Lucene search
+L

8446 matches found

Vulnrichment
Vulnrichment
added 2023/10/16 12:32 a.m.21 views

CVE-2023-40377 IBM i privilege escalation

Backup, Recovery, and Media Services BRMS for IBM i 7.2, 7.3, and 7.4 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain component access to the host operating system. IBM X-Force ID: 263583...

4.9CVSS7.8AI score0.00142EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/16 12:00 a.m.12 views

PT-2023-27419 · Ibm · Brms

Name of the Vulnerable Software and Affected Versions: Backup, Recovery, and Media Services BRMS for IBM i versions 7.2 through 7.4 Description: A local privilege escalation issue exists, allowing a malicious actor with command line access to the host operating system to elevate privileges and ga...

7.8CVSS7.9AI score0.00142EPSS
SaveExploits0References4
OSV
OSV
added 2023/10/15 2:15 a.m.8 views

CVE-2023-40378

IBM Directory Server for IBM i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain component access to the host operating system. IBM X-Force ID: 263584...

7.8CVSS5.8AI score0.00142EPSS
SaveExploits0References2
Prion
Prion
added 2023/10/15 2:15 a.m.21 views

Privilege escalation

IBM Directory Server for IBM i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain component access to the host operating system. IBM X-Force ID: 263584...

4.3CVSS7.8AI score0.00142EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/10/15 12:00 a.m.9 views

IBM i Security Vulnerabilities

IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. IBM i has a security vulnerability that stems from the inclusion of a local elevation of privilege vulnerability. A malicious actor accessing the host operating system...

7.8CVSS7.1AI score0.00142EPSS
SaveExploits0References3
OSV
OSV
added 2023/10/13 11:06 a.m.10 views

OESA-2023-1719 freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol RDP that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp. Security Fixes: In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input...

3.5CVSS7AI score0.01466EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/13 12:15 a.m.8 views

CVE-2023-44178

A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service. Repeated actions by the attacker will create a sustained Denial of Service DoS condition. This issue affect...

5.5CVSS5.9AI score0.00163EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/13 12:15 a.m.7 views

CVE-2023-44176

A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service. Repeated actions by the attacker will create a sustained Denial of Service DoS condition. This issue affect...

5.5CVSS5.9AI score0.00163EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/10/13 12:00 a.m.17 views

The vulnerability of the Microsoft Exchange Server mail server, related to errors in checking command arguments, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Exchange Server is related to errors during the validation of command-line arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8CVSS8.1AI score0.03709EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/10/13 12:00 a.m.25 views

Fedora: Security Advisory for xen (FEDORA-2023-948136565a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.11322EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/12 12:15 p.m.8 views

CVE-2023-5045

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Kayisi allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Kayisi: before 1286...

9.8CVSS5.8AI score0.00651EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/12 12:15 p.m.28 views

CVE-2023-5045

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Kayisi allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Kayisi: before 1286...

9.8CVSS10AI score0.00651EPSS
SaveExploits0References2
NVD
NVD
added 2023/10/12 12:15 p.m.17 views

CVE-2023-5046

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Procost: before 1390...

9.8CVSS10AI score0.00651EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/10/12 12:15 p.m.8 views

CVE-2023-5045

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Kayisi allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Kayisi: before 1286...

9.8CVSS7.4AI score0.00651EPSS
SaveExploits0References3
OSV
OSV
added 2023/10/12 12:15 p.m.9 views

CVE-2023-5046

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Procost: before 1390...

9.8CVSS5.8AI score0.00651EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/10/12 12:15 p.m.5 views

CVE-2023-5046

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Procost: before 1390...

9.8CVSS7.4AI score0.00651EPSS
SaveExploits0References3
Prion
Prion
added 2023/10/12 12:15 p.m.18 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Procost: before 1390...

7.5CVSS9.8AI score0.00651EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/12 11:58 a.m.34 views

CVE-2023-5045 SQLi in Biltay's Kayısı

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Kayisi allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Kayisi: before 1286...

9.8CVSS10AI score0.00651EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/10/12 11:55 a.m.24 views

CVE-2023-5046 SQLi in Biltay's Procost

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Procost: before 1390...

9.8CVSS10AI score0.00651EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/12 12:00 a.m.10 views

Juniper Networks Junos OS Buffer Error Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS, which is caused by a stack-based buffer overfl...

5.5CVSS7.3AI score0.00163EPSS
SaveExploits0References5
Rows per page
Query Builder