Lucene search
+L

11887 matches found

BDU FSTEC
BDU FSTEC
added 2023/07/28 12:00 a.m.9 views

The vulnerability of the DNS Server component of the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6.8CVSS7.3AI score0.00698EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/07/28 12:00 a.m.12 views

The vulnerability of the DNS Server component of the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6.8CVSS7.3AI score0.00698EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2023/07/27 11:25 a.m.44 views

The 4 Keys to Building Cloud Security Programs That Can Actually Shift Left

As cloud applications are built, tested and updated, they wind their way through an ever-complex series of different tools and teams. Across hundreds or even thousands of technologies that make up the patchwork quilt of development and cloud environments, security processes are all too often...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:00 a.m.15 views

The vulnerability of the vmwgfx driver in the Linux operating system allows a hacker to disclose protected information.

The vulnerability of the vmwgfx driver in the Linux operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

5.3CVSS6.6AI score0.00343EPSS
SaveExploits0References20Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:00 a.m.12 views

The vulnerability of the Windows Clip Service in the Windows operating system allows a hacker to escalate their privileges.

The vulnerability of the Windows Clip Service in the Windows operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7CVSS7.3AI score0.00287EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:00 a.m.12 views

The vulnerability of the Windows operating system’s kernel allows a hacker to gain unauthorized access to the device.

The vulnerability of the Windows operating system’s kernel is related to synchronization errors when using a shared resource „Race Condition“. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

7CVSS7.2AI score0.00299EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:00 a.m.10 views

The vulnerability of the Windows operating system’s kernel allows a hacker to gain unauthorized access to the device.

The vulnerability of the Windows operating system’s kernel is related to synchronization errors when using a shared resource „Race Condition“. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

7CVSS7.2AI score0.00299EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:00 a.m.14 views

The vulnerability of Microsoft Excel editors arises from synchronization errors when using a shared resource, allowing an intruder to gain unauthorized access to the device.

The vulnerability of Microsoft Excel editors arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

5.5CVSS6.6AI score0.00756EPSS
SaveExploits0References2
Veracode
Veracode
added 2023/07/22 4:54 a.m.22 views

Server-Side Request Forgery (SSRF)

gitlab is vulnerable to Server-Side Request Forgery SSRF. The vulnerability exists because the shared address spaces are not blocked for requests, allowing an attacker to cause blind SSRF attacks...

9.1CVSS6.9AI score0.01138EPSS
SaveExploits1References4Affected Software1
HackRead
HackRead
added 2023/07/20 10:22 p.m.25 views

The Metaverse is connected to cryptocurrencies – but not so much to Bitcoin

By Owais Sultan The Metaverse refers to a virtual space or a collective virtual shared space, created by the convergence of… This is a post from HackRead.com Read the original post: The Metaverse is connected to cryptocurrencies – but not so much to Bitcoin...

6.9AI score
SaveExploits0
OSV
OSV
added 2023/07/20 3:15 p.m.17 views

AZL-37022 CVE-2023-34967 affecting package samba 4.18.3-2

A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the mdssvc protocol...

5.3CVSS6.5AI score0.61199EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/20 3:15 p.m.20 views

AZL-27660 CVE-2023-34967 affecting package samba 4.12.5-7

A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the mdssvc protocol...

5.3CVSS6.5AI score0.61199EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/20 3:15 p.m.21 views

DEBIAN-CVE-2023-34967

A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the mdssvc protocol...

5.3CVSS6.3AI score0.61199EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2023/07/20 2:57 p.m.89 views

CVE-2023-34967

A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the mdssvc protocol...

5.3CVSS6.4AI score0.61199EPSS
SaveExploits0
CNNVD
CNNVD
added 2023/07/20 12:00 a.m.9 views

Samba 安全漏洞

Samba is the standard Windows interoperability program suite for Linux and Unix. A security vulnerability exists in Samba versions prior to 4.18.5, which originates from an unauthenticated attacker who can exploit a lack of type validation to trigger a process crash in a shared worker process...

5.3CVSS6.5AI score0.61199EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.11 views

The vulnerability of Microsoft Defender operating systems for Windows, which allows a hacker to increase their privileges

The vulnerability of Microsoft Defender’s operating system vulnerabilities is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to increase their privileges...

6.3CVSS7.2AI score0.00272EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.10 views

The vulnerability of the Windows Installer installer on Windows operating systems allows a hacker to gain elevated privileges within the system.

The vulnerability of the Windows Installer installer on Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

7CVSS7.1AI score0.00395EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.13 views

The vulnerability of the Netskope client service, related to synchronization errors when using a shared resource, allows a perpetrator to increase their privileges.

The vulnerability of the Netskope client service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.1AI score0.00161EPSS
SaveExploits0References2Affected Software1
Packet Storm
Packet Storm
added 2023/07/20 12:00 a.m.14390 views

OpenSSH Forwarded SSH-Agent Remote Code Execution

Qualys Security Advisory CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent ======================================================================== Contents ======================================================================== Summary Background Experiments Results...

9.8CVSS7.1AI score0.797EPSS
SaveExploits37
SUSE CVE
SUSE CVE
added 2023/07/19 11:22 p.m.6 views

SUSE CVE-2023-34967

A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the mdssvc protocol...

5.3CVSS6.8AI score0.61199EPSS
SaveExploits0References14
Rows per page
Query Builder