26 matches found
CVE-2023-22294
CVE-2023-22294 affects Tribe29 Checkmk Appliance prior to 1.6.4. The root cause is incorrectly set permissions that allow authenticated site users to escalate privileges (high impact: confidentiality, integrity, and availability). Affected product: Checkmk Appliance (Tribe29) prior to version 1.6...
CVE-2023-22294 Privilege escalation in Checkmk Appliance
Privilege escalation in Tribe29 Checkmk Appliance before 1.6.4 allows authenticated site users to escalate privileges via incorrectly set permissions...
CVE-2022-22294
creationtimestamp| type| source ---|---|--- 2022-01-28 20:21:46+00:00| seen| https://t.me/cibsecurity/36470...
CVE-2022-22294
CVE-2022-22294 is a SQL injection vulnerability reported in ZFAKA (ZW) versions up to 1.43. The connected records describe a frontend SQL injection that can be exploited to add a background administrator account, i.e., gain elevated access, with potential impact described as partial confidentiali...
CVE-2021-22294
creationtimestamp| type| source ---|---|--- 2021-03-02 22:44:34+00:00| seen| https://t.me/cibsecurity/24360...
CVE-2021-22294
HarmonyOS 2.0 contains a component API permission bypass vulnerability that allows a local attacker to issue commands repeatedly, exhausting system service resources. Affected element: HarmonyOS 2.0 component API. Impact: potential resource exhaustion on local access. Root cause described as a pe...