Lucene search
K

6027 matches found

Cvelist
Cvelist
added 2023/01/11 4:32 p.m.23 views

CVE-2022-4457 WARP client manifest misconfiguration leading to Task Hijacking

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...

5.5CVSS5.5AI score0.00167EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/01/11 4:32 p.m.11 views

CVE-2022-4457 WARP client manifest misconfiguration leading to Task Hijacking

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...

5.5CVSS6.4AI score0.00167EPSS
Exploits0References1
CVE
CVE
added 2023/01/11 4:32 p.m.61 views

CVE-2022-4457

The CVE-2022-4457 issue concerns the WARP client for Android, where a misconfiguration in the app manifest enables a task hijacking attack. This could let a malicious app hijack legitimate apps and potentially exfiltrate sensitive data when installed on a victim’s device. Documented details acros...

5.5CVSS5.3AI score0.00167EPSS
Exploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2023/01/11 4:32 p.m.25 views

CVE-2022-4457

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...

5.5CVSS5.4AI score0.00167EPSS
Exploits0References1
The Hacker News
The Hacker News
added 2023/01/11 2:24 p.m.37 views

Australian Healthcare Sector Targeted in Latest Gootkit Malware Attacks

A recent wave of Gootkit malware loader attacks has targeted the Australian healthcare sector by leveraging legitimate tools like VLC Media Player. Gootkit, also called Gootloader, is known to employ search engine optimization SEO poisoning tactics aka spamdexing for initial access. It typically...

1.7AI score
Exploits0
Positive Technologies
Positive Technologies
added 2023/01/11 12:0 a.m.5 views

PT-2023-14506 · Unknown · Warp Client For Android

Name of the Vulnerable Software and Affected Versions: WARP client for Android affected versions not specified Description: The issue is caused by a misconfiguration in the manifest file of the WARP client for Android, allowing a task hijacking attack. An attacker can create a malicious mobile...

5.5CVSS5.1AI score0.00167EPSS
Exploits0References6
CNNVD
CNNVD
added 2023/01/11 12:0 a.m.5 views

Cloudflare WARP 安全漏洞

Cloudflare WARP Cloudflare Vpn is a client application for secure connections from Cloudflare, Inc. in the United States. Cloudflare WARP suffers from a security vulnerability that stems from a misconfiguration in its client's manifest file that could allow an attacker to implement execution task...

5.5CVSS6AI score0.00167EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/01/11 12:0 a.m.36 views

Microsoft Windows Multiple Vulnerabilities (KB5022352)

This host is missing an important security update according to Microsoft KB5022352 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.1CVSS7.6AI score0.41538EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2023/01/10 10:15 p.m.3 views

CVE-2023-21541

Windows Task Scheduler Elevation of Privilege Vulnerability...

7.8CVSS7.1AI score0.00562EPSS
Exploits0References3Affected Software25
OSV
OSV
added 2023/01/10 10:15 p.m.2 views

CVE-2023-21541

Windows Task Scheduler Elevation of Privilege Vulnerability...

7.8CVSS7.1AI score0.00562EPSS
Exploits0References1
NVD
NVD
added 2023/01/10 10:15 p.m.22 views

CVE-2023-21541

Windows Task Scheduler Elevation of Privilege Vulnerability...

7.8CVSS8.1AI score0.00562EPSS
Exploits0References1
Prion
Prion
added 2023/01/10 10:15 p.m.17 views

Privilege escalation

Windows Task Scheduler Elevation of Privilege Vulnerability...

4.3CVSS7.7AI score0.00562EPSS
Exploits0References1Affected Software3
Talos Blog
Talos Blog
added 2023/01/10 7:18 p.m.52 views

Microsoft Patch Tuesday for January 2023 — Snort rules and prominent vulnerabilities

Microsoft released its monthly security update on Tuesday, disclosing 98 vulnerabilities. Of these vulnerabilities, 11 are classified as "Critical", 87 are classified as "Important", no vulnerability classified as "Moderate." According to Microsoft all "Critical" vulnerability are either less...

1.1AI score0.65417EPSS
Exploits13
Microsoft CVE
Microsoft CVE
added 2023/01/10 8:0 a.m.159 views

Windows Task Scheduler Elevation of Privilege Vulnerability

...

7.8CVSS8.1AI score0.00562EPSS
Exploits0
CVE
CVE
added 2023/01/10 12:0 a.m.211 views

CVE-2023-21541

Technical details about CVE-2023-21541 are not provided in the connected documents. Based on available data, no specifics on affected components, root cause, or fixes are included here. Monitor for updates from authoritative sources.

7.8CVSS7.7AI score0.00562EPSS
Exploits0References1Affected Software15
Cvelist
Cvelist
added 2023/01/10 12:0 a.m.44 views

CVE-2023-21541 Windows Task Scheduler Elevation of Privilege Vulnerability

...

7.8CVSS8.3AI score0.00562EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.3 views

PT-2023-1138 · Microsoft · Windows Task Scheduler +1

Name of the Vulnerable Software and Affected Versions: Windows Task Scheduler affected versions not specified Description: The issue is related to insufficient access control in the Windows Task Scheduler, which can be exploited to elevate privileges. This allows an attacker to affect the system...

7.8CVSS7.5AI score0.00562EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2023/01/10 12:0 a.m.26 views

CVE-2023-21541 Windows Task Scheduler Elevation of Privilege Vulnerability

...

7.8CVSS6.7AI score0.00562EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/01/10 12:0 a.m.10 views

Microsoft Windows Task Scheduler 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Task Scheduler. An attacker can exploit the vulnerability to elevate privileges...

7.8CVSS7.6AI score0.00562EPSS
Exploits0References5
Kaspersky
Kaspersky
added 2023/01/10 12:0 a.m.96 views

KLA20158 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of...

9.1CVSS9.7AI score0.41538EPSS
Exploits3References63
Rows per page
Query Builder