CVE-2026-45393

A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to escalate privileges to NT AUTHORITY\SYSTEM. Incorrect default permissions on the Windows installer's authentication directory CWE-276 expose a cryptographic secret used for JWT signing and...

CVE-2026-45393 Local privilege escalation to SYSTEM in Cribl Edge for Windows

A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to escalate privileges to NT AUTHORITY\SYSTEM. Incorrect default permissions on the Windows installer's authentication directory CWE-276 expose a cryptographic secret used for JWT signing and...

CVE-2026-45393

Technical details for CVE-2026-45393 are not publicly available in the provided documents. No affected products, impact, or remediation are specified here. Monitor for updates when disclosure is published.

CVE-2024-45393

Computer Vision Annotation Tool CVAT is an interactive video and image annotation tool for computer vision. An attacker with a CVAT account can access webhook delivery information for any webhook registered on the CVAT instance, including that of other users. For each delivery, this contains...

CVE-2022-45393

A cross-site request forgery CSRF vulnerability in Jenkins Delete log Plugin 1.0 and earlier allows attackers to delete build logs...

CVE-2022-45393

creationtimestamp| type| source ---|---|--- 2025-04-30 17:13:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14096 2025-09-28 11:13:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lzveiiq5v5h2...

CVE-2024-45393

creationtimestamp| type| source ---|---|--- 2024-09-10 18:25:05+00:00| seen| https://t.me/cvedetector/5238...

CVE-2024-45393 Computer Vision Annotation Tool (CVAT) is missing authorization for endpoints related to webhook deliveries

Computer Vision Annotation Tool CVAT is an interactive video and image annotation tool for computer vision. An attacker with a CVAT account can access webhook delivery information for any webhook registered on the CVAT instance, including that of other users. For each delivery, this contains...

CVE-2023-45393

creationtimestamp| type| source ---|---|--- 2023-10-13 18:29:02+00:00| seen| https://t.me/cibsecurity/72250...

CVE-2023-45393

GRANDING UTime Master 9.0.7-Build: Apr 4, 2023 is affected by an indirect object reference (IDOR) vulnerability that allows authenticated attackers to access sensitive information via a crafted cookie. Root cause is IDOR in cookie handling; impact is information disclosure with CVSS 3.1 base scor...

CVE-2022-45393

CVE-2022-45393 : A cross-site request forgery (CSRF) vulnerability in the Jenkins Delete log Plugin (version 1.0 and earlier) allows attackers to delete build logs. The core issue is an insufficient privilege check enabling CSRF to trigger log deletions. Affected product: Jenkins Delete log Plugi...

CVE-2022-45393

A cross-site request forgery CSRF vulnerability in Jenkins Delete log Plugin 1.0 and earlier allows attackers to delete build logs...