12 matches found
CVE-2021-30605
Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls...
CVE-2025-30605
creationtimestamp| type| source ---|---|--- 2025-03-24 16:43:50+00:00| seen| https://t.me/cvedetector/20963...
CVE-2025-30605 WordPress sourceplay-navermap plugin <= 0.0.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in ldwin79 sourceplay-navermap sourceplay-navermap allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects sourceplay-navermap: from n/a through = 0.0.2...
CVE-2023-30605
creationtimestamp| type| source ---|---|--- 2023-04-19 07:43:35+00:00| seen| https://t.me/cibsecurity/62444...
CVE-2023-30605 Multiple SQL injections in sql/instance.py param_edit method in Archery - GHSL-2022-104
Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. User input coming from the variablename and variablevalue parameter value in the sql/instance.py paramedit endpoint is...
CVE-2022-30605
A privilege escalation vulnerability exists in the session id functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to increased privileges. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability...
CVE-2022-30605
Summary (concrete): WWBN AVideo 11.6 (and dev master commit 3f7c0364) is affected by a session-id privilege-escalation vulnerability. The flaw, described in TALOS-2022-1535, lets an attacker hijack an admin/user session by supplying a crafted PHPSESSID via a GET parameter, effectively enabling se...
WWBN AVideo session id privilege escalation vulnerability
Talos Vulnerability Report TALOS-2022-1535 WWBN AVideo session id privilege escalation vulnerability August 16, 2022 CVE Number CVE-2022-30605 SUMMARY A privilege escalation vulnerability exists in the session id functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafte...
CVE-2021-30605
creationtimestamp| type| source ---|---|--- 2021-09-09 00:28:59+00:00| seen| https://t.me/cibsecurity/28540...
CVE-2021-30605
Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls...
CVE-2021-30605
The CVE-2021-30605 entry concerns the ChromeOS Readiness Tool installer for Windows prior to version 1.0.2.0, where the vulnerability arises from an inappropriate implementation that relaxes DCOM access rights on two objects, potentially allowing bypass of discretionary access controls. The conne...
CVE-2021-30605
Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls...