Lucene search
+L

72 matches found

Vulnrichment
Vulnrichment
added 2023/04/05 12:0 a.m.4 views

CVE-2023-0944

Bhima version 1.27.0 allows an authenticated attacker with regular user permissions to update arbitrary user session data such as username, email and password. This is possible because the application is vulnerable to IDOR, it does not correctly validate user permissions with respect to certain...

4.7AI score0.00477EPSS
Exploits1References2
OSV
OSV
added 2023/04/05 12:0 a.m.14 views

CVE-2023-0944

Bhima version 1.27.0 allows an authenticated attacker with regular user permissions to update arbitrary user session data such as username, email and password. This is possible because the application is vulnerable to IDOR, it does not correctly validate user permissions with respect to certain...

4.3CVSS7AI score0.00477EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2023/02/28 12:0 a.m.64 views

RHEL 7 : kernel (RHSA-2023:0944)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0944 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: stack overflow in doprocdointvec and...

7.8CVSS6.6AI score0.00431EPSS
Exploits0References4
Circl
Circl
added 2022/03/15 6:18 a.m.10 views

CVE-2022-0944

creationtimestamp| type| source ---|---|--- 2022-03-15 06:18:45+00:00| seen| https://t.me/cibsecurity/38910 2024-09-08 23:40:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8485 2024-09-10 14:24:43+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8504 2024-09-10...

9.1CVSS7.1AI score0.08669EPSS
Exploits12References19
NVD
NVD
added 2022/03/15 1:15 a.m.94 views

CVE-2022-0944

Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1...

9.1CVSS0.08669EPSS
Exploits12References2
OSV
OSV
added 2022/03/15 1:0 a.m.47 views

CVE-2022-0944 Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad

Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1...

9.1CVSS8.2AI score0.08669EPSS
Exploits12References4
CVE
CVE
added 2022/03/15 1:0 a.m.358 views

CVE-2022-0944

CVE-2022-0944 affects the SQLPad project (SQLPad, prior to 6.10.1). The vulnerability arises from template injection in the connection test endpoint, enabling remote code execution (RCE) with the privileges of the SQLPad process. Affected versions are SQLPad ≤ 6.10.0. Several public exploit PoCs ...

9.1CVSS7.2AI score0.08669EPSS
Exploits12References2Affected Software1
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.6 views

SUSE: Security Advisory (SUSE-SU-2021:0944-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.04328EPSS
Exploits0References5
Prion
Prion
added 2020/04/15 3:15 p.m.18 views

Privilege escalation

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0942, CVE-2020-0944...

7.2CVSS7.2AI score0.00996EPSS
Exploits0References1Affected Software2
CVE
CVE
added 2020/04/15 3:12 p.m.92 views

CVE-2020-0944

CVE-2020-0944 is an Elevation of Privilege vulnerability in the Connected User Experiences and Telemetry Service, caused by improper file-handling. The issue enables local attackers with low privileges to escalate, with high impact to confidentiality, integrity, and availability (per CVSS 3.1 met...

7.8CVSS7.7AI score0.00771EPSS
Exploits0References1Affected Software3
Cvelist
Cvelist
added 2020/04/15 3:12 p.m.31 views

CVE-2020-0944

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0942, CVE-2020-1029...

7.8AI score0.00771EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/01/24 9:14 p.m.9 views

CVE-2019-0944

...

Exploits0
CVE
CVE
added 2020/01/24 9:14 p.m.100 views

CVE-2019-0944

CVE-2019-0944 is rejected and does not represent an active vulnerability entry.

7.3AI score
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 7:0 a.m.22 views

Security Bulletin: IBM Operational Decision Manager : CVE-2014-0944, CVE-2014-0945, CVE-2014-0946

Summary This Security Bulletin addresses 3 security vulnerabilities CVE-2014-0944, CVE-2014-0945 and CVE-2014-0946 in IBM Operational Decision Manager. All issue are related to the RES Console provided in Rule Execution Server. Vulnerability Details CVE ID: CVE-2014-0944 DESCRIPTION: IBM...

6CVSS0.7AI score0.01845EPSS
Exploits0Affected Software1
Prion
Prion
added 2018/03/14 5:29 p.m.30 views

Privilege escalation

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909,...

6.5CVSS8.5AI score0.04614EPSS
Exploits0References3Affected Software2
CVE
CVE
added 2018/03/14 5:0 p.m.86 views

CVE-2018-0944

Technical details for CVE-2018-0944 are not publicly available in the provided connected documents. Monitor for updates; based on current inputs, no concrete affected products, versions, exploit info, or remediation are disclosed here.

8.8CVSS8.4AI score0.04614EPSS
Exploits0References3Affected Software2
Symantec
Symantec
added 2018/03/13 12:0 a.m.42 views

Microsoft SharePoint Server CVE-2018-0944 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...

8.8AI score0.04614EPSS
Exploits0Affected Software2
Tenable Nessus
Tenable Nessus
added 2018/03/13 12:0 a.m.119 views

Security Updates for Microsoft SharePoint Server and Microsoft Project Server (March 2018)

The Microsoft SharePoint Server or Microsoft Project Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an...

9.3CVSS7.4AI score0.18283EPSS
Exploits0References21
OpenVAS
OpenVAS
added 2016/01/18 12:0 a.m.28 views

Adobe Acrobat Multiple Vulnerabilities - 01 (Jan 2016) - Mac OS X

Adobe Acrobat is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat"; ifdescription...

10CVSS8.4AI score0.07944EPSS
Exploits0References1
CVE
CVE
added 2016/01/14 2:0 a.m.69 views

CVE-2016-0944

Technical details for CVE-2016-0944 are not provided in the connected documents. The initial entry mentions affected Adobe products and memory corruption/remote code risk but lacks root cause, affected versions, or available fixes. Monitor for updates.

10CVSS9.5AI score0.04244EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder