176 results (0.006 seconds)

CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 0

15 Feb 2024 — Adobe FrameMaker Publishing Server versions 2022.1 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass authentication mechanisms and gain unauthorized access. Exploitation of this issue does not require user interaction. Las versiones 2022.1 y anteriores de Adobe Framemaker se ven afectadas por una vulnerabilidad de autenticación incorrecta que podría provocar la omisión de una función de... • https://helpx.adobe.com/security/products/framemaker-publishing-server/apsb24-10.html • CWE-287: Improper Authentication •

CVSS: 8.7EPSS: 0%CPEs: 77EXPL: 0

09 Jan 2024 — Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability Vulnerabilidad de omisión de característica de seguridad del proveedor de datos SQL de Microsoft.Data.SqlClient y System.Data.SqlClient A vulnerability was found in the .NET Framework. This vulnerability exists in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data provider where an attackercan perform an AiTM (adversary-in-the-middle) attack between the SQL client and the SQL server. This ... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0056 • CWE-319: Cleartext Transmission of Sensitive Information CWE-420: Unprotected Alternate Channel •

CVSS: 10.0EPSS: 1%CPEs: 3EXPL: 0

15 Nov 2023 — Adobe FrameMaker Publishing Server versions 2022 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature bypass. An unauthenticated attacker can abuse this vulnerability to access the API and leak default admin's password. Exploitation of this issue does not require user interaction. Las versiones 2022 y anteriores de Adobe FrameMaker se ven afectadas por una vulnerabilidad de autenticación incorrecta que podría provocar la omisión de una función de segur... • https://helpx.adobe.com/security/products/framemaker-publishing-server/apsb23-58.html • CWE-287: Improper Authentication •

CVSS: 7.0EPSS: 0%CPEs: 30EXPL: 0

10 May 2022 — Windows Push Notifications Apps Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Windows Push Notifications Apps • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29125 •

CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0

10 May 2022 — Windows Clustered Shared Volume Information Disclosure Vulnerability Una vulnerabilidad de Divulgación de Información de Windows Clustered Shared Volume. Este ID de CVE es diferente de CVE-2022-29120, CVE-2022-29123, CVE-2022-29134 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29122 •

CVSS: 7.8EPSS: 0%CPEs: 36EXPL: 0

10 May 2022 — Windows Fax Service Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Windows Fax Service • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29115 •

CVSS: 6.5EPSS: 4%CPEs: 35EXPL: 0

10 May 2022 — Windows Graphics Component Information Disclosure Vulnerability Una vulnerabilidad de Divulgación de Información de Windows Graphics Component. Este ID de CVE es diferente de CVE-2022-22011, CVE-2022-26934 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29112 •

CVSS: 7.8EPSS: 0%CPEs: 35EXPL: 0

10 May 2022 — Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Windows Remote Access Connection Manager • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29103 •

CVSS: 7.0EPSS: 0%CPEs: 3EXPL: 0

10 May 2022 — Storage Spaces Direct Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Storage Spaces Direct. Este ID de CVE es diferente de CVE-2022-26932, CVE-2022-26939 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26938 •

CVSS: 6.5EPSS: 1%CPEs: 35EXPL: 0

10 May 2022 — Windows Server Service Information Disclosure Vulnerability Una vulnerabilidad de Divulgación de Información de Windows Server Service • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26936 •