Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 7:39 p.m.6 views

CVE-2021-30605

Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls...

7.8CVSS7AI score0.00013EPSS
Exploits0References1
Circl
Circl
added 2025/03/24 4:43 p.m.1 views

CVE-2025-30605

creationtimestamp| type| source ---|---|--- 2025-03-24 16:43:50+00:00| seen| https://t.me/cvedetector/20963...

4.3CVSS8.7AI score0.0009EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/24 1:47 p.m.17 views

CVE-2025-30605 WordPress sourceplay-navermap plugin <= 0.0.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in ldwin79 sourceplay-navermap sourceplay-navermap allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects sourceplay-navermap: from n/a through = 0.0.2...

4.3CVSS0.0009EPSS
Exploits0References1
Circl
Circl
added 2023/04/19 7:43 a.m.3 views

CVE-2023-30605

creationtimestamp| type| source ---|---|--- 2023-04-19 07:43:35+00:00| seen| https://t.me/cibsecurity/62444...

6.5CVSS6.3AI score0.01146EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/04/18 10:35 p.m.7 views

CVE-2023-30605 Multiple SQL injections in sql/instance.py param_edit method in Archery - GHSL-2022-104

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. User input coming from the variablename and variablevalue parameter value in the sql/instance.py paramedit endpoint is...

6.5CVSS7AI score0.01146EPSS
Exploits1References2
OSV
OSV
added 2022/08/22 7:15 p.m.8 views

CVE-2022-30605

A privilege escalation vulnerability exists in the session id functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to increased privileges. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability...

8.8CVSS6.9AI score
Exploits0References2
CVE
CVE
added 2022/08/22 6:24 p.m.49 views

CVE-2022-30605

Summary (concrete): WWBN AVideo 11.6 (and dev master commit 3f7c0364) is affected by a session-id privilege-escalation vulnerability. The flaw, described in TALOS-2022-1535, lets an attacker hijack an admin/user session by supplying a crafted PHPSESSID via a GET parameter, effectively enabling se...

8.8CVSS8.6AI score0.00748EPSS
Exploits1References2Affected Software1
Talos
Talos
added 2022/08/16 12:0 a.m.27 views

WWBN AVideo session id privilege escalation vulnerability

Talos Vulnerability Report TALOS-2022-1535 WWBN AVideo session id privilege escalation vulnerability August 16, 2022 CVE Number CVE-2022-30605 SUMMARY A privilege escalation vulnerability exists in the session id functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafte...

8.8CVSS8.7AI score0.00748EPSS
Exploits1
Circl
Circl
added 2021/09/09 12:28 a.m.1 views

CVE-2021-30605

creationtimestamp| type| source ---|---|--- 2021-09-09 00:28:59+00:00| seen| https://t.me/cibsecurity/28540...

7.8CVSS7.5AI score0.00013EPSS
Exploits0References1
NVD
NVD
added 2021/09/08 9:15 p.m.12 views

CVE-2021-30605

Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls...

7.8CVSS0.00013EPSS
Exploits0References2
CVE
CVE
added 2021/09/08 8:35 p.m.52 views

CVE-2021-30605

The CVE-2021-30605 entry concerns the ChromeOS Readiness Tool installer for Windows prior to version 1.0.2.0, where the vulnerability arises from an inappropriate implementation that relaxes DCOM access rights on two objects, potentially allowing bypass of discretionary access controls. The conne...

7.8CVSS7.5AI score0.00013EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/09/08 8:35 p.m.15 views

CVE-2021-30605

Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls...

7.8AI score0.00013EPSS
Exploits0References2
Rows per page
Query Builder