CyberSigur / Security Intelligence
Urmărește catalogul CISA Known Exploited Vulnerabilities. Caută după CVE, furnizor sau produs; informațiile sunt publicate de autoritatea americană CISA.
1.760 vulnerabilități · Pagina 64 din 88
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Apply updates per vendor instructions.
A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.
Apply updates per vendor instructions.
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.
Apply updates per vendor instructions.
Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.
Apply updates per vendor instructions.
Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.
Apply updates per vendor instructions.
Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.
Apply updates per vendor instructions.
Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.
Apply updates per vendor instructions.
NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.
Apply updates per vendor instructions.
NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.
Apply updates per vendor instructions.
Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.
Apply updates per vendor instructions.
A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.
Apply updates per vendor instructions.
VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.
Apply updates per vendor instructions.