Lucene search
K

18 matches found

OSV
OSV
added 2023/05/10 2:15 p.m.1 views

CVE-2022-46656

Insecure inherited permissions for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00034EPSS
Exploits0References1
OSV
OSV
added 2023/05/10 2:15 p.m.0 views

CVE-2022-34848

Uncontrolled search path for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2023/05/10 2:15 p.m.1 views

CVE-2022-32578

Improper access control for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00046EPSS
Exploits0References1
Prion
Prion
added 2023/05/10 2:15 p.m.12 views

Path traversal

Path traversal for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

4.3CVSS7.8AI score0.00061EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/05/10 12:0 a.m.2 views

Intel NUC Pro Software Suite 安全漏洞

Intel NUC Pro Software Suite is an application from Intel Corporation USA. A security vulnerability exists in Intel NUC Pro Software Suite versions prior to 2.0.0.3 that stems from incorrect default permissions. An attacker could exploit the vulnerability to escalate privileges...

7.8CVSS7.4AI score0.00034EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/05/10 12:0 a.m.2 views

PT-2023-13429 · Intel · Intel Nuc Pro Software Suite

Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue allows an authenticated user to potentially enable escalation of privilege via local access due to path traversal. Recommendations: For versions prior to 2.0.0.3,...

7.8CVSS7.7AI score0.00061EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/05/10 12:0 a.m.2 views

PT-2023-13484 · Intel · Intel Nuc Pro Software Suite

Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue is related to incorrect default permissions in the IntelR NUC Pro Software Suite, which may allow an authenticated user to potentially enable escalation of privile...

7.8CVSS7.6AI score0.00034EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/05/10 12:0 a.m.1 views

PT-2023-14981 · Intel · Intel Nuc Pro Software Suite

Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue concerns insecure inherited permissions that may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For...

7.8CVSS7.7AI score0.00034EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/02 3:4 p.m.54 views

Security Bulletin: IBM Security Guardium is affected by a redshift-jdbc42-2.0.0.3.jar vulnerability (CVE-2022-41828)

Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID:CVE-2022-41828 DESCRIPTION: Amazon AWS Redshift JDBC Driver could provide weaker than expected security, caused by failing to heck the class type when instantiating an object from a class name in Object Factory...

8.8CVSS7.8AI score0.09641EPSS
Exploits1Affected Software1
CNVD
CNVD
added 2020/09/18 12:0 a.m.1 views

SOY CMS Cross-Site Request Forgery Vulnerability

SOY CMS is a content management system CMS. A cross-site request forgery vulnerability exists in the SOY CMS Query Component prior to version 2.0.0.3 and prior versions, which arises from a WEB application that does not adequately validate that a request is coming from a trusted user. An attacker...

9.6CVSS6.9AI score0.00916EPSS
Exploits1References1
NVD
NVD
added 2019/07/29 1:15 p.m.7 views

CVE-2019-1020016

ASH-AIO before 2.0.0.3 allows an open redirect...

6.1CVSS6.3AI score0.002EPSS
Exploits0References1
CVE
CVE
added 2019/07/29 12:23 p.m.45 views

CVE-2019-1020016

CVE-2019-1020016 affects ASH-AIO, specifically versions before 2.0.0.3, and is described as an open redirect vulnerability. The connected sources consistently identify the issue as an open redirect but do not provide exploit details or a confirmed remediation within the supplied documents. There ...

6.1CVSS6.2AI score0.002EPSS
Exploits0References1Affected Software1
RedHat Linux
RedHat Linux
added 2007/05/31 2:47 a.m.0 views

security flaw

The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response...

6.8CVSS6.3AI score0.30339EPSS
Exploits0References4
CVE
CVE
added 2007/05/14 11:0 p.m.48 views

CVE-2007-2671

The CVE-2007-2671 entry concerns Mozilla Firefox 2.0.0.3. The described vulnerability is a denial of service caused by processing a long hostname in an HREF attribute within an A element, which leads to out-of-bounds memory access. The available connected documents corroborate Firefox involvement...

7.1CVSS9.1AI score0.06763EPSS
Exploits1References6Affected Software1
Exploit DB
Exploit DB
added 2007/05/01 12:0 a.m.20 views

Mozilla Firefox 2.0.0.3 - Href Denial of Service

source: https://www.securityfocus.com/bid/23747/info Firefox is prone to a remote denial-of-service vulnerability. An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document. Successful exploits can allow attackers to crash the affected browser,...

7AI score
Exploits0
NVD
NVD
added 2007/03/30 12:19 a.m.12 views

CVE-2007-1762

Mozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs before checking them against the phishing site blacklist, which allows remote attackers to bypass phishing protection via multiple / slash characters in the URL...

5CVSS6.5AI score0.00247EPSS
Exploits0References3
CVE
CVE
added 2007/03/28 10:0 p.m.51 views

CVE-2007-1736

Summary: CVE-2007-1736 affects Mozilla Firefox 2.0.0.3, where URLs embedded in (1) object and (2) iframe HTML tags are not checked against the phishing site blacklist, allowing bypass of phishing protection. The known description documents this condition as a vulnerability in the browser’s phishi...

7.5CVSS6.5AI score0.00137EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2004/08/18 12:0 a.m.11 views

Oracle WebCache Server < 2.0.0.3.x Multiple Vulnerabilities

Binary data 1516.prm...

6.8CVSS7.3AI score0.39798EPSS
Exploits2References5
Rows per page
Query Builder