2067 matches found
Microsoft Windows VOLSNAP.SYS 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows VOLSNAP.SYS. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected: Window...
Buffer overflow
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...
CVE-2023-36377
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...
The vulnerability of the drivers zam64.sys and zam32.sys in the MalwareFox AntiMalware antivirus software allows a hacker to gain increased privileges.
The vulnerability of the zam64.sys and zam32.sys drivers in the MalwareFox AntiMalware software is related to deficiencies in access control. Exploiting this vulnerability can allow a hacker to enhance their privileges...
The vulnerability of the ftusbbus2.sys driver, a component of the IoControlCode utility in FabulaTech USB for Remote Desktop, allows a malicious actor to cause a service failure.
The vulnerability of the ftusbbus2.sys driver, a component of the IoControlCode utility in FabulaTech USB for Remote Desktop, is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to cause service failures...
Fedora: Security Advisory for rust-nettle-sys (FEDORA-2023-1d0d71b6aa)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 37 : rust-buffered-reader / rust-nettle / rust-nettle-sys / etc (2023-1d0d71b6aa)
The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-1d0d71b6aa advisory. - Update the sequoia-openpgp crate to version 1.16.0. - Update the nettle crate to version 7.3.0. - Update the nettle-sys crate to version 2.2.0. - Update th...
CVE-2023-2873
A vulnerability classified as critical was found in Twister Antivirus 8. This vulnerability affects the function 0x804f2143/0x804f217f/0x804f214b/0x80800043 in the library filppd.sys of the component IoControlCode Handler. The manipulation leads to memory corruption. Local access is required to...
PT-2023-2922 · Unknown · Twister Antivirus
Name of the Vulnerable Software and Affected Versions: Twister Antivirus version 8 Description: The issue is related to a buffer overflow in the filppd.sys file of the IoControlCode Handler in Twister Antivirus, leading to memory corruption. This can allow an attacker to impact the confidentialit...
PT-2023-21936 · Unknown · Escan Antivirus
Name of the Vulnerable Software and Affected Versions: eScan Antivirus version 22.0.1400.2443 Description: A problematic vulnerability was found in the function 0x22E008u in the library PROCOBSRVESX.SYS of the component IoControlCode Handler. The manipulation leads to null pointer dereference. It...
USN-6088-2 runc vulnerabilities
USN-6088-1 fixed vulnerabilities in runC. This update provides the corresponding updates for Ubuntu 16.04 LTS. It was discovered that runC incorrectly performed access control when mounting /proc to non-directories. An attacker could possibly use this issue to escalate privileges. CVE-2019-19921...
USN-6088-2: runC vulnerabilities
USN-6088-1 fixed vulnerabilities in runC. This update provides the corresponding updates for Ubuntu 16.04 LTS. It was discovered that runC incorrectly performed access control when mounting /proc to non-directories. An attacker could possibly use this issue to escalate privileges. CVE-2019-19921...
Malicious code in sys-scikit-learn (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a43a0e5d5c9f583954d954b1a27badf0220728b50a05983479b1e2e212e8c16e The OpenSSF Package Analysis project identified 'sys-scikit-learn' @ 17.8.18 pypi as malicious. It is considered malicious because: - The packag...
MAL-2023-1417 Malicious code in sys-selenium (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1ae15b4cab934fe2bdb8472ceb8f00edfd582688a810321e7e4814ca66cbe98 The OpenSSF Package Analysis project identified 'sys-selenium' @ 9.1.9 pypi as malicious. It is considered malicious because: - The package...
Malicious code in sys-selenium (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1ae15b4cab934fe2bdb8472ceb8f00edfd582688a810321e7e4814ca66cbe98 The OpenSSF Package Analysis project identified 'sys-selenium' @ 9.1.9 pypi as malicious. It is considered malicious because: - The package...
Malicious code in pylint-sys (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b069b475056c2219d8f5f62b9e0479ba4dfb9a18639f9afd674c9ef90359882d The OpenSSF Package Analysis project identified 'pylint-sys' @ 8.15.6 pypi as malicious. It is considered malicious because: - The package...
MAL-2023-1395 Malicious code in pylint-sys (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b069b475056c2219d8f5f62b9e0479ba4dfb9a18639f9afd674c9ef90359882d The OpenSSF Package Analysis project identified 'pylint-sys' @ 8.15.6 pypi as malicious. It is considered malicious because: - The package...
PT-2023-23451 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS versions up to 5.7.108 Description: The issue concerns a problem where an attacker can execute malicious scripts. This is possible due to a flaw in the sys info.php file, specifically through the parameters edit cfg powerby and edit c...
VulnCheck KEV: CVE-2018-5713
In Malwarefox Anti-Malware 2.72.169, the driver file zam64.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002010...