Lucene search
+L

1265 matches found

ATTACKERKB
ATTACKERKB
added 2022/05/09 1:00 p.m.6 views

CVE-2022-27167

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET...

7.1CVSS7.1AI score0.00182EPSS
SaveExploits0References2Affected Software9
OSV
OSV
added 2022/05/03 8:15 p.m.10 views

CVE-2022-28783

Improper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to uninstall arbitrary packages without permission. The patch adds proper validation logic for removing package name...

7.1CVSS5.9AI score0.00097EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/05/03 8:15 p.m.4 views

CVE-2022-28783

Improper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to uninstall arbitrary packages without permission. The patch adds proper validation logic for removing package name...

7.1CVSS7.1AI score0.00097EPSS
SaveExploits0References2
Prion
Prion
added 2022/05/03 8:15 p.m.17 views

Input validation

Improper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to uninstall arbitrary packages without permission. The patch adds proper validation logic for removing package name...

3.6CVSS7AI score0.00097EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/05/03 7:40 p.m.81 views

CVE-2022-28783

CVE-2022-28783 concerns Galaxy Themes prior to Samsung SMR May-2022 Release 1, where improper validation allowed uninstalling arbitrary packages without permission. The description in multiple sources confirms the root cause as insufficient validation for removing a package name, enabling unautho...

7.1CVSS6.9AI score0.00097EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/05/03 12:00 a.m.8 views

Samsung SMR 输入验证错误漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in Samsung SMR that stems from improper validation of deleted package names in Galaxy Themes. An attacker could exploit the vulnerability to uninsta...

7.1CVSS7.3AI score0.00097EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2022/04/27 12:00 a.m.229 views

Miele Benchmark Programming Tool 1.1.49 / 1.2.71 Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Privilege Escalation product: Miele Benchmark Programming Tool vulnerable version: at least 1.1.49 and 1.2.71 fixed version: 1.2.72 CVE number: CVE-2022-22521 impact:...

1AI score0.00521EPSS
SaveExploits2
ATTACKERKB
ATTACKERKB
added 2022/04/06 10:15 a.m.10 views

CVE-2022-23440

A use of hard-coded cryptographic key vulnerability CWE-321 in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment...

7.8CVSS7.1AI score0.00197EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/06 10:15 a.m.28 views

CVE-2022-23440

A use of hard-coded cryptographic key vulnerability CWE-321 in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment...

7.8CVSS0.00197EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/06 10:15 a.m.11 views

CVE-2022-23440

A use of hard-coded cryptographic key vulnerability CWE-321 in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment...

7.8CVSS7.1AI score0.00197EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/06 10:15 a.m.24 views

Hardcoded credentials

A use of hard-coded cryptographic key vulnerability CWE-321 in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment...

4.6CVSS7.3AI score0.00197EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/04/06 9:30 a.m.12 views

CVE-2022-23440

A use of hard-coded cryptographic key vulnerability CWE-321 in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment...

7.8CVSS6.5AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/04/06 9:30 a.m.33 views

CVE-2022-23440

A use of hard-coded cryptographic key vulnerability CWE-321 in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment...

7.8CVSS7.6AI score0.00197EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2022/03/24 7:09 p.m.32 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Spectrum Control and Tivoli Storage Productivity Center April 2016 CPU (CVE-2016-3426)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition and IBM® Runtime Environment Java™ Technology Edition that is shipped and used by IBM Spectrum Control and Tivoli Storage Productivity Center. These issues were disclosed as part of the IBM Java SDK updates in April...

4.3CVSS0.8AI score0.02795EPSS
SaveExploits0Affected Software1
HackRead
HackRead
added 2022/03/16 12:30 a.m.19 views

German Authorities Warn Against Using Kaspersky Products

By Waqas The Federal Office for Information Security in Germany has urged users to uninstall any Kaspersky product from their… This is a post from HackRead.com Read the original post: German Authorities Warn Against Using Kaspersky Products...

3.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2022/02/08 12:00 a.m.15 views

February 8, 2022-KB5010460 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016

None None...

6.1AI score
SaveExploits0
Intel
Intel
added 2022/02/08 12:00 a.m.33 views

Intel® Kernelflinger Advisory

Summary: A potential security vulnerability in the Kernelflinger open source project maintained by Intel® may allow escalation of privilege. Intel is releasing source code updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Kernelflinger...

7.8CVSS7.7AI score0.00241EPSS
SaveExploits0
Malwarebytes
Malwarebytes
added 2022/02/02 11:05 a.m.25 views

How to speed up your computer or laptop

Why do machines always throw a tantrum when you are in a hurry? It’s called Murphy’s Law which some people may know as the butter side down rule. Anything that can go wrong will go wrong. And usually at a time when it is most inconvenient. That being said, there are ways to speed things up. Let’s...

0.1AI score
SaveExploits0
Hacker One
Hacker One
added 2022/02/01 2:42 p.m.18 views

Shopify: User with no Develop apps permission can Uninstall Custom App

Hi, You know user must have Develop apps permission to Uninstall Develop apps to test this just create staff with Manage and install apps and channels F1601504 send this mutation just change appId by your id...

0.9AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2022/01/07 12:13 p.m.13 views

Norton’s Antivirus Product Now Includes an Ethereum Miner

Norton 360 can now mine Ethereum. Its opt-in, and the company keeps 15%. Its hard to uninstall this option...

1.6AI score
SaveExploits0
Rows per page
Query Builder