Lucene search
+L

2169 matches found

Cvelist
Cvelist
added 2021/10/28 1:50 p.m.40 views

CVE-2021-3576 Privilege escalation via SeImpersonatePrivilege

Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\System. Impersonation enables the server thread to perform actions on behalf of the client but within the limits of the client's security...

7.8CVSS7.7AI score0.00942EPSS
SaveExploits0References3
CVE
CVE
added 2021/10/28 1:50 p.m.64 views

CVE-2021-3576

CVE-2021-3576 is a local privilege-escalation vulnerability in Bitdefender products (Endpoint Security Tools and Total Security). The root cause is an impersonation flaw where an untrusted process can impersonate the client of a pipe, enabling a local attacker to elevate to NT AUTHORITY\System. A...

7.8CVSS7.4AI score0.00942EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2021/10/28 1:50 p.m.28 views

CVE-2021-3579 Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe

Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This issue affects: Bitdefender Endpoint...

7.8CVSS7.7AI score0.00708EPSS
SaveExploits0References2
CVE
CVE
added 2021/10/28 1:50 p.m.66 views

CVE-2021-3579

CVE-2021-3579 affects Bitdefender Endpoint Security Tools for Windows and Bitdefender Total Security prior to 7.2.1.65. The issue is an Incorrect Default Permissions in the bdservicehost.exe and Vulnerability.Scan.exe components, enabling a local attacker to escalate privileges to NT AUTHORITY\SY...

7.8CVSS7.4AI score0.00708EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2021/10/28 12:0 a.m.4 views

Total Security 安全漏洞

K7 Computing Total Security is a suite of antivirus software for the Windows platform from K7 Computing. A security vulnerability exists in Total Security that stems from an unwanted privilege enforcement vulnerability in the Bitdefender Endpoint Security tool, which allows a local attacker to...

7.8CVSS7.3AI score0.00942EPSS
SaveExploits0References7
Zero Day Initiative
Zero Day Initiative
added 2021/10/28 12:0 a.m.29 views

(0Day) Bitdefender Total Security Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7CVSS5.9AI score0.00942EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/10/28 12:0 a.m.41 views

(0Day) Bitdefender Total Security Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7CVSS5.9AI score0.00942EPSS
SaveExploits0
OSV
OSV
added 2021/10/26 10:15 p.m.8 views

CVE-2021-23877

Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection MTP prior to 16.0.34x may allow a local user to run arbitrary code as the admin user by replacing a specific temporary file created during the installation of the trial version of MTP...

7.8CVSS7.3AI score0.00358EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/26 10:15 p.m.26 views

Privilege escalation

Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection MTP prior to 16.0.34x may allow a local user to run arbitrary code as the admin user by replacing a specific temporary file created during the installation of the trial version of MTP...

7.2CVSS7.7AI score0.00358EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/10/26 10:15 p.m.2 views

CVE-2021-23877

Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection MTP prior to 16.0.34x may allow a local user to run arbitrary code as the admin user by replacing a specific temporary file created during the installation of the trial version of MTP...

7.8CVSS0.00358EPSS
SaveExploits0References2
CVE
CVE
added 2021/10/26 9:40 p.m.66 views

CVE-2021-23877

CVE-2021-23877 concerns the Windows trial installer of McAfee Total Protection (MTP) prior to version 16.0.34_x. The issue enables a local user to escalate privileges by replacing a specific temporary file created during installation, potentially allowing code execution with admin privileges. Aff...

7.8CVSS7.2AI score0.00358EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/26 9:40 p.m.24 views

CVE-2021-23877 McAfee Total Protection (MTP) - Privilege Escalation vulnerability

Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection MTP prior to 16.0.34x may allow a local user to run arbitrary code as the admin user by replacing a specific temporary file created during the installation of the trial version of MTP...

6.7CVSS7.9AI score0.00358EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/26 12:0 a.m.7 views

McAfee Total Protection 安全漏洞

Mcafee McAfee Total Protection MTP is a suite of antivirus software from Mcafee, Inc. in the United States. A security vulnerability exists in McAfee Total Protection MTP that stems from a lack of security measures such as authentication, access control, and privilege management in a network syst...

7.8CVSS7.3AI score0.00358EPSS
SaveExploits0References2
0day.today
0day.today
added 2021/10/19 12:0 a.m.339 views

Online Motorcycle (Bike) Rental System 1.0 - Blind Time-Based SQL Injection Exploit

Exploit Title: Online Motorcycle Bike Rental System 1.0 - Blind Time-Based SQL Injection Unauthenticated Exploit Author: Chase ComardelleCASO Vendor Homepage: https://www.sourcecodester.com/php/14989/online-motorcycle-bike-rental-system-phpoop-source-code.html Software Link:...

7.4AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2021/10/12 9:0 a.m.3 views

CVE-2021-3579

Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This issue affects: Bitdefender Endpoint...

7.8CVSS5.5AI score0.00708EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/10/12 9:0 a.m.5 views

CVE-2021-3576

Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\System. Impersonation enables the server thread to perform actions on behalf of the client but within the limits of the client's security...

7.8CVSS5.5AI score0.00942EPSS
SaveExploits0References4
OPENSUSE Linux
OPENSUSE Linux
added 2021/10/11 12:0 a.m.73 views

Security update for MozillaFirefox (important)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2021:3331-1 Rating: important References: 1188891 1189547 1190269 1190274 1190710 1191332 Cross-References: CVE-2021-29980 CVE-2021-29981 CVE-2021-29982 CVE-2021-29983 CVE-2021-29984 CVE-2021-29985...

7.5CVSS6.9AI score0.01923EPSS
SaveExploits7References6
OSV
OSV
added 2021/10/01 11:44 a.m.5 views

SUSE-SU-2021:14821-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: This update contains the Firefox Extended Support Release 91.1.0 ESR. Fixed: Various stability, functionality, and security fixes MFSA 2021-40 bsc1190269, bsc1190274: CVE-2021-38492: Navigating to mk: URL scheme could load Internet Explor...

8.8CVSS9.4AI score0.01451EPSS
SaveExploits7References19
Code423n4
Code423n4
added 2021/09/15 12:0 a.m.11 views

Vault.balanceOfThis values all tokens equally

Handle cmichel Vulnerability details The Vault.balanceOfThis function values all tokens equally. They are normalized to 18 decimals and then simply added up: for uint8 i; i tokens.length; i++ address token = tokensi; // adds up different tokens here, treating them as exactly equal value 1.0 A = 1...

6.7AI score
SaveExploits0
Kitploit
Kitploit
added 2021/09/03 12:30 p.m.56 views

MobileAudit - SAST and Malware Analysis for Android Mobile APKs

Django Web application for performing Static Analysis and detecting malware in Android APKs In each of the scans, it would have the following information: Application Info Security Info Components SAST Findings Best Practices Implemented Virus Total Info Certificate Info Strings Databases Files F...

7.3AI score
SaveExploits0References5
Rows per page
Query Builder