Lucene search
+L

3032 matches found

CNNVD
CNNVD
•added 2023/03/18 12:00 a.m.•16 views

Max Secure Anti Virus Plus 安全漏洞

Max Secure Anti Virus Plus is a suite of antivirus software from Max Secure India. A security vulnerability exists in Max Secure Anti Virus Plus version 19.0.2.1, which originates in the MaxProc64.sys library of the IoControlCode Handler module and may result in a denial of service...

5.5CVSS5.6AI score0.00317EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2023/03/18 12:00 a.m.•15 views

PT-2023-17027 · Max Secure · Max Secure Anti Virus Plus

Name of the Vulnerable Software and Affected Versions: Max Secure Anti Virus Plus version 19.0.2.1 Description: A critical issue was found, affecting the function 0x220020 in the library SDActMon.sys of the component IoControlCode Handler. This leads to improper access controls. The attack must b...

5.5CVSS6.9AI score0.00302EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/18 12:00 a.m.•4 views

CVE-2023-1492: Improper Resource Shutdown or Release

A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been declared as problematic. This vulnerability affects the function 0x220019 in the library MaxProc64.sys of the component IoControlCode Handler. The manipulation of the argument SystemBuffer leads to denial of service...

5.5CVSS5.3AI score0.00317EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/18 12:00 a.m.•7 views

CVE-2023-1486: Improper Access Control

A vulnerability classified as problematic was found in Lespeed WiseCleaner Wise Force Deleter 1.5.3.54. This vulnerability affects the function 0x220004 in the library WiseUnlock64.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is...

7.1CVSS5.2AI score0.00511EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/18 12:00 a.m.•6 views

CVE-2023-1493: Improper Resource Shutdown or Release

A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been rated as problematic. This issue affects the function 0x220019 in the library MaxProctetor64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack o...

5.5CVSS5.2AI score0.00317EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/03/17 12:00 a.m.•20 views

Watchdog Anti-Virus 代码问题漏洞

Watchdog Anti-Virus is an anti-virus program from Watchdog USA. A code issue vulnerability exists in Watchdog Anti-Virus version 1.4.214.0, which stems from an unknown function in the library wsdk-driver.sys in the component IoControlCode Handler, resulting in a denial of service...

5.5CVSS5.6AI score0.00329EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/03/17 12:00 a.m.•18 views

Filseclab Twister Antivirus 安全漏洞

Filseclab Twister Antivirus is an intelligent antivirus from Fair Filseclab. A security vulnerability exists in Filseclab Twister Antivirus version 8, which stems from an unknown code found in fildds.sys, resulting in a denial of service...

7.8CVSS6.6AI score0.01641EPSS
SaveExploits1References5
Prion
Prion
•added 2023/03/15 5:15 a.m.•29 views

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within the application...

4.3CVSS6.5AI score0.00282EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/15 12:00 a.m.•4 views

CVE-2023-27234: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within the application...

6.5CVSS5.8AI score0.00282EPSS
SaveExploits1References3
Mend
Mend
•added 2023/03/15 12:00 a.m.•4 views

CVE-2023-27234

A Cross-Site Request Forgery CSRF in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within the application...

7.1CVSS0.00282EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/03/15 12:00 a.m.•13 views

PT-2023-21018 · Jizhicms · Jizhicms

Name of the Vulnerable Software and Affected Versions: Jizhicms version 2.4.5 Description: A Cross-Site Request Forgery CSRF issue in the /Sys/index.html endpoint of the application allows attackers to make arbitrary configuration changes within the application. This can be exploited by attackers...

6.5CVSS6.5AI score0.00282EPSS
SaveExploits1References6
CVE
CVE
•added 2023/03/14 4:55 p.m.•205 views

CVE-2023-23410

CVE-2023-23410 is described as a Windows HTTP.sys Elevation of Privilege Vulnerability. The initial document provides CVSS 3.1 metrics: local attack vector, low attack complexity, privileges required low, and impact high on confidentiality, integrity, and availability, with a base score of 7.8. C...

7.8CVSS7.6AI score0.0795EPSS
SaveExploits0References1Affected Software13
Positive Technologies
Positive Technologies
•added 2023/03/08 12:00 a.m.•3 views

PT-2023-1705

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version containing the fix for the issue introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067 Description The issue is related to a double free in the s...

5.5CVSS0.00274EPSS
SaveExploits0References49
zdt
zdt
•added 2023/03/07 12:00 a.m.•495 views

Oracle Database 19c Access Bypass Vulnerability

Oracle Database Vault had a flaw that would allow unauthorized privileged users to extract data from a protected table. Oracle 19c versions 19.18 and below are affected. Fixed in the Oracle Critical Patch Update October 2022. Title: Oracle Database Vault Protected Table With Realm Data Extraction...

6.8AI score
SaveExploits0
OSV
OSV
•added 2023/03/06 8:15 a.m.•18 views

CVE-2023-1189

A vulnerability was found in WiseCleaner Wise Folder Hider 4.4.3.202. It has been declared as problematic. Affected by this vulnerability is the function 0x222400/0x222404/0x222410 in the library WiseFs64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An...

5.5CVSS4.5AI score0.00381EPSS
SaveExploits2References3
NVD
NVD
•added 2023/03/06 8:15 a.m.•38 views

CVE-2023-1189

A vulnerability was found in WiseCleaner Wise Folder Hider 4.4.3.202. It has been declared as problematic. Affected by this vulnerability is the function 0x222400/0x222404/0x222410 in the library WiseFs64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An...

5.5CVSS4.5AI score0.00381EPSS
SaveExploits2References3
Prion
Prion
•added 2023/03/06 8:15 a.m.•29 views

Design/Logic Flaw

A vulnerability was found in WiseCleaner Wise Folder Hider 4.4.3.202. It has been declared as problematic. Affected by this vulnerability is the function 0x222400/0x222404/0x222410 in the library WiseFs64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An...

1.7CVSS5.5AI score0.00381EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/06 12:00 a.m.•4 views

CVE-2023-1189: Improper Resource Shutdown or Release

A vulnerability was found in WiseCleaner Wise Folder Hider 4.4.3.202. It has been declared as problematic. Affected by this vulnerability is the function 0x222400/0x222404/0x222410 in the library WiseFs64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An...

5.5CVSS5AI score0.00381EPSS
SaveExploits2References2
OSV
OSV
•added 2023/02/26 1:15 p.m.•17 views

CVE-2023-1047

A vulnerability classified as critical was found in TechPowerUp RealTemp 3.7.0.0. This vulnerability affects unknown code in the library WinRing0x64.sys. The manipulation leads to improper initialization. An attack has to be approached locally. The exploit has been disclosed to the public and may...

7.8CVSS5.1AI score0.00395EPSS
SaveExploits0References3
NVD
NVD
•added 2023/02/26 1:15 p.m.•59 views

CVE-2023-1047

A vulnerability classified as critical was found in TechPowerUp RealTemp 3.7.0.0. This vulnerability affects unknown code in the library WinRing0x64.sys. The manipulation leads to improper initialization. An attack has to be approached locally. The exploit has been disclosed to the public and may...

7.8CVSS6.2AI score0.00395EPSS
SaveExploits0References3
Rows per page
Query Builder