Lucene search
+L

1047 matches found

OSV
OSV
•added 2022/05/24 5:06 p.m.•72 views

GHSA-H72V-652W-XV64 Missing permission checks in Health Advisor by CloudBees Plugin

Health Advisor by CloudBees Plugin 3.0 and earlier does not perform permission checks in methods performing form validation. This allows users with Overall/Read access to send an email with fixed content to an attacker-specified recipient. Additionally, these form validation methods do not requir...

5CVSS4.4AI score0.00823EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2022/05/24 5:06 p.m.•40 views

Missing permission checks in Health Advisor by CloudBees Plugin

Health Advisor by CloudBees Plugin 3.0 and earlier does not perform permission checks in methods performing form validation. This allows users with Overall/Read access to send an email with fixed content to an attacker-specified recipient. Additionally, these form validation methods do not requir...

4.3CVSS4.9AI score0.00823EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/05/24 5:06 p.m.•63 views

GHSA-FC92-8R77-9297 CSRF vulnerability in Health Advisor by CloudBees Plugin

Health Advisor by CloudBees Plugin 3.0 and earlier does not perform permission checks in methods performing form validation. This allows users with Overall/Read access to send an email with fixed content to an attacker-specified recipient. Additionally, these form validation methods do not requir...

5CVSS8.6AI score0.00844EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2022/05/24 5:06 p.m.•45 views

CSRF vulnerability in Health Advisor by CloudBees Plugin

Health Advisor by CloudBees Plugin 3.0 and earlier does not perform permission checks in methods performing form validation. This allows users with Overall/Read access to send an email with fixed content to an attacker-specified recipient. Additionally, these form validation methods do not requir...

8.8CVSS8.2AI score0.00844EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/05/12 5:15 p.m.•19 views

CVE-2022-21128

Insufficient control flow management in the IntelR Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.1AI score0.00238EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/12 5:15 p.m.•35 views

CVE-2022-21128

Insufficient control flow management in the IntelR Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS0.00238EPSS
SaveExploits0References1
Prion
Prion
•added 2022/05/12 5:15 p.m.•28 views

Design/Logic Flaw

Insufficient control flow management in the IntelR Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access...

4.6CVSS7.7AI score0.00238EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/05/12 4:35 p.m.•13 views

CVE-2022-21128

Insufficient control flow management in the IntelR Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8AI score0.00238EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/05/12 4:35 p.m.•46 views

CVE-2022-21128

Insufficient control flow management in the IntelR Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access...

8AI score0.00238EPSS
SaveExploits0References1
CVE
CVE
•added 2022/05/12 4:35 p.m.•104 views

CVE-2022-21128

CVE-2022-21128 affects Intel® Advisor prior to version 7.6.0.37. The issue is insufficient control flow management that may allow an authenticated user to escalate privileges via local access. CVSSv3.1 metrics shown in the connected records indicate a local, low-privilege, non‑interactive vector ...

7.8CVSS7.7AI score0.00238EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/12 12:00 a.m.•3 views

CVE-2022-21128: Undefined Security Weakness

Insufficient control flow management in the IntelR Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.3AI score0.00238EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/05/12 12:00 a.m.•15 views

Intel Advisor 安全漏洞

Intel Advisor is a design and analysis tool for developing high-performance code from Intel Corporation USA. A security vulnerability exists in Intel Advisor versions prior to 7.6.0.37, which stems from inadequate control flow management. The vulnerability can be exploited by an authenticated use...

7.8CVSS7.4AI score0.00238EPSS
SaveExploits0References4
Intel
Intel
•added 2022/05/10 12:00 a.m.•53 views

Intel® Advisor Advisory

Summary: A potential security vulnerability in the Intel® Advisor software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21128 Description: Insufficient control flow management in the IntelR...

7.8CVSS7.7AI score0.00238EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/05/10 12:00 a.m.•17 views

PT-2022-3921 · Intel · Intel Advisor

Name of the Vulnerable Software and Affected Versions: Intel Advisor versions prior to 7.6.0.37 Description: The issue is related to insufficient control flow management, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is due to insecure...

7.8CVSS7.5AI score0.00238EPSS
SaveExploits0References4
OSV
OSV
•added 2022/02/09 11:15 p.m.•20 views

CVE-2021-33129

Incorrect default permissions in the software installer for the IntelR Advisor before version 2021.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.0021EPSS
SaveExploits0References1
OSV
OSV
•added 2022/02/09 11:15 p.m.•18 views

CVE-2021-23152

Improper access control in the IntelR Advisor software before version 2021.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00241EPSS
SaveExploits0References1
NVD
NVD
•added 2022/02/09 11:15 p.m.•33 views

CVE-2021-33129

Incorrect default permissions in the software installer for the IntelR Advisor before version 2021.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS0.0021EPSS
SaveExploits0References1
NVD
NVD
•added 2022/02/09 11:15 p.m.•34 views

CVE-2021-23152

Improper access control in the IntelR Advisor software before version 2021.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS0.00241EPSS
SaveExploits0References1
Prion
Prion
•added 2022/02/09 11:15 p.m.•26 views

Design/Logic Flaw

Incorrect default permissions in the software installer for the IntelR Advisor before version 2021.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

4.6CVSS7.8AI score0.0021EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/02/09 10:04 p.m.•9 views

CVE-2021-33129

Incorrect default permissions in the software installer for the IntelR Advisor before version 2021.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.9AI score0.0021EPSS
SaveExploits0References1
Rows per page
Query Builder