Show filters
233 topics marked with the following tags:
Displaying 1-10 of 233
Sort by:
Attacker Value
Unknown
CVE-2018-20753
Disclosure Date: February 05, 2019 (last updated October 06, 2023)
Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. In January 2018, attackers actively exploited this vulnerability in the wild.
0
Attacker Value
Unknown
CVE-2018-8581
Disclosure Date: November 14, 2018 (last updated October 06, 2023)
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.
0
Attacker Value
Unknown
CVE-2013-2551
Disclosure Date: March 11, 2013 (last updated October 05, 2023)
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1308 and CVE-2013-1309.
0
Attacker Value
Unknown
CVE-2018-6789
Disclosure Date: February 08, 2018 (last updated October 06, 2023)
An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely.
1
Attacker Value
Unknown
CVE-2016-0099
Disclosure Date: March 09, 2016 (last updated October 05, 2023)
The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows local users to gain privileges via a crafted application, aka "Secondary Logon Elevation of Privilege Vulnerability."
0
Attacker Value
Unknown
CVE-2021-27103
Disclosure Date: February 16, 2021 (last updated October 07, 2023)
Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed version is FTA_9_12_416 and later.
0
Attacker Value
Unknown
CVE-2013-0074
Disclosure Date: March 13, 2013 (last updated October 05, 2023)
Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."
0
Attacker Value
Unknown
CVE-2019-7194
Disclosure Date: December 05, 2019 (last updated October 06, 2023)
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.
0
Attacker Value
Unknown
CVE-2016-0167
Disclosure Date: April 12, 2016 (last updated October 05, 2023)
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0143 and CVE-2016-0165.
1
Attacker Value
Unknown
CVE-2023-23376
Disclosure Date: February 14, 2023 (last updated December 14, 2023)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
0