2006 matches found
CVE-2024-45077 IBM Maximo Asset Management file upload
IBM Maximo Asset Management 7.6.1.3 MXAPIASSET API is vulnerable to unrestricted file upload which allows authenticated low privileged user to upload restricted file types with a simple method of adding a dot to the end of the file name if Maximo is installed on Windows operating system...
The vulnerability of the kubelet utility, a management tool for clusters of virtual machines in Kubernetes, for Windows operating systems allows a hacker to execute arbitrary commands.
The vulnerability of the kubelet utility in the Kubernetes cluster management software for Windows operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the Windows operating system’s Telephony Service allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows operating system’s Telephony Service is related to overflowing buffers in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the BitLocker component of the Windows operating system, which allows a hacker to disclose protected information
The vulnerability of the BitLocker component of the Windows operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...
PT-2025-15256 · Microsoft · Windows
Уязвимость операционной системы Windows 10 22H2 связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании ядра операционной системы...
The vulnerability of the SmartScreen security component against phishing and malicious software attacks in Windows operating systems allows attackers to carry out spear-phishing attacks.
The vulnerability of the SmartScreen security component against phishing and malicious programs in Windows operating systems is related to errors in information representation by the user interface. Exploiting this vulnerability allows a remote attacker to carry out phishing attacks...
The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to disclose sensitive information that is protected by this mechanism.
The vulnerability of the Kerberos protocol for Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...
ROS-20250120-01
Vulnerability of Mozilla Firefox, Firefox ESR and Thunderbird email client browsers of operating systems Windows is related to leaked video frames from different sources. Exploitation of the vulnerability could allow a remote attacker to gain access to potentially sensitive information...
The vulnerability of the Digital Media component of Windows operating systems, which allows a perpetrator to elevate their privileges to a system-level level
The vulnerability of the Digital Media component of Windows operating systems relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system-level level...
The vulnerability of the Digital Media component of Windows operating systems, which allows attackers to enhance their privileges
The vulnerability of the Digital Media component of Windows operating systems relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Security Account Manager (SAM) on Windows operating systems allows a perpetrator to trigger a service failure.
The vulnerability of the Security Account Manager SAM on Windows operating systems is related to mutual blocking of execution threads. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Digital Media component of Microsoft Windows operating systems, which allows attackers to enhance their privileges
The vulnerability of the Digital Media component of Microsoft Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the MSHTML platform in Microsoft Windows operating systems allows attackers to circumvent security restrictions.
The vulnerability of the MSHTML platform in Microsoft Windows operating systems is related to improper handling of path equivalence. Exploiting this vulnerability can allow a remote attacker to bypass security restrictions...
The vulnerability of the Windows operating system’s Telephony Service allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows operating system’s Telephony Service is related to overflowing buffers in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
...
PT-2025-1145
Name of the Vulnerable Software and Affected Versions Windows NTLM V1 affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the implementation of the NTLMv1 protocol in Windows operating systems. This vulnerability is associated with...
Microsoft MapUrlToZone 安全漏洞
Microsoft MapUrlToZone is a lightweight console application written in C++ by Microsoft Corporation USA. A security vulnerability exists in Microsoft MapUrlToZone. An attacker exploiting this vulnerability could bypass certain functionality. The following products and editions are affected: Windo...
Microsoft Windows 缓冲区错误漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Digital Media. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...
Microsoft Windows COM 安全漏洞
Microsoft Windows COM is a technology for the purpose of reusing software from Microsoft Corporation USA.COM is described as a platform-independent, decentralized, object-oriented system for creating interactive binary software components. A security vulnerability exists in Microsoft Windows COM...
Microsoft Windows 缓冲区错误漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Digital Media. An attacker could exploit this vulnerability to elevate privileges. The following products and versions are...