Lucene search
K

10 matches found

Circl
Circl
added 2024/01/09 4:40 p.m.1 views

CVE-2023-41807

creationtimestamp| type| source ---|---|--- 2024-01-09 16:40:06+00:00| seen| https://t.me/truesecator/5271...

9.1CVSS8.1AI score0.00041EPSS
Exploits0References1
NVD
NVD
added 2023/11/23 3:15 p.m.8 views

CVE-2023-41807

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows a user to escalate permissions on the system shell. This issue affects Pandora FMS: from 700 through 773...

9.1CVSS0.00041EPSS
Exploits0References1
CVE
CVE
added 2023/11/23 2:49 p.m.36 views

CVE-2023-41807

Pandora FMS up to v773 is affected by CVE-2023-41807, a Linux local privilege escalation via the GoTTY page. The underlying issue is improper privilege management on the Pandora FMS console, enabling an unprivileged user to escalate to root through the GoTTY interface. Reports from PT Security an...

9.1CVSS8.9AI score0.00041EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/23 2:49 p.m.11 views

CVE-2023-41807 Linux Local Privilege Escalation Via GoTTY Page

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows a user to escalate permissions on the system shell. This issue affects Pandora FMS: from 700 through 773...

9.1CVSS9.4AI score0.00041EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/12/05 12:0 a.m.8 views

CVE-2022-41807

Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci,...

7AI score0.00035EPSS
Exploits0References3
CVE
CVE
added 2022/12/05 12:0 a.m.68 views

CVE-2022-41807

CVE-2022-41807 describes a missing authorization vulnerability in Kyocera Document Solutions MFPs and printers, allowing a network-adjacent attacker to alter product settings without authentication by sending a crafted request. The affected products span multiple Kyocera lines, including TASKalfa...

6.5CVSS6.4AI score0.00035EPSS
Exploits0References3Affected Software1
Circl
Circl
added 2022/01/18 8:24 p.m.0 views

CVE-2021-41807

creationtimestamp| type| source ---|---|--- 2022-01-18 20:24:48+00:00| seen| https://t.me/cibsecurity/35715...

9.8CVSS8.7AI score0.00229EPSS
Exploits0References1
OSV
OSV
added 2022/01/18 5:15 p.m.1 views

CVE-2021-41807

Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of user accounts allows unlimited amount of attempts and therefore makes brute-forcing login accounts easier...

9.8CVSS7.3AI score0.00229EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/01/18 4:51 p.m.17 views

CVE-2021-41807 Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts.

Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of user accounts allows unlimited amount of attempts and therefore makes brute-forcing login accounts easier...

7.5CVSS9.6AI score0.00229EPSS
Exploits0References2
CVE
CVE
added 2022/01/18 4:51 p.m.57 views

CVE-2021-41807

The CVE-2021-41807 issue affects M-Files Server and M-Files Web prior to version 21.12.10873.0. Root cause: lack of rate limiting on certain user accounts enables unlimited login attempts, facilitating brute-forcing of accounts. Impact is a high-severity authentication weakness with potential for...

9.8CVSS8.7AI score0.00229EPSS
Exploits0References2Affected Software2
Rows per page
Query Builder