18 matches found
CVE-2022-46656
Insecure inherited permissions for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-34848
Uncontrolled search path for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-32578
Improper access control for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...
Path traversal
Path traversal for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...
Intel NUC Pro Software Suite 安全漏洞
Intel NUC Pro Software Suite is an application from Intel Corporation USA. A security vulnerability exists in Intel NUC Pro Software Suite versions prior to 2.0.0.3 that stems from incorrect default permissions. An attacker could exploit the vulnerability to escalate privileges...
PT-2023-13429 · Intel · Intel Nuc Pro Software Suite
Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue allows an authenticated user to potentially enable escalation of privilege via local access due to path traversal. Recommendations: For versions prior to 2.0.0.3,...
PT-2023-13484 · Intel · Intel Nuc Pro Software Suite
Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue is related to incorrect default permissions in the IntelR NUC Pro Software Suite, which may allow an authenticated user to potentially enable escalation of privile...
PT-2023-14981 · Intel · Intel Nuc Pro Software Suite
Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue concerns insecure inherited permissions that may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For...
Security Bulletin: IBM Security Guardium is affected by a redshift-jdbc42-2.0.0.3.jar vulnerability (CVE-2022-41828)
Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID:CVE-2022-41828 DESCRIPTION: Amazon AWS Redshift JDBC Driver could provide weaker than expected security, caused by failing to heck the class type when instantiating an object from a class name in Object Factory...
SOY CMS Cross-Site Request Forgery Vulnerability
SOY CMS is a content management system CMS. A cross-site request forgery vulnerability exists in the SOY CMS Query Component prior to version 2.0.0.3 and prior versions, which arises from a WEB application that does not adequately validate that a request is coming from a trusted user. An attacker...
CVE-2019-1020016
ASH-AIO before 2.0.0.3 allows an open redirect...
CVE-2019-1020016
CVE-2019-1020016 affects ASH-AIO, specifically versions before 2.0.0.3, and is described as an open redirect vulnerability. The connected sources consistently identify the issue as an open redirect but do not provide exploit details or a confirmed remediation within the supplied documents. There ...
security flaw
The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response...
CVE-2007-2671
The CVE-2007-2671 entry concerns Mozilla Firefox 2.0.0.3. The described vulnerability is a denial of service caused by processing a long hostname in an HREF attribute within an A element, which leads to out-of-bounds memory access. The available connected documents corroborate Firefox involvement...
Mozilla Firefox 2.0.0.3 - Href Denial of Service
source: https://www.securityfocus.com/bid/23747/info Firefox is prone to a remote denial-of-service vulnerability. An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document. Successful exploits can allow attackers to crash the affected browser,...
CVE-2007-1762
Mozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs before checking them against the phishing site blacklist, which allows remote attackers to bypass phishing protection via multiple / slash characters in the URL...
CVE-2007-1736
Summary: CVE-2007-1736 affects Mozilla Firefox 2.0.0.3, where URLs embedded in (1) object and (2) iframe HTML tags are not checked against the phishing site blacklist, allowing bypass of phishing protection. The known description documents this condition as a vulnerability in the browser’s phishi...
Oracle WebCache Server < 2.0.0.3.x Multiple Vulnerabilities
Binary data 1516.prm...