Lucene search
+L

12 matches found

Circl
Circl
added yesterday4 views

CVE-2026-48394

creationtimestamp| type| source ---|---|--- 2026-07-28 18:49:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq3aijmvi2e...

7.8CVSS5.8AI score
SaveExploits0References1
EUVD
EUVD
added 2025/11/10 5:21 p.m.0 views

EUVD-2025-48394

Malicious code in cindy-klentik92-sukiwir npm...

6.6AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/08/08 4:7 p.m.12 views

CVE-2025-48394

An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI. This security issue has been fixed in the latest version which is available on the Eaton download center...

4.7CVSS6.2AI score0.00287EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/06 3:25 p.m.6 views

CVE-2025-48394

An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI. This security issue has been fixed in the latest version which is available on the Eaton download center...

4.7CVSS6.3AI score0.00287EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/06 3:25 p.m.22 views

CVE-2025-48394

CVE-2025-48394 affects Eaton CLI (and related Eaton devices noted in connected sources). A privileged, authenticated attacker could modify the contents of a non-sensitive file by traversing the path in the CLI’s limited shell. The issue is mitigated by a fix in the latest Eaton-supplied version a...

4.7CVSS6.3AI score0.00287EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/06 3:25 p.m.17 views

CVE-2025-48394

An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI. This security issue has been fixed in the latest version which is available on the Eaton download center...

4.7CVSS0.00287EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/08 4:34 a.m.15 views

CVE-2024-48394

A Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in the driver of the NDD Print solution, which could allow an unprivileged user to exploit this flaw and gain SYSTEM-level access on the device. The vulnerability affects version 5.24.3 and before of the software...

7.8CVSS6.9AI score0.00133EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/05 10:15 p.m.30 views

CVE-2024-48394

A Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in the driver of the NDD Print solution, which could allow an unprivileged user to exploit this flaw and gain SYSTEM-level access on the device. The vulnerability affects version 5.24.3 and before of the software...

7.8CVSS0.00133EPSS
SaveExploits0References1
Circl
Circl
added 2025/02/05 9:16 p.m.19 views

CVE-2024-48394

creationtimestamp| type| source ---|---|--- 2025-02-05 21:16:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113953353359576542 2025-02-05 22:16:16+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlwoed7y2f...

7.8CVSS6.9AI score0.00133EPSS
SaveExploits0References2
CVE
CVE
added 2025/02/05 12:0 a.m.88 views

CVE-2024-48394

The CVE-2024-48394 entry concerns the NDD Print driver with a TOCTOU vulnerability in versions prior to 5.24.3. An unprivileged user could exploit the flaw to gain SYSTEM-level access on the device. Affected component: NDD Print driver (driver-level TOCTOU). Impact is described as SYSTEM-level co...

7.8CVSS7AI score0.00133EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/05 12:0 a.m.7 views

CVE-2024-48394

A Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in the driver of the NDD Print solution, which could allow an unprivileged user to exploit this flaw and gain SYSTEM-level access on the device. The vulnerability affects version 5.24.3 and before of the software...

7.7AI score0.00133EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/15 9:25 a.m.56 views

CVE-2023-48394

CVE-2023-48394 affects Kaifa Technology WebITR (online attendance system). The issue lies in the file upload function, which does not restrict uploading of dangerous file types. A remote attacker with regular user privileges can upload arbitrary files to execute commands or disrupt service. Conne...

8.8CVSS9AI score0.00886EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder