Lucene search
K

17 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 9:28 p.m.6 views

CVE-2021-30281

Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon...

8.4CVSS7.2AI score0.00026EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/10 9:8 p.m.15 views

CVE-2025-30281

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify sensitive data without proper authorization. Exploitation of this...

9.8CVSS6.8AI score0.07382EPSS
Exploits0References3
Circl
Circl
added 2025/04/08 9:22 p.m.7 views

CVE-2025-30281

creationtimestamp| type| source ---|---|--- 2025-04-08 21:22:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmdftwypnt2q 2025-04-08 21:40:20+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmdgtjapsv2e 2025-04-08 21:48:50+00:00| seen|...

9.1CVSS7.5AI score0.07382EPSS
Exploits0References6
CVE
CVE
added 2024/05/16 8:56 a.m.67 views

CVE-2024-30281

CVE-2024-30281 affects Substance3D Designer

5.5CVSS5.9AI score0.00039EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/05/16 8:56 a.m.15 views

CVE-2024-30281 Substance3D - Designer | Out-of-bounds Read (CWE-125)

Substance3D - Designer versions 13.1.1 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction ...

5.5CVSS5.3AI score0.00039EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/05/16 12:0 a.m.30 views

Adobe Substance 3D Designer < 13.1.2 Memory Leak (APSB24-35) (macOS)

The version of Adobe Substance 3D Designer installed on the remote macOS host is prior to 13.1.2. It is, therefore, affected by a Remote Code Execution vulnerability as referenced in the APSB24-35 advisory. Successful exploitation of these vulnerabilities could lead to memory leaks in the context...

5.5CVSS5.9AI score0.00039EPSS
Exploits0References2
Circl
Circl
added 2023/05/17 12:32 a.m.0 views

CVE-2023-30281

creationtimestamp| type| source ---|---|--- 2023-05-17 00:32:37+00:00| seen| https://t.me/cibsecurity/64270...

7.5CVSS6.3AI score0.00173EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/05/16 12:0 a.m.10 views

CVE-2023-30281

Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3.7.3 from Store Commander for PrestaShop, a guest can access exports from the module which can lead to leak of personnal informations from pscustomer table sush as name / surnam...

6.6AI score0.00173EPSS
Exploits0References1
CVE
CVE
added 2023/05/16 12:0 a.m.39 views

CVE-2023-30281

The CVE-2023-30281 entry affects Store Commander for PrestaShop, specifically scquickaccounting versions prior to 3.7.3. The underlying issue is insecure permissions that fail to restrict access to exports, allowing a guest to access data that is exported by the module. The practical impact state...

7.5CVSS6.3AI score0.00173EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/16 12:0 a.m.9 views

CVE-2023-30281

Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3.7.3 from Store Commander for PrestaShop, a guest can access exports from the module which can lead to leak of personnal informations from pscustomer table sush as name / surnam...

6.4AI score0.00173EPSS
Exploits0References1
Circl
Circl
added 2022/06/14 2:18 p.m.0 views

CVE-2021-30281

creationtimestamp| type| source ---|---|--- 2022-06-14 14:18:49+00:00| seen| https://t.me/cibsecurity/44359...

8.4CVSS7.5AI score0.00026EPSS
Exploits0References1
CVE
CVE
added 2022/06/14 10:10 a.m.84 views

CVE-2021-30281

CVE-2021-30281 concerns an access control error described for Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Voice & Music, Wearables, Wired Infrastructure & Networking). Description states possible unauthorized access to a secure space due to improper c...

8.4CVSS7.6AI score0.00026EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2020/03/20 12:0 a.m.1 views

ONAP SO Authorization Issue Vulnerability

ONAP SO is a service orchestration program for ONAP from the ONAP project. An authorization issue vulnerability exists in ONAP SO Dublin and prior versions. An attacker can use ports 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271 to gain full privileges to the ONAP service...

10CVSS7.1AI score0.00427EPSS
Exploits0
NVD
NVD
added 2020/03/19 2:15 p.m.6 views

CVE-2019-12128

In ONAP SO through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...

10CVSS9.5AI score0.00427EPSS
Exploits0References1
Prion
Prion
added 2020/03/19 2:15 p.m.11 views

Authentication flaw

In ONAP SO through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...

10CVSS9.3AI score0.00427EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2020/03/19 2:15 p.m.11 views

Authentication flaw

In ONAP MSB through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...

10CVSS9.3AI score0.00427EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2007/07/10 12:0 a.m.158 views

MS07-040: Vulnerabilities in .NET Framework Could Allow Remote Code Execution (931212)

The remote host is running a version of the ASP.NET framework that contains multiple vulnerabilities : - A PE Loader vulnerability could allow an attacker to execute arbitrary code with the privileges of the logged-on user. - An ASP.NET NULL byte termination vulnerability could allow an attacker ...

9.3CVSS6.1AI score0.81926EPSS
Exploits2References5
Rows per page
Query Builder