Results
17,305· Page 87/347An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash,
An elevation of privilege vulnerability exists when umpo.dll of the Power Service, improperly handles a Registry Restore
An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka '
A security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to success
An information disclosure vulnerability exists when Windows Update Client fails to properly handle objects in memory, ak
An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle p
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious se
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje
An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requ
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje
A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system
An elevation of privilege vulnerability exists in the Windows redirected drive buffering system (rdbss.sys) when the ope
An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle p
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft W
An elevation of privilege vulnerability exists when Windows CloudStore improperly handles file Discretionary Access Cont
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft W
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka
A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions,
A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Se
An elevation of privilege vulnerability exists in Microsoft Windows Setup when it does not properly handle privileges, a
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka '
A security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to access files and folde
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enfor
A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Win
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScrip
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScrip
An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host operating system fails
A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass t
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka
A vulnerability has been identified in SIMATIC IT UADM (All versions < V1.3). An authenticated remote attacker with netw
A vulnerability has been identified in SIMATIC WinAC RTX (F) 2010 (All versions < SP3 Update 1). Affected versions of th
Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticate
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time
A spoofing vulnerability exists when Microsoft Browsers does not properly parse HTTP content, aka 'Microsoft Browser Spo
LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen.
z-song laravel-admin 1.7.3 has XSS via the Slug or Name on the Roles screen, because of mishandling on the "Operation lo
An issue was discovered in fastadmin 1.0.0.20190705_beta. There is a public/admin/general.config/edit CSRF vulnerability
An issue was discovered in fastadmin 1.0.0.20190705_beta. There is a public/index.php/admin/auth/admin/add CSRF vulnerab
EyouCms through 2019-07-11 has XSS related to the login.php web_recordnum parameter.
Adhouma CMS through 2019-10-09 has SQL Injection via the post.php p_id parameter.
The new-contact-form-widget (aka Contact Form Widget - Contact Query, Form Maker) plugin 1.0.9 for WordPress has SQL Inj
The client-dash (aka Client Dash) plugin 2.1.4 for WordPress allows XSS.
Test your stack for 2019issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.