Lucene search
+L

2169 matches found

WPVulnDB
WPVulnDB
added 2022/03/28 12:0 a.m.13 views

Modern Events Calendar Lite < 6.4.7 - Reflected Cross-Site Scripting

The plugin does not escape some generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting PoC On a page where the Total Booking widget is displayed, append the following payload: "...

1.8AI score
SaveExploits0Affected Software1
CNVD
CNVD
added 2022/03/14 12:0 a.m.60 views

Mcafee McAfee Total Protection Competitive Conditions Vulnerability

McAfee McAfee Total Protection MTP is a suite of antivirus software from Mcafee, Inc. McAfee Total Protection for Windows 16.0.43 previously contained a competitive condition vulnerability that could be exploited by a local attacker to gain elevated privileges and execute arbitrary files Delete...

7.5CVSS4.2AI score0.00325EPSS
SaveExploits0References1
NVD
NVD
added 2022/03/10 11:15 p.m.25 views

CVE-2022-0280

A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted and potentially cause denial of...

7.5CVSS0.00325EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/10 11:15 p.m.7 views

CVE-2022-0280

A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted and potentially cause denial of...

7.5CVSS7.1AI score0.00325EPSS
SaveExploits0References2
Prion
Prion
added 2022/03/10 11:15 p.m.16 views

Race condition

A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted and potentially cause denial of...

3.3CVSS6.9AI score0.00325EPSS
SaveExploits0References1
CVE
CVE
added 2022/03/10 10:35 p.m.94 views

CVE-2022-0280

The CVE-2022-0280 issue affects McAfee Total Protection for Windows, specifically the QuickClean feature. A race condition in QuickClean (prior to version 16.0.43) can be exploited by a local attacker to elevate privileges and delete arbitrary files, potentially causing data loss and denial of se...

7.5CVSS6.7AI score0.00325EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/03/10 10:35 p.m.32 views

CVE-2022-0280 McAfee Total Protection (MTP) - File Deletion vulnerability

A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted and potentially cause denial of...

7.5CVSS7.8AI score0.00325EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.5 views

McAfee Total Protection 安全漏洞

McAfee McAfee Total Protection MTP is a suite of antivirus software from Mcafee, Inc. McAfee Total Protection for Windows 16.0.43 previously contained a competitive condition vulnerability that could be exploited by a local attacker to gain elevated privileges and execute arbitrary files Delete...

7.5CVSS5.9AI score0.00325EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2022/03/09 12:0 a.m.40 views

Bitdefender Total Security Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

6.1CVSS4.5AI score0.00557EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/09 12:0 a.m.71 views

Bitdefender Total Security Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS6.2AI score0.00758EPSS
SaveExploits0References1
NVD
NVD
added 2022/03/07 12:15 p.m.20 views

CVE-2021-4199

Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate local privileges to SYSTEM. This issu...

7.8CVSS0.00758EPSS
SaveExploits0References2
Prion
Prion
added 2022/03/07 12:15 p.m.30 views

Code injection

Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate local privileges to SYSTEM. This issu...

7.2CVSS7.6AI score0.00758EPSS
SaveExploits0References2Affected Software4
CVE
CVE
added 2022/03/07 11:35 a.m.95 views

CVE-2021-4199

CVE-2021-4199 is a local privilege-escalation flaw in Bitdefender products where BDReinit.exe’s crash-handling component suffers incorrect permission assignment for a critical resource, enabling a local attacker to escalate to SYSTEM. Affected are Bitdefender Total Security, Internet Security, An...

7.8CVSS7.7AI score0.00758EPSS
SaveExploits0References2Affected Software4
Cvelist
Cvelist
added 2022/03/07 11:35 a.m.40 views

CVE-2021-4199 Incorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017)

Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate local privileges to SYSTEM. This issu...

7.8CVSS7.8AI score0.00758EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/03/07 12:0 a.m.7 views

Bitdefender Total Security 代码问题漏洞

Bitdefender Total Security is a proactive threat protection software for PCs from the Romanian company Bitdefender. The program features antivirus, firewall, anti-spyware, privacy control, parental control. It also includes features such as System TuneUp. A security vulnerability exists in...

6.1CVSS6.3AI score0.00557EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2022/03/03 12:0 a.m.36 views

Kaspersky Total Security Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Kaspersky Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

6.1CVSS4.5AI score0.02518EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2022/02/26 12:0 a.m.15 views

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2022-1258)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9CVSS7.9AI score0.02032EPSS
SaveExploits0References2
Code423n4
Code423n4
added 2022/02/23 12:0 a.m.14 views

[WP-M2] Wrong implementation of TurboSafe.sol#less() may cause boosted record value in TurboMaster bigger than actual lead to BoostCapForVault and BoostCapForCollateral to be permanently occupied

Lines of code Vulnerability details // Get out current amount of Fei debt in the Turbo Fuse Pool. uint256 feiDebt = feiTurboCToken.borrowBalanceCurrentaddressthis; // If our debt balance decreased, repay the minimum. // The surplus Fei will accrue as fees and can be sweeped. if feiAmount feiDebt...

6.7AI score
SaveExploits0
NVD
NVD
added 2022/02/18 9:15 a.m.24 views

CVE-2020-8107

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions pri...

8.2CVSS0.00324EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/18 9:15 a.m.5 views

CVE-2020-8107

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions pri...

7.8CVSS7.1AI score0.00324EPSS
SaveExploits0References1
Rows per page
Query Builder