17 matches found
CVE-2021-30281
Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon...
CVE-2025-30281
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify sensitive data without proper authorization. Exploitation of this...
CVE-2025-30281
creationtimestamp| type| source ---|---|--- 2025-04-08 21:22:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmdftwypnt2q 2025-04-08 21:40:20+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmdgtjapsv2e 2025-04-08 21:48:50+00:00| seen|...
CVE-2024-30281
CVE-2024-30281 affects Substance3D Designer
CVE-2024-30281 Substance3D - Designer | Out-of-bounds Read (CWE-125)
Substance3D - Designer versions 13.1.1 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction ...
Adobe Substance 3D Designer < 13.1.2 Memory Leak (APSB24-35) (macOS)
The version of Adobe Substance 3D Designer installed on the remote macOS host is prior to 13.1.2. It is, therefore, affected by a Remote Code Execution vulnerability as referenced in the APSB24-35 advisory. Successful exploitation of these vulnerabilities could lead to memory leaks in the context...
CVE-2023-30281
creationtimestamp| type| source ---|---|--- 2023-05-17 00:32:37+00:00| seen| https://t.me/cibsecurity/64270...
CVE-2023-30281
Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3.7.3 from Store Commander for PrestaShop, a guest can access exports from the module which can lead to leak of personnal informations from pscustomer table sush as name / surnam...
CVE-2023-30281
The CVE-2023-30281 entry affects Store Commander for PrestaShop, specifically scquickaccounting versions prior to 3.7.3. The underlying issue is insecure permissions that fail to restrict access to exports, allowing a guest to access data that is exported by the module. The practical impact state...
CVE-2023-30281
Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3.7.3 from Store Commander for PrestaShop, a guest can access exports from the module which can lead to leak of personnal informations from pscustomer table sush as name / surnam...
CVE-2021-30281
creationtimestamp| type| source ---|---|--- 2022-06-14 14:18:49+00:00| seen| https://t.me/cibsecurity/44359...
CVE-2021-30281
CVE-2021-30281 concerns an access control error described for Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Voice & Music, Wearables, Wired Infrastructure & Networking). Description states possible unauthorized access to a secure space due to improper c...
ONAP SO Authorization Issue Vulnerability
ONAP SO is a service orchestration program for ONAP from the ONAP project. An authorization issue vulnerability exists in ONAP SO Dublin and prior versions. An attacker can use ports 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271 to gain full privileges to the ONAP service...
CVE-2019-12128
In ONAP SO through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...
Authentication flaw
In ONAP SO through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...
Authentication flaw
In ONAP MSB through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...
MS07-040: Vulnerabilities in .NET Framework Could Allow Remote Code Execution (931212)
The remote host is running a version of the ASP.NET framework that contains multiple vulnerabilities : - A PE Loader vulnerability could allow an attacker to execute arbitrary code with the privileges of the logged-on user. - An ASP.NET NULL byte termination vulnerability could allow an attacker ...