Lucene search
+L

1988 matches found

Positive Technologies
Positive Technologies
added 2024/07/09 12:0 a.m.3 views

PT-2024-4854 · Microsoft · Windows Ocsp Server +1

Name of the Vulnerable Software and Affected Versions: Windows Online Certificate Status Protocol OCSP Server affected versions not specified Description: The issue is related to an uncontrolled consumption of resources in the implementation of the Online Certificate Status Protocol OCSP in Windo...

7.8CVSS6.7AI score0.02518EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/07/09 12:0 a.m.8 views

Microsoft Graphics Component Security Vulnerability

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions are affected:Windows 10 Versio...

7.8CVSS6.8AI score0.00709EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/06/24 12:0 a.m.10 views

The vulnerability of the Windows operating system’s streaming data transmission service allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s streaming data transmission service is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.6AI score0.08038EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/06/24 12:0 a.m.6 views

The vulnerability of the implementation of the Link Layer Topology Discovery Protocol (LLTD) in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Link Layer Topology Discovery Protocol LLTD implementation in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted network packet...

8.3CVSS6.3AI score0.00884EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/06/18 12:0 a.m.7 views

The vulnerability of the Winlogon entry program in Windows operating systems allows attackers to elevate their privileges.

The vulnerability of the Winlogon entry program in Windows operating systems is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to enhance their privileges using specially created data...

5.5CVSS5.5AI score0.00628EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/06/18 12:0 a.m.8 views

The vulnerability of the Winlogon entry program in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Winlogon entry program in Windows operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to enhance their privileges using specially created data...

5.5CVSS5.5AI score0.00628EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/06/17 12:0 a.m.8 views

The vulnerability of the Wi-Fi driver for Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of Wi-Fi operating system Windows drivers is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted network packet...

8.8CVSS6.3AI score0.05158EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/06/11 12:0 a.m.11 views

Microsoft Windows Wi-Fi Driver Input Validation Error Vulnerability

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An input validation error vulnerability exists in Microsoft Windows Wi-Fi Driver. An attacker exploiting this vulnerability could remotely execute code. The following products and editions ar...

8.8CVSS6.8AI score0.05158EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/06/11 12:0 a.m.4 views

Microsoft Windows Themes Backlink Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Themes. An attacker could exploit this vulnerability to cause a denial of service on the system. The following products and versions a...

5.5CVSS6.5AI score0.00841EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/06/11 12:0 a.m.4 views

PT-2024-4144 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory in the Winlogon program, which is part of the Windows operating system. This can be exploited by an attacker using specially...

5.5CVSS6.7AI score0.00628EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/06/11 12:0 a.m.4 views

Microsoft Winlogon Input Validation Error Vulnerability

Microsoft Winlogon is a Microsoft Corporation USA component built into the Windows NT family of operating systems developed by Microsoft. An input validation error vulnerability exists in Microsoft Winlogon. An attacker could exploit the vulnerability to elevate privileges. The following products...

5.5CVSS6.7AI score0.00628EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/06/06 12:0 a.m.4 views

PT-2024-27501 · Microsoft +1 · Windows Os +1

Name of the Vulnerable Software and Affected Versions: Ariane Allegro Scenario Player through 2024-03-05 Description: The issue allows physically proximate attackers to obtain sensitive information, such as hotel invoice content with personally identifiable information PII, and potentially create...

6.8CVSS6.8AI score0.00256EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2024/05/24 12:0 a.m.7 views

The vulnerability of the Windows operating system’s deployment process allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Windows operating system’s deployment service exists because measures to neutralize specific elements are not taken. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information...

6.8CVSS5.4AI score0.02289EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/05/24 12:0 a.m.6 views

The vulnerability of the Windows Routing and Remote Access Service (RRAS) component in operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Routing and Remote Access Service RRAS component in operating systems is related to numerical truncation errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

7.6CVSS5.9AI score0.01489EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:0 a.m.7 views

The vulnerability of the Windows DWM library in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows DWM library in Windows operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS5.5AI score0.00793EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:0 a.m.6 views

The vulnerability of the Windows Hyper-V hardware virtualization system allows a attacker to trigger a service failure.

The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

6.8CVSS5.5AI score0.02621EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/17 12:0 a.m.4 views

Cerberus FTP Enterprise 资源管理错误漏洞

Cerberus FTP Server is a Windows-based FTP server from Cerberus, Inc. that supports FTP sessions encrypted via FTPS and SFTP. A resource management error vulnerability exists in Cerberus FTP Enterprise version 8.0.10.3, which stems from the presence of a denial of service DoS vulnerability...

7.5CVSS6.7AI score0.00418EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.13 views

The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.8AI score0.00711EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/05/16 12:0 a.m.12 views

The vulnerability of the MSHTML platform in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the MSHTML platform in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, provided that the user opens a specially crafted file...

10CVSS6.3AI score0.03939EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/05/14 4:57 p.m.26 views

CVE-2024-30032 Windows DWM Core Library Elevation of Privilege Vulnerability

...

7.8CVSS8.3AI score0.04524EPSS
SaveExploits0References1
Rows per page
Query Builder