Lucene search
+L

85 matches found

CVE
CVE
added 2023/03/13 8:29 p.m.59 views

CVE-2023-0345

CVE-2023-0345 (Akuvox E11) : The vulnerability is due to the SSH server being enabled by default and accessible as root with a password that cannot be changed. Reported in multiple sources, including the RT-ICS briefing and Red Hat advisories, it carries a high impact (C/H/I/H) and a base CVSS v3...

9.8CVSS9.7AI score0.00668EPSS
SaveExploits0References1Affected Software1
Circl
Circl
added 2023/03/13 1:10 p.m.8 views

CVE-2023-0345

creationtimestamp| type| source ---|---|--- 2023-03-13 13:10:07+00:00| seen| https://t.me/truesecator/4158 2025-01-16 21:56:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2053...

9.8CVSS9.1AI score0.00668EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2023/03/13 7:36 a.m.121 views

Researchers Uncover Over a Dozen Security Flaws in Akuvox E11 Smart Intercom

More than a dozen security flaws have been disclosed in E11, a smart intercom product made by Chinese company Akuvox. "The vulnerabilities could allow attackers to execute code remotely in order to activate and control the device's camera and microphone, steal video and images, or gain a network...

9.8CVSS1AI score0.01067EPSS
SaveExploits0
OSV
OSV
added 2022/02/28 9:15 a.m.5 views

CVE-2022-0345

The Customize WordPress Emails and Alerts WordPress plugin before 1.8.7 does not have authorisation and CSRF check in its bnfwsearchusers AJAX action, allowing any authenticated users to call it and query for user e-mail prefixes finding the first letter, then the second one, then the third one...

4.3CVSS5.8AI score0.00429EPSS
SaveExploits2References1
CVE
CVE
added 2022/02/28 9:6 a.m.104 views

CVE-2022-0345

The CVE-2022-0345 entry concerns the WordPress plugin Better Notifications for WP (BNFW) versions prior to 1.8.7. A lack of authorization and CSRF protection in the bnfw_search_users AJAX action enables any authenticated user to query user e-mail prefixes, effectively disclosing email prefixes (f...

4.3CVSS4.4AI score0.00429EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2022/02/28 9:6 a.m.28 views

CVE-2022-0345 Better Notifications for WP < 1.8.7 - Email Address Disclosure

The Customize WordPress Emails and Alerts WordPress plugin before 1.8.7 does not have authorisation and CSRF check in its bnfwsearchusers AJAX action, allowing any authenticated users to call it and query for user e-mail prefixes finding the first letter, then the second one, then the third one...

4.9AI score0.00429EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.26 views

Mageia: Security Advisory (MGASA-2016-0345)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.05521EPSS
SaveExploits5References10
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.26 views

Mageia: Security Advisory (MGASA-2014-0345)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.5CVSS6.5AI score0.08085EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.19 views

Mageia: Security Advisory (MGASA-2020-0345)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.1AI score0.02518EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.32 views

Mageia: Security Advisory (MGASA-2018-0345)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3CVSS7.4AI score0.08101EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.25 views

Mageia: Security Advisory (MGASA-2013-0345)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.8AI score0.09408EPSS
SaveExploits7References20
Photon
Photon
added 2022/01/11 12:0 a.m.65 views

Important Photon OS Security Update - PHSA-2022-0345

Updates of 'runc', 'linux-rt', 'linux-esx', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

6.8CVSS1.7AI score0.01677EPSS
SaveExploits1
Photon
Photon
added 2021/12/20 12:0 a.m.30 views

Important Photon OS Security Update - PHSA-2021-3.0-0345

Updates of 'linux-esx', 'runc', 'linux', 'linux-rt', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

7.8CVSS6.5AI score0.01677EPSS
SaveExploits1
Circl
Circl
added 2021/02/04 10:34 p.m.5 views

CVE-2021-0345

creationtimestamp| type| source ---|---|--- 2021-02-04 22:34:44+00:00| seen| https://t.me/cibsecurity/23134...

7.2CVSS6.4AI score0.00166EPSS
SaveExploits0References1
CVE
CVE
added 2021/02/04 5:9 p.m.53 views

CVE-2021-0345

CVE-2021-0345 affects Android: the issue is in the mobile_log_d component, caused by improper input validation. This permits local privilege escalation to System execution level on Android-10 and Android-11, with no user interaction required. Exploitation is described as local and does not indica...

7.2CVSS6.6AI score0.00166EPSS
SaveExploits0References1Affected Software1
Photon
Photon
added 2020/12/09 12:0 a.m.42 views

Important Photon OS Security Update - PHSA-2020-0345

Updates of 'linux', 'linux-esx', 'openssl' packages of Photon OS have been released...

7.8CVSS7.4AI score0.06968EPSS
SaveExploits3
OSV
OSV
added 2020/09/17 9:15 p.m.5 views

CVE-2020-0345

In DocumentsUI, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144286721...

7.8CVSS7.2AI score0.00187EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/09/17 8:47 p.m.29 views

CVE-2020-0345

In DocumentsUI, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144286721...

8.4AI score0.00187EPSS
SaveExploits0References1
CVE
CVE
added 2020/09/17 8:47 p.m.49 views

CVE-2020-0345

CVE-2020-0345 affects Android 11 DocumentsUI, enabling a local elevation of privilege via a permission bypass (confused deputy). Impact: partial/full escalation on affected builds; CVSS v3.1: LOCAL, LOW complexity, UI REQUIRED, with HIGH confidentiality, integrity, and availability impacts. Root ...

7.8CVSS8.2AI score0.00187EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/08/14 1:54 p.m.62 views

CVE-2019-0345

CVE-2019-0345 affects SAP NetWeaver Application Server for Java (Administrator System Overview) in versions 7.30, 7.31, 7.40, and 7.50. A remote unauthenticated attacker can send a specially crafted XML file to the web service and induce a Server-Side Request Forgery that leaks authentication cre...

9.8CVSS9.5AI score0.0233EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder