Lucene search
K

17 matches found

Circl
Circl
added 2026/02/28 12:0 a.m.6 views

CVE-2026-28411

creationtimestamp| type| source ---|---|--- 2026-02-28 00:00:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116145313710936969 2026-02-28 00:00:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfuw7sp34d2h 2026-02-28 01:06:12+00:00| seen|...

9.8CVSS5.3AI score0.00593EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2026/01/09 11:25 a.m.5 views

CVE-2021-28411

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

9.8CVSS7.2AI score0.00751EPSS
Exploits1References1
NVD
NVD
added 2025/04/07 4:15 p.m.6 views

CVE-2025-28411

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method in /tool/gen/editSave...

9.8CVSS0.00538EPSS
Exploits1References2
CVE
CVE
added 2025/04/07 12:0 a.m.52 views

CVE-2025-28411

CVE-2025-28411 affects RUoYi v4.8.0. The issue resides in the editSave function under /tool/gen/editSave, allowing a remote attacker to escalate privileges. Current sources consistently describe a privilege-escalation flaw in RUoYi without listing affected variants beyond v4.8.0. Exploitation det...

9.8CVSS7.4AI score0.00538EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2025/04/07 12:0 a.m.12 views

CVE-2025-28411

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method in /tool/gen/editSave...

0.00538EPSS
Exploits1References2
NVD
NVD
added 2023/08/11 2:15 p.m.11 views

CVE-2021-28411

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

9.8CVSS9.6AI score0.00751EPSS
Exploits1References1
OSV
OSV
added 2023/08/11 2:15 p.m.11 views

CVE-2021-28411

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

9.8CVSS7.5AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/08/11 12:0 a.m.10 views

CVE-2021-28411

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

7.2AI score0.00751EPSS
Exploits1References1
CVE
CVE
added 2023/08/11 12:0 a.m.37 views

CVE-2021-28411

CVE-2021-28411 affects lerry903 RuoYi 3.4.0. Root cause: an issue in getRememberedSerializedIdentity in CookieRememberMeManager allows remote attackers to escalate privileges. Documents consistently describe privilege elevation risk but do not provide patch details. PT-2023-12126 suggests disabli...

9.8CVSS9.5AI score0.00751EPSS
Exploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/05/25 12:0 a.m.43 views

Schneider Electric APC Easy UPS Online Monitoring Software Unauthenticated RMI Calls (CVE-2023-28411)

Binary data schneiderelectricupsmonitoringsoftwareunauthrmi.nbin...

9.8CVSS6.2AI score0.01315EPSS
Exploits0References3
OSV
OSV
added 2023/05/10 2:15 p.m.0 views

CVE-2023-28411

Double free in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access...

5.5CVSS6.1AI score0.00191EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/05/10 1:17 p.m.17 views

CVE-2023-28411

Double free in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access...

6.3CVSS6.2AI score0.00191EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/05/10 1:17 p.m.8 views

CVE-2023-28411

Double free in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access...

6.3CVSS6AI score0.00191EPSS
Exploits0References1
CVE
CVE
added 2023/05/10 1:17 p.m.51 views

CVE-2023-28411

CVE-2023-28411 is a vulnerability in Intel Server Board BMC firmware (before version 2.90) causing a double free that may allow a privileged local attacker to disclose information. The issue is documented in the Intel Server Board BMC firmware advisory (INTEL-SA-00839) and is referenced across mu...

6.3CVSS5.6AI score0.00191EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2022/04/21 8:15 p.m.2 views

CVE-2022-28411

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/admin/?page=agents/manageagent...

9.8CVSS7.3AI score0.01461EPSS
Exploits1References1
CVE
CVE
added 2022/04/21 7:5 p.m.68 views

CVE-2022-28411

CVE-2022-28411 affects Simple Real Estate Portal System v1.0. The vulnerability is a SQL injection exploitable via /reps/admin/?page=agents/manage_agent, as documented across multiple sources (CNVD, NVD, Red Hat, etc.). CVSS indicates a high/critical impact (CVSS v3.1: 9.8, network vector, no aut...

9.8CVSS9.7AI score0.01461EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2019/02/25 12:0 a.m.1 views

MATIO out-of-bounds read and SEGV vulnerabilities (CNVD-2019-28411)

matio is a C library for reading and writing MATLAB MAT files. An out-of-bounds read and SEGV vulnerability exists in the MatVarReadNextInfo5 function in mat5.c in libmatio.a in matio 1.5.13. No detailed vulnerability details are provided at this time...

7.5CVSS6.9AI score0.01656EPSS
Exploits1References1
Rows per page
Query Builder