Lucene search
+L

22193 matches found

NVD
NVD
added 2023/12/02 5:15 a.m.25 views

CVE-2023-39256

Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder during product installation and upgrade, leading to privilege escalation o...

7.8CVSS0.00201EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/02 5:15 a.m.24 views

Improper access control

Dell Rugged Control Center, version prior to 4.7, contains an Improper Access Control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder when product installation repair is performed, leading to privilege...

4.3CVSS7.1AI score0.00201EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/12/02 5:15 a.m.27 views

Improper access control

Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder during product installation and upgrade, leading to privilege escalation o...

4.3CVSS7.1AI score0.00201EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/02 4:22 a.m.32 views

CVE-2023-39257

Dell Rugged Control Center, version prior to 4.7, contains an Improper Access Control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder when product installation repair is performed, leading to privilege...

7.3CVSS7.9AI score0.00201EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/02 4:22 a.m.55 views

CVE-2023-39257

Dell Rugged Control Center prior to version 4.7 contains an Improper Access Control vulnerability that allows a local standard-privilege user to modify content in an unsecured folder during installation/repair, potentially leading to privilege escalation. Affected product: Dell Rugged Control Cen...

7.8CVSS7.6AI score0.00201EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/02 4:18 a.m.47 views

CVE-2023-39256

Dell Rugged Control Center versions prior to 4.7 contain an improper access control vulnerability. A local standard user could modify an unsecured folder during product installation or upgrade, enabling privilege escalation on the host. Connected sources corroborate the issue and explicitly tie i...

7.8CVSS7.6AI score0.00201EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/02 4:18 a.m.28 views

CVE-2023-39256

Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder during product installation and upgrade, leading to privilege escalation o...

7.3CVSS7.9AI score0.00201EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/02 12:00 a.m.13 views

Dell Rugged Control Center 安全漏洞

Dell Rugged Control Center is an application from Dell USA. It allows a range of settings to be configured on the ruggedized device, such as application settings, keyboard backlight settings, night mode settings, stealth mode settings, window settings, antenna switch settings and GPS settings. An...

7.8CVSS6.9AI score0.00201EPSS
SaveExploits0References1
Veracode
Veracode
added 2023/12/01 6:25 a.m.33 views

Missing Authorization

DolphinScheduler is is vulnerable to Missing Authorization. The vulnerability is due to insufficient permission checks for UDF function operations in the resource center. This allowed logged-in users to delete UDF functions without proper authorization...

6.5CVSS6.7AI score0.01132EPSS
SaveExploits0References4Affected Software4
OSV
OSV
added 2023/12/01 2:15 a.m.9 views

CVE-2023-43089

Dell Rugged Control Center, version prior to 4.7, contains insufficient protection for the Policy folder. A local malicious standard user could potentially exploit this vulnerability to modify the content of the policy file, leading to unauthorized access to resources...

3.3CVSS5.8AI score0.00182EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/01 2:15 a.m.31 views

CVE-2023-43089

Dell Rugged Control Center, version prior to 4.7, contains insufficient protection for the Policy folder. A local malicious standard user could potentially exploit this vulnerability to modify the content of the policy file, leading to unauthorized access to resources...

4.4CVSS0.00182EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/01 2:15 a.m.32 views

Design/Logic Flaw

Dell Rugged Control Center, version prior to 4.7, contains insufficient protection for the Policy folder. A local malicious standard user could potentially exploit this vulnerability to modify the content of the policy file, leading to unauthorized access to resources...

1.7CVSS6.8AI score0.00182EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/01 2:06 a.m.30 views

CVE-2023-43089

Dell Rugged Control Center, version prior to 4.7, contains insufficient protection for the Policy folder. A local malicious standard user could potentially exploit this vulnerability to modify the content of the policy file, leading to unauthorized access to resources...

4.4CVSS5.7AI score0.00182EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/01 2:06 a.m.37 views

CVE-2023-43089

Dell Rugged Control Center prior to 4.7 is affected by insufficient protection of the Policy folder, allowing a local standard user to modify the policy file and potentially access resources. Affected product: Dell Rugged Control Center (Windows). Root cause: inadequate protection of the Policy f...

4.4CVSS4AI score0.00182EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/12/01 12:00 a.m.13 views

Dell Rugged Control Center Security Vulnerability

Dell Rugged Control Center is an application from Dell USA. It allows a range of settings to be configured on a ruggedized device, such as application settings, keyboard backlighting settings, night mode settings, stealth mode settings, window settings, antenna switch settings, and GPS settings. ...

4.4CVSS6.6AI score0.00182EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/30 8:17 a.m.27 views

CVE-2023-49620 Apache DolphinScheduler: Authenticated users could delete UDFs in resource center they were not authorized for

Before DolphinScheduler version 3.1.0, the login user could delete UDF function in the resource center unauthorized which almost used in sql task, with unauthorized access vulnerability IDOR, but after version 3.1.0 we fixed this issue. We mark this cve as moderate level because it still requires...

6.5AI score0.01132EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/30 12:00 a.m.18 views

Apache DolphinScheduler Security Vulnerability

Apache Dolphinscheduler is a modern data scheduling platform from the Apache USA Foundation. A security vulnerability exists in Apache DolphinScheduler versions prior to 3.1.0, which stems from the ability of a logged-in user to unauthorizedly delete a resource center via a UDF function...

6.5CVSS6.7AI score0.01132EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/11/30 12:00 a.m.14 views

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks remotely...

6.4CVSS6AI score0.00391EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/30 12:00 a.m.16 views

PT-2023-31274 · Unknown · Dolphinscheduler

Name of the Vulnerable Software and Affected Versions: DolphinScheduler versions prior to 3.1.0 Description: The issue allows authenticated users to delete UDF functions in the resource center without authorization, which is related to an unauthorized access vulnerability, also known as Insecure...

6.5CVSS6.2AI score0.01132EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
added 2023/11/30 12:00 a.m.9 views

The vulnerability of the file loading function of Cisco Firepower Management Center (FMC) software allows a hacker to load any desired files.

The vulnerability of the file loading function of Cisco Firepower Management Center FMC software lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to load any desired files...

6.5CVSS6.5AI score0.00505EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder