Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2025/02/14 2:42 p.m.6 views

CVE-2025-26371

A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated low-privileged attacker to add users to groups via crafted HTTP requests...

8.8CVSS6.6AI score0.00155EPSS
Exploits0References1
NVD
NVD
added 2025/02/12 2:15 p.m.14 views

CVE-2025-26371

A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated low-privileged attacker to add users to groups via crafted HTTP requests...

8.8CVSS0.00155EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/12 1:30 p.m.8 views

CVE-2025-26371

A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated low-privileged attacker to add users to groups via crafted HTTP requests...

8.8CVSS8.5AI score0.00155EPSS
Exploits0References1
CVE
CVE
added 2025/02/12 1:30 p.m.70 views

CVE-2025-26371

CVE-2025-26371 affects Q-Free MaxTime

8.8CVSS8.5AI score0.00155EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/02/12 1:30 p.m.12 views

CVE-2025-26371

A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated low-privileged attacker to add users to groups via crafted HTTP requests...

8.8CVSS0.00155EPSS
Exploits0References1
NVD
NVD
added 2023/05/09 7:15 p.m.16 views

CVE-2021-26371

A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure...

5.5CVSS6.2AI score0.00129EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/05/09 6:59 p.m.12 views

CVE-2021-26371

A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure...

7.2AI score0.00129EPSS
Exploits0References2
CVE
CVE
added 2023/05/09 6:59 p.m.77 views

CVE-2021-26371

The CVE-2021-26371 entry concerns AMD Secure Processor (ASP)/AMD System Management Unit (SMU) where a compromised ABL or UApp could trigger a SHA256 system call to the bootloader, potentially exposing ASP memory to userspace and causing information disclosure. Technical details from connected sou...

5.5CVSS7.1AI score0.00129EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2023/04/12 12:0 a.m.50 views

CVE-2023-26371

Adobe Dimension: CVE-2023-26371 describes an out-of-bounds read when parsing crafted files, enabling code execution in the caller’s context. Affected product: Adobe Dimension versions up to 3.4.8. Exploitation requires user interaction (victim must open a malicious file). Remediation per APSB23-2...

7.8CVSS7.5AI score0.00253EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/04/11 12:0 a.m.34 views

Adobe Dimension < 3.4.9 Multiple Vulnerabilities (APSB23-27) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 3.4.9. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-27 advisory. - Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds write vulnerability that could result in...

7.8CVSS7.1AI score0.00253EPSS
Exploits0References16
Tenable Nessus
Tenable Nessus
added 2023/04/11 12:0 a.m.35 views

Adobe Dimension < 3.4.9 Multiple Vulnerabilities (APSB23-27)

The version of Adobe Dimension installed on the remote Windows host is prior to 3.4.9. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-27 advisory. - Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds write vulnerability that could result ...

7.8CVSS7.1AI score0.00253EPSS
Exploits0References16
NVD
NVD
added 2022/12/02 10:15 p.m.7 views

CVE-2020-26371

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

Exploits0
CVE
CVE
added 1976/01/01 12:0 a.m.28 views

CVE-2020-26371

CVE-2020-26371 is rejected/not used and does not represent an active vulnerability entry.

6.7AI score
Exploits0
Rows per page
Query Builder