Lucene search
K

836 matches found

RedHat Linux
RedHat Linux
added 2024/01/25 8:1 a.m.1 views

git: Bypass of safe.directory protections

A vulnerability was found in Git. This flaw occurs due to Git not checking the ownership of directories in a local multi-user system when running commands specified in the local repository configuration. This issue allows the owner of the repository to cause arbitrary commands to be executed by...

7.8CVSS7.3AI score0.00435EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/01/25 8:1 a.m.3 views

git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree

A vulnerability was found in Git. This flaw occurs due to Git not checking the ownership of directories in a local multi-user system when running commands specified in the local repository configuration. This allows the owner of the repository to cause arbitrary commands to be executed by other...

7.8CVSS7.3AI score0.00782EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/01/25 8:1 a.m.46 views

Moderate: Red Hat Security Advisory: git security update

An update for git is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8.8CVSS6.8AI score0.02938EPSS
Exploits4References7
CNVD
CNVD
added 2024/01/12 12:0 a.m.33 views

Microsoft Win32K Elevation of Privilege Vulnerability (CNVD-2024-11164)

Microsoft Win32k is a system file for Windows multi-user management from Microsoft USA. An elevation of privilege vulnerability exists in Microsoft Win32K, which can be exploited by an attacker to gain elevated privileges on a system...

7.8CVSS7.3AI score0.04207EPSS
Exploits0References1
CNVD
CNVD
added 2024/01/12 12:0 a.m.27 views

Microsoft Win32k Elevation of Privilege Vulnerability (CNVD-2024-11165)

Microsoft Win32k is a system file for Windows multi-user management from Microsoft USA. An elevation of privilege vulnerability exists in Microsoft Win32k. An attacker could exploit this vulnerability to gain elevated privileges on the system...

7.8CVSS7.2AI score0.00671EPSS
Exploits0References1
OSV
OSV
added 2024/01/04 1:15 a.m.2 views

CVE-2024-20802

Improper access control vulnerability in Samsung DeX prior to SMR Jan-2024 Release 1 allows owner to access other users' notification in a multi-user environment...

5.5CVSS5.8AI score0.00155EPSS
Exploits0References1
NVD
NVD
added 2024/01/04 1:15 a.m.14 views

CVE-2024-20802

Improper access control vulnerability in Samsung DeX prior to SMR Jan-2024 Release 1 allows owner to access other users' notification in a multi-user environment...

5.5CVSS4.9AI score0.00155EPSS
Exploits0References1
Prion
Prion
added 2024/01/04 1:15 a.m.14 views

Improper access control

Improper access control vulnerability in Samsung DeX prior to SMR Jan-2024 Release 1 allows owner to access other users' notification in a multi-user environment...

1.7CVSS7AI score0.00155EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/04 1:10 a.m.6 views

CVE-2024-20802

Improper access control vulnerability in Samsung DeX prior to SMR Jan-2024 Release 1 allows owner to access other users' notification in a multi-user environment...

4.6CVSS5.5AI score0.00155EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/01/04 1:10 a.m.17 views

CVE-2024-20802

Improper access control vulnerability in Samsung DeX prior to SMR Jan-2024 Release 1 allows owner to access other users' notification in a multi-user environment...

4.6CVSS5.7AI score0.00155EPSS
Exploits0References1
CVE
CVE
added 2024/01/04 1:10 a.m.125 views

CVE-2024-20802

Samsung DeX is affected by CVE-2024-20802 due to improper access control that allows the device owner to access other users’ notifications in a multi-user environment. Affected software: Samsung DeX prior to SMR Jan-2024 Release 1. Root cause: improper access control in the notification handling ...

5.5CVSS5.4AI score0.00155EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/01/04 12:0 a.m.5 views

SAMSUNG mobile devices security vulnerability

SAMSUNG mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG mobile devices SMR Jan-2024 Release 1 version and prior versions, which stems from an improper access...

5.5CVSS6.5AI score0.00155EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/01/04 12:0 a.m.3 views

PT-2024-18708 · Samsung · Samsung Dex

Name of the Vulnerable Software and Affected Versions: Samsung DeX versions prior to SMR Jan-2024 Release 1 Description: The issue is related to improper access control, allowing the owner to access other users' notifications in a multi-user environment. Recommendations: For versions prior to SMR...

5.5CVSS5.3AI score0.00155EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/12/11 12:0 a.m.4 views

BeyondTrust Privilege Management Security Vulnerability

BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management Windows versions prior to 22.3, which stems from an attacker being able to spawn processes with multiple...

8.8CVSS6.8AI score0.00774EPSS
Exploits0References3
OSV
OSV
added 2023/12/06 9:15 a.m.1 views

CVE-2023-49244

Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS5.8AI score0.00443EPSS
Exploits0References2
NVD
NVD
added 2023/12/06 9:15 a.m.22 views

CVE-2023-49244

Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS0.00443EPSS
Exploits0References2
Prion
Prion
added 2023/12/06 9:15 a.m.22 views

Design/Logic Flaw

Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect service confidentiality...

5CVSS7.2AI score0.00443EPSS
Exploits0References2Affected Software2
Cvelist
Cvelist
added 2023/12/06 8:58 a.m.17 views

CVE-2023-49244

Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect service confidentiality...

7.7AI score0.00443EPSS
Exploits0References2
CVE
CVE
added 2023/12/06 8:58 a.m.44 views

CVE-2023-49244

CVE-2023-49244 concerns a permission management vulnerability in the multi-user module of Huawei HarmonyOS. The vulnerability is described as affecting service confidentiality due to improper permission handling in the multi-user module. The primary, documented impact is confidentiality loss; no ...

7.5CVSS7.5AI score0.00443EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/06 12:0 a.m.3 views

PT-2023-31131 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect service...

7.5CVSS7.5AI score0.00443EPSS
Exploits0References4
Rows per page
Query Builder