Lucene search
+L

195 matches found

BDU FSTEC
BDU FSTEC
•added 2017/01/13 12:00 a.m.•15 views

The vulnerability of the Windows operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the Virtual Secure Mode component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a local attacker to obtain confidential information through a specially created application...

3.3CVSS5.9AI score0.03274EPSS
SaveExploits0References3
NVD
NVD
•added 2016/11/10 6:59 a.m.•32 views

CVE-2016-7220

Virtual Secure Mode in Microsoft Windows 10 allows local users to obtain sensitive information via a crafted application, aka "Virtual Secure Mode Information Disclosure Vulnerability."...

3.3CVSS3AI score0.03274EPSS
SaveExploits0References3
Prion
Prion
•added 2016/11/10 6:59 a.m.•26 views

Information disclosure

Virtual Secure Mode in Microsoft Windows 10 allows local users to obtain sensitive information via a crafted application, aka "Virtual Secure Mode Information Disclosure Vulnerability."...

2.1CVSS5.8AI score0.03274EPSS
SaveExploits0References3
CVE
CVE
•added 2016/11/10 6:16 a.m.•83 views

CVE-2016-7220

CVE-2016-7220 affects Windows 10 via the Virtual Secure Mode information-disclosure vulnerability. Root cause: improper handling of objects in memory within Windows Virtual Secure Mode. Impact: local information disclosure achievable by a crafted application; exploitation requires local access. P...

3.3CVSS4.5AI score0.03274EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2016/11/10 6:16 a.m.•41 views

CVE-2016-7220

Virtual Secure Mode in Microsoft Windows 10 allows local users to obtain sensitive information via a crafted application, aka "Virtual Secure Mode Information Disclosure Vulnerability."...

3.4AI score0.03274EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/11/10 12:00 a.m.•3 views

CVE-2016-7220: Exposure of Sensitive Information to an Unauthorized Actor

Virtual Secure Mode in Microsoft Windows 10 allows local users to obtain sensitive information via a crafted application, aka "Virtual Secure Mode Information Disclosure Vulnerability."...

3.3CVSS5.7AI score0.03274EPSS
SaveExploits0References2
CNVD
CNVD
•added 2016/11/09 12:00 a.m.•11 views

Microsoft Windows Virtual Secure Mode Local Information Leakage Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information leakage vulnerability exists in Microsoft Windows Virtual Secure Mode. An attacker could exploit the vulnerability to obtain sensitive information...

3.3CVSS6.1AI score0.03274EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2016/11/08 8:00 a.m.•30 views

Virtual Secure Mode Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows Virtual Secure Mode improperly handles objects in memory. A locally authenticated attacker who successfully exploited this vulnerability could be able to read sensitive information on the target system. To exploit the vulnerability, an...

6.5CVSS2AI score0.03274EPSS
SaveExploits0
Symantec
Symantec
•added 2016/11/08 12:00 a.m.•42 views

Microsoft Windows Virtual Secure Mode CVE-2016-7220 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based Systems...

2.1CVSS1.3AI score0.03274EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/05/31 12:00 a.m.•17 views

The vulnerability of the Windows operating system allows a perpetrator to bypass the protection mechanisms of Virtual Secure Mode Hypervisor Code Integrity.

The vulnerability of the Windows operating system is related to errors in security settings. Exploiting this vulnerability allows a malicious actor to bypass the Virtual Secure Mode Hypervisor Code Integrity protection mechanism and execute RWX page marking using a specially created application...

2.1CVSS6.3AI score0.01516EPSS
SaveExploits0References2
NVD
NVD
•added 2016/05/11 1:59 a.m.•42 views

CVE-2016-0181

Microsoft Windows 10 Gold and 1511 allows local users to bypass the Virtual Secure Mode Hypervisor Code Integrity HVCI protection mechanism and perform RWX markings of kernel-mode pages via a crafted application, aka "Hypervisor Code Integrity Security Feature Bypass."...

5.5CVSS5.3AI score0.01516EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2016/05/11 12:00 a.m.•49 views

Microsoft Windows Virtual Secure Mode Security Feature Bypass vulnerability (3155451)

This host is missing an important security update according to Microsoft Bulletin MS16-066. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

5.5CVSS6AI score0.01516EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
•added 2016/05/10 7:00 a.m.•91 views

Cumulative Update for Windows 10: May 10, 2016

None None...

9.3CVSS6.8AI score0.94062EPSS
SaveExploits24
Microsoft KB
Microsoft KB
•added 2016/05/10 7:00 a.m.•120 views

Cumulative Update for Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4: May 10, 2016

None None...

9.3CVSS6.8AI score0.94062EPSS
SaveExploits24
Tenable Nessus
Tenable Nessus
•added 2016/05/10 12:00 a.m.•44 views

MS16-066: Security Update for Virtual Secure Mode (3155451)

The remote Windows host is missing a security update. It is, therefore, affected by a security feature bypass vulnerability due to certain kernel-mode pages being marked as RWX Read, Write, Execute even when Hypervisor Code Integrity HVCI is enabled. An attacker can exploit this vulnerability, vi...

5.5CVSS6.6AI score0.01516EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2016/05/04 12:00 a.m.•35 views

Debian DLA-452-1 : smarty3 security update

Smarty3, a template engine for PHP, allowed remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by 'literal' in a template. For Debian 7 'Wheezy', these problems have been fixed in version 3.1.10-2+deb7u1. We recommend that you upgrade your smart...

7.5CVSS6.1AI score0.03127EPSS
SaveExploits1References3
OSV
OSV
•added 2016/05/03 12:00 a.m.•20 views

DLA-452-1 smarty3 - security update

Bulletin has no description...

7.5CVSS6AI score0.03127EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2015/02/12 12:00 a.m.•45 views

SOL16124 - OpenSSL vulnerability CVE-2015-0206

The SOD process is only vulnerable if the failover.secure db variable is enabled; the db variable is disabled by default. Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed...

5CVSS1.3AI score0.5736EPSS
SaveExploits0References4
F5 Networks
F5 Networks
•added 2015/02/11 12:00 a.m.•71 views

SOL16123 - OpenSSL vulnerability CVE-2014-3571

The SOD process is only vulnerable if the failover.secure database variable is enabled; the database variable is disabled by default. Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to th...

5CVSS1.4AI score0.22964EPSS
SaveExploits0References4
Mageia
Mageia
•added 2014/11/21 12:44 p.m.•38 views

Updated php-smarty packages fix security vulnerability

Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "literal" in a template CVE-2014-8350...

7.5CVSS7.3AI score0.03127EPSS
SaveExploits1References2
Rows per page
Query Builder