microsoft Windows backup job the following warning occurs: Collecting recovery media files Details: This access control list is not in canonical form and therefore cannot be modified. Copy The warning may appear in the following cases: Veeam Recovery Media is...

6.8AI score
Exploits0
Microsoft CVE
Microsoft CVE
added 2019/08/13 7:0 a.m.81 views

Encryption Key Negotiation of Bluetooth Vulnerability

Executive Summary Microsoft is aware of the Bluetooth BR/EDR basic rate/enhanced data rate, known as "Bluetooth Classic" key negotiation vulnerability that exists at the hardware specification level of any BR/EDR Bluetooth device. An attacker could potentially be able to negotiate the offered key...

9.3CVSS9AI score0.04145EPSS
Exploits2
Microsoft KB
Microsoft KB
added 2018/09/10 12:0 a.m.3 views

April 17, 2018—KB4093113 (Preview of Monthly Rollup)

April 17, 2018—KB4093113 Preview of Monthly Rollup Improvements and fixes This non-security update includes improvements and fixes that were a part of KB4093118 released April 10, 2018 and also includes these new quality improvements as a preview of the next Monthly Rollup update: Windows Update...

6.5AI score
Exploits0
Microsoft KB
Microsoft KB
added 2017/01/24 12:0 a.m.38 views

Microsoft Dynamics CRM 2011 Update Rollup 15

Microsoft Dynamics CRM 2011 Update Rollup 15 We have identified a compatibility issue that occurs when you use the Microsoft Dynamics CRM 2011 Client for Outlook with Update Rollup 15 applied against a Dynamics CRM 2013 server. This issue does not affect Dynamics CRM 2011 servers. A new Update...

6.7AI score
Exploits0
Veeam
Veeam
added 2016/02/15 12:0 a.m.15 views

Script execution on Linux target fails with “Permission Denied” even when executed as root.

Challenge When interacting with Linux servers, Veeam Backup & Replication may encounter a "Permission Denied" error during script execution Pre-freeze, post-thaw, and repository data mover agent scripts, even when the account being used is the root user. Cause All script files are uploaded to and...

7.3AI score
Exploits0
Rows per page
Query Builder