Lucene search
+L

28 matches found

CVE
CVE
added 2022/03/15 2:35 p.m.96 views

CVE-2022-24755

CVE-2022-24755 affects Bareos Director when built/configured for PAM: authorization checks were skipped, allowing login with expired accounts or passwords. Affected versions are Bareos Director >= 18.2 but before 21.1.0, 20.0.6, and 19.2.12. The root cause is missing authorization checks (circ...

9.8CVSS9.1AI score0.02027EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2022/03/15 2:35 p.m.7 views

CVE-2022-24755 Incorrect Authorization in Bareos Director

Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director = 18.2 = 18.2 but prior to 21.1.0, 20.0.6, and 19.2.12 is built and configured for PAM authentication, it will skip authorization checks completely. Expired accounts and accounts...

8.1CVSS9.7AI score0.02027EPSS
SaveExploits1References5
Circl
Circl
added 2021/11/29 12:33 p.m.12 views

CVE-2021-24755

creationtimestamp| type| source ---|---|--- 2021-11-29 12:33:15+00:00| seen| https://t.me/cibsecurity/33020...

8.8CVSS8.1AI score0.01318EPSS
SaveExploits2References1
CVE
CVE
added 2021/11/29 8:25 a.m.73 views

CVE-2021-24755

CVE-2021-24755 affects the WordPress myCred plugin prior to 2.3. The issue is an SQL injection caused by not validating/escaping the fields parameter before use in a SQL statement, allowing an authenticated user to inject SQL via fields. Impact is substantial with CVSS3.1 base score 8.8 (HIGH) an...

8.8CVSS9AI score0.01318EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2021/11/29 8:25 a.m.31 views

CVE-2021-24755 myCred < 2.3 - Subscriber+ SQL Injection

The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL statement, leading to an SQL injection exploitable by any authenticated user...

9.1AI score0.01318EPSS
SaveExploits2References1
VulnCheck KEV
VulnCheck KEV
added 2021/11/01 12:00 a.m.5 views

VulnCheck KEV: CVE-2021-24755

The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL statement, leading to an SQL injection exploitable by any authenticated user...

8.8CVSS7.4AI score0.01318EPSS
SaveExploits2References1
CVE
CVE
added 2021/05/17 9:06 p.m.102 views

CVE-2020-24755

CVE-2020-24755 affects Ubiquiti UniFi Video v3.10.13. The vulnerability arises when the executable starts and uses the current directory for the first library validation, enabling impersonation and modification of a library to execute code on the system. Tested on Windows 7 x64 and Windows 10 x64...

7.8CVSS7.7AI score0.00579EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2019/05/15 12:00 a.m.19 views

Microsoft Windows GDI Component Information Disclosure Vulnerability (CNVD-2019-24755)

Microsoft Windows is a product of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system.Windows Graphics Device Interface GDI is one of the graphics device interfaces. Windows Graphics Device Interface GDI is one ...

6.5CVSS6.1AI score0.1232EPSS
SaveExploits0References1
Rows per page
Query Builder