Lucene search
+L

4244 matches found

BDU FSTEC
BDU FSTEC
added 2022/11/17 12:0 a.m.14 views

The vulnerability of Group Policy Services in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of Group Policy Services in Windows operating systems is related to synchronization errors when using common resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

6.4CVSS6.9AI score0.00251EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2022/11/15 3:2 p.m.48 views

Moderate: Red Hat Security Advisory: rsync security and bug fix update

An update for rsync is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

9.8CVSS6.9AI score0.17852EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2022/11/15 1:30 p.m.6 views

389-ds-base: SIGSEGV in sync_repl

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service...

6.5CVSS5.8AI score0.01251EPSS
SaveExploits1References4
OSV
OSV
added 2022/11/15 6:20 a.m.39 views

RLSA-2022:8291 Moderate: rsync security and bug fix update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...

7CVSS8.9AI score0.17852EPSS
SaveExploits1References5
CNVD
CNVD
added 2022/11/15 12:0 a.m.85 views

Nextcloud has an unspecified vulnerability (CNVD-2022-77502)

A security vulnerability exists in Nextcloud Desktop Client, an open source self-hosted file synchronization and sharing communication application platform from Nextcloud Germany, which stems from the fact that its desktop client could be tricked into opening/executing local files when clicking o...

7.8CVSS1.6AI score0.00466EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/15 12:0 a.m.29 views

ALSA-2022:8291 Moderate: rsync security and bug fix update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...

9.8CVSS8.9AI score0.17852EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2022/11/15 12:0 a.m.14 views

The vulnerability in the functionality of Windows for connected users and telemetry allows a perpetrator to enhance their privileges.

The vulnerability of the functional capabilities for connected users and telemetry in the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.1AI score0.00375EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/11/15 12:0 a.m.9 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPPT) for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted PPTP packe...

8.1CVSS8.4AI score0.00929EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/11/15 12:0 a.m.11 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.1AI score0.00624EPSS
SaveExploits0References3
AlmaLinux
AlmaLinux
added 2022/11/15 12:0 a.m.48 views

Moderate: rsync security and bug fix update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...

9.8CVSS9.7AI score0.17852EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2022/11/15 12:0 a.m.9 views

The vulnerability of the Point-to-Point Tunneling Protocol network protocol implementation in the Windows operating system allows a hacker to induce a service failure.

The vulnerability of the Point-to-Point Tunneling Protocol network protocol implementation in the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to remotely cause service failures...

5.9CVSS6.8AI score0.00967EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/11/14 12:0 a.m.11 views

The vulnerability of the Windows operating system’s Storage Services allows a perpetrator to gain unauthorized access and increase their privileges.

The vulnerability of the Windows operating system’s Storage Services is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access and increase their privileges...

7CVSS7.1AI score0.00375EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/11/14 12:0 a.m.11 views

The vulnerability of the Windows Photo Import API of the Microsoft Windows operating system allows a perpetrator to gain unauthorized access to protected information and enhance their privileges.

The vulnerability of the Windows Photo Import API of the Microsoft Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and increase their privileges...

7CVSS7.2AI score0.00717EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2022/11/11 7:15 p.m.32 views

CVE-2022-41882

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will open the default editor for the file...

7.8CVSS6.9AI score0.00466EPSS
SaveExploits0References4
Prion
Prion
added 2022/11/11 7:15 p.m.30 views

Design/Logic Flaw

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will open the default editor for the file...

4.4CVSS7.5AI score0.00466EPSS
SaveExploits0References4Affected Software1
AlpineLinux
AlpineLinux
added 2022/11/11 12:0 a.m.721 views

CVE-2022-41882

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will open the default editor for the file...

7.8CVSS7AI score0.00466EPSS
SaveExploits0
CVE
CVE
added 2022/11/11 12:0 a.m.137 views

CVE-2022-41882

The CVE-2022-41882 entry concerns the Nextcloud Desktop Client. Affected product: Nextcloud Desktop Client prior to version 3.6.1. Root cause: clicking a nc://open/ link for a malicious shared file, when the file is locally synced or the virtual filesystem is enabled, can cause the default editor...

7.8CVSS6.8AI score0.00466EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/11 12:0 a.m.12 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPTP) network protocol in the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in the Microsoft Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially craft...

8.1CVSS8.2AI score0.01441EPSS
SaveExploits0References2
Veracode
Veracode
added 2022/11/10 12:44 a.m.25 views

Denial Of Service (DoS)

389-ds-base is vulnerable to Denial Of Service DoS. The vulnerability exists when the content synchronization plugin is enabled, allowing an attacker crash the application through the null pointer dereference by providing a maliciously crafted query...

6.5CVSS6.3AI score0.01251EPSS
SaveExploits1References11Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/09 12:0 a.m.11 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPTP) network protocol in the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Point to Point Tunneling Protocol PPTP network protocol implementation in the Microsoft Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS8.1AI score0.01086EPSS
SaveExploits0References2
Rows per page
Query Builder