Lucene search
+L

6975 matches found

attackerkb
attackerkb
•added 2022/05/03 8:15 p.m.•8 views

CVE-2022-28782

Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard. The patch blocks entry point of the vulnerability...

4.6CVSS5.9AI score0.00105EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/05/03 8:15 p.m.•22 views

CVE-2022-28782

Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard. The patch blocks entry point of the vulnerability...

4.6CVSS5.8AI score0.00105EPSS
SaveExploits0References1
Prion
Prion
•added 2022/05/03 8:15 p.m.•22 views

Improper access control

Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard. The patch blocks entry point of the vulnerability...

2.1CVSS4.6AI score0.00105EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/05/03 7:40 p.m.•93 views

CVE-2022-28782

CVE-2022-28782 concerns Samsung’s Contents To Window in the context of the SMR May-2022 Release 1. The issue is described as an improper access control that could allow a physical attacker to install a package before the Setup wizard finishes. The available remediation is a patch that blocks the ...

4.6CVSS4.5AI score0.00105EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/05/03 7:40 p.m.•42 views

CVE-2022-28782

Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard. The patch blocks entry point of the vulnerability...

4.6CVSS4.9AI score0.00105EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/03 12:00 a.m.•5 views

CVE-2022-28782: Improper Protection of Alternate Path

Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard. The patch blocks entry point of the vulnerability...

4.6CVSS5.6AI score0.00105EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/05/03 12:00 a.m.•18 views

PT-2022-19230 · Unknown · Contents To Window

Name of the Vulnerable Software and Affected Versions: Contents To Window versions prior to SMR May-2022 Release 1 Description: The issue is related to improper access control, allowing a physical attacker to install a package before the completion of the Setup wizard. This can be exploited by a...

4.6CVSS4.3AI score0.00105EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/05/03 12:00 a.m.•15 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox that originates from the reuse of an existing pop-up window. A remote attacker exploits the vulnerability to trick a victim into visiting a specially...

6.5CVSS7.8AI score0.00637EPSS
SaveExploits0References20
Github Security Blog
Github Security Blog
•added 2022/05/02 3:56 a.m.•54 views

Improper input validation in Mort Bay Jetty

Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal...

7.5CVSS3.5AI score0.03245EPSS
SaveExploits1References6Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/02 3:56 a.m.•37 views

GHSA-6JXP-7G74-2RC3 Improper input validation in Mort Bay Jetty

Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal...

7.3CVSS7.1AI score0.03245EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/04/26 9:15 p.m.•14 views

mariadb: save_window_function_values triggers an abort during IN subquery

savewindowfunctionvalues in MariaDB before 10.6.3 allows an application crash because of incorrect handling of withwindowfunc=true for a subquery...

5.5CVSS7.4AI score0.00387EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/04/26 5:34 p.m.•14 views

mariadb: save_window_function_values triggers an abort during IN subquery

savewindowfunctionvalues in MariaDB before 10.6.3 allows an application crash because of incorrect handling of withwindowfunc=true for a subquery...

5.5CVSS7.4AI score0.00387EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2022/04/22 9:15 p.m.•13 views

CVE-2022-0354

A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a System Update package released before 2022-02-25 that displays a command prompt window...

7.8CVSS7.4AI score0.00256EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/22 12:00 a.m.•7 views

CVE-2022-0354: Cleartext Storage of Sensitive Information in GUI

A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a System Update package released before 2022-02-25 that displays a command prompt window...

7.8CVSS7.5AI score0.00256EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2022/04/15 7:15 p.m.•5 views

CVE-2022-24546

Windows DWM Core Library Elevation of Privilege Vulnerability...

7.8CVSS7.1AI score0.0082EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/15 7:15 p.m.•17 views

CVE-2022-24546

Windows DWM Core Library Elevation of Privilege Vulnerability...

7.8CVSS7.1AI score0.0082EPSS
SaveExploits0References3Affected Software10
attackerkb
attackerkb
•added 2022/04/14 1:15 p.m.•9 views

CVE-2022-27445

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sqlwindow.cc...

7.5CVSS7AI score0.02174EPSS
SaveExploits1References4
osv_debian
osv_debian
•added 2022/04/14 1:15 p.m.•12 views

DEBIAN-CVE-2022-27445

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sqlwindow.cc...

7.5CVSS7.8AI score0.02174EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2022/04/14 1:15 p.m.•16 views

AZL-9409 CVE-2022-27445 affecting package mariadb for versions less than 10.6.8-1

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sqlwindow.cc...

7.5CVSS7.2AI score0.02174EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/04/14 1:15 p.m.•11 views

UBUNTU-CVE-2022-27445

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sqlwindow.cc...

7.5CVSS7.1AI score0.02174EPSS
SaveExploits1References5
Rows per page
Query Builder