Lucene search
K

44 matches found

Vulnrichment
Vulnrichment
added 2026/01/21 5:27 p.m.4 views

CVE-2021-47869 BRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service Path

Brother BRAdmin Professional 3.75 contains an unquoted service path vulnerability in the BRAScheduler service that allows local users to potentially execute arbitrary code. Attackers can place a malicious executable named 'BRAdmin' in the C:\Program Files x86\Brother\ directory to gain local syst...

8.5CVSS5.9AI score0.00129EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/01/21 5:27 p.m.5 views

CVE-2021-47869

Brother BRAdmin Professional 3.75 contains an unquoted service path vulnerability in the BRAScheduler service that allows local users to potentially execute arbitrary code. Attackers can place a malicious executable named 'BRAdmin' in the C:\Program Files x86\Brother\ directory to gain local syst...

8.5CVSS5.7AI score0.00129EPSS
Exploits0References5Affected Software1
CNNVD
CNNVD
added 2026/01/21 12:0 a.m.4 views

Brother BRAdmin Professional code-related vulnerabilities

Brother BRAdmin Professional is a device management software developed by the American company Brother. Version 3.75 of Brother BRAdmin Professional contains a code vulnerability. This vulnerability stems from the BRAScheduler service having a service path that is not properly quoted, which may...

8.5CVSS6.1AI score0.00129EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/11/12 6:1 p.m.2 views

CVE-2025-60707

Use after free in Multimedia Class Scheduler Service MMCSS allows an authorized attacker to elevate privileges locally...

7.8CVSS5.5AI score0.00463EPSS
Exploits0References1
OSV
OSV
added 2025/11/11 6:15 p.m.2 views

CVE-2025-60707

Use after free in Multimedia Class Scheduler Service MMCSS allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00463EPSS
Exploits0References3
EUVD
EUVD
added 2025/11/11 5:59 p.m.7 views

EUVD-2025-93439

Use after free in Multimedia Class Scheduler Service MMCSS allows an authorized attacker to elevate privileges locally...

7.8CVSS5.5AI score0.00463EPSS
Exploits0References2
CVE
CVE
added 2025/11/11 5:59 p.m.17 views

CVE-2025-60707

CVE-2025-60707 is described in the connected documents as a use-after-free vulnerability in the Multimedia Class Scheduler Service (MMCSS) that can enable an authorized, local attacker to escalate privileges. The NCSC advisory explicitly associates this CVE with MMCSS and marks the impact as obta...

7.8CVSS5.5AI score0.00463EPSS
Exploits0References3Affected Software10
Microsoft CVE
Microsoft CVE
added 2025/11/11 8:0 a.m.4 views

Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability

Use after free in Multimedia Class Scheduler Service MMCSS allows an authorized attacker to elevate privileges locally...

7.8CVSS5.6AI score0.00463EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.8 views

PT-2025-46470

Name of the Vulnerable Software and Affected Versions Multimedia Class Scheduler Service MMCSS affected versions not specified Description A use after free condition exists in the Multimedia Class Scheduler Service MMCSS. This allows a locally authorized attacker to elevate privileges...

7.8CVSS5.4AI score0.00463EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/11/11 12:0 a.m.4 views

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A resource management error vulnerability exists in Microsoft Windows Multimedia Class Scheduler Service MMCSS. An attacker could exploit the vulnerability to elevate privileges. The followin...

7.8CVSS5.2AI score0.00463EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-1999-1351

Malware in sbrugna...

7.2CVSS6.4AI score0.01344EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-24933

Malware in sbrugna...

9.8CVSS9.4AI score0.00943EPSS
Exploits0References2
Snyk
Snyk
added 2025/09/17 8:23 p.m.1 views

Missing Encryption of Sensitive Data

Overview Affected versions of this package are vulnerable to Missing Encryption of Sensitive Data via the DownloadTinyFile function. An attacker can intercept and modify file downloads by performing a man-in-the-middle attack on network traffic, potentially causing peers to receive malicious file...

6.9CVSS6.6AI score0.0013EPSS
Exploits0References2
NVD
NVD
added 2021/10/22 12:15 p.m.19 views

CVE-2021-38481

The scheduler service running on a specific TCP port enables the user to start and stop jobs. There is no sanitation of the supplied JOB ID provided to the function. An attacker may send a malicious payload that can enable the user to execute another SQL expression by sending a specific string...

9.8CVSS0.00943EPSS
Exploits0References1
OSV
OSV
added 2021/10/22 12:15 p.m.6 views

CVE-2021-38481

The scheduler service running on a specific TCP port enables the user to start and stop jobs. There is no sanitation of the supplied JOB ID provided to the function. An attacker may send a malicious payload that can enable the user to execute another SQL expression by sending a specific string...

9.8CVSS5.9AI score0.00943EPSS
Exploits0References1
CVE
CVE
added 2021/10/22 11:22 a.m.55 views

CVE-2021-38481

CVE-2021-38481 is an SQL Injection vulnerability in the scheduler service of AUVESY Versiondog. The issue arises from lack of sanitation of the supplied JOB ID, enabling an attacker to send a payload that could cause SQL expressions to be executed. Affected are Versiondog deployments prior to the...

9.8CVSS9.3AI score0.00943EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/22 11:22 a.m.24 views

CVE-2021-38481 AUVESY Versiondog

The scheduler service running on a specific TCP port enables the user to start and stop jobs. There is no sanitation of the supplied JOB ID provided to the function. An attacker may send a malicious payload that can enable the user to execute another SQL expression by sending a specific string...

8.1CVSS9.9AI score0.00943EPSS
Exploits0References1
Prion
Prion
added 2020/05/21 11:15 p.m.19 views

Security feature bypass

A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC, aka 'Windows Task Scheduler Security Feature Bypass Vulnerability'...

9.3CVSS7.3AI score0.07277EPSS
Exploits2References1Affected Software5
Tenable Nessus
Tenable Nessus
added 2020/05/12 12:0 a.m.84 views

KB4556854: Windows Server 2008 May 2020 Security Update

The remote Windows host is missing security update 4556854 or cumulative update 4556860. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited thi...

9.9CVSS8.3AI score0.52778EPSS
Exploits17References33
OpenVAS
OpenVAS
added 2019/06/12 12:0 a.m.154 views

Microsoft Windows Multiple Vulnerabilities (KB4503267)

This host is missing a critical security update according to Microsoft KB4503267 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

9.3CVSS7.3AI score0.48043EPSS
Exploits17References3
Rows per page
Query Builder