Lucene search
K

850 matches found

BDU FSTEC
BDU FSTEC
added 2024/12/10 12:0 a.m.1 views

The vulnerability of the 2N Access Commander access control system lies in its insufficient verification of data authenticity, allowing attackers to increase their privileges.

The vulnerability of the 2N Access Commander access control system lies in insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

9CVSS5.5AI score0.00154EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/10 12:0 a.m.1 views

The vulnerability of the 2N Access Commander access control system lies in its insufficient verification of data authenticity. This allows attackers to elevate their privileges and execute arbitrary codes.

The vulnerability of the 2N Access Commander access control system lies in insufficient verification of data authenticity. Exploiting this vulnerability can allow an intruder to enhance their privileges and execute arbitrary code...

7.8CVSS5.8AI score0.00029EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2024/11/05 10:20 a.m.2 views

CVE-2024-47255

In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitrary code execution with root permissions...

7.8CVSS6AI score0.00029EPSS
Exploits0References1
NVD
NVD
added 2024/11/05 10:20 a.m.10 views

CVE-2024-47255

In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitrary code execution with root permissions...

7.8CVSS0.00029EPSS
Exploits0References1
OSV
OSV
added 2024/11/05 10:20 a.m.1 views

CVE-2024-47254

In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain root access to the system...

7.2CVSS5.8AI score0.00154EPSS
Exploits0References1
NVD
NVD
added 2024/11/05 10:20 a.m.13 views

CVE-2024-47254

In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain root access to the system...

7.2CVSS0.00154EPSS
Exploits0References1
OSV
OSV
added 2024/11/05 10:20 a.m.0 views

CVE-2024-47253

In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to write files on the filesystem and potentially achieve arbitrary remote code execution. This vulnerability cannot be exploited by users with lower privilege...

7.2CVSS6.1AI score0.07477EPSS
Exploits0References1
CVE
CVE
added 2024/11/05 9:16 a.m.50 views

CVE-2024-47255

2N Access Commander, versions 3.1.1.2 and earlier, contain multiple vulnerabilities. A path traversal flaw could allow an attacker to write files and achieve arbitrary remote code execution with root privileges. Separately, insufficient verification of data authenticity could enable local privile...

7.8CVSS7.5AI score0.00029EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/05 9:16 a.m.17 views

CVE-2024-47255

In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitrary code execution with root permissions...

4.7CVSS0.00029EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/05 9:16 a.m.9 views

CVE-2024-47255

In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitrary code execution with root permissions...

4.7CVSS7.2AI score0.00029EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/05 9:13 a.m.14 views

CVE-2024-47254

In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain root access to the system...

6.3CVSS0.00154EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/05 9:13 a.m.12 views

CVE-2024-47254

In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain root access to the system...

6.3CVSS7.3AI score0.00154EPSS
Exploits0References1
CVE
CVE
added 2024/11/05 9:13 a.m.61 views

CVE-2024-47254

CVE-2024-47254 affects 2N Access Commander v3.1.1.2 and earlier. The advisory details two issues: (1) path traversal could allow arbitrary file writes and remote code execution; (2) insufficient verification of data authenticity could enable privilege escalation and root access. Impact includes p...

7.2CVSS7.5AI score0.00154EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/11/05 9:8 a.m.48 views

CVE-2024-47253

CVE-2024-47253 affects 2N Access Commander versions 3.1.1.2 and earlier. A path traversal vulnerability could allow an attacker with administrative privileges to write files on the filesystem and potentially achieve arbitrary remote code execution; exploitation is not possible for lower-privilege...

7.2CVSS7.4AI score0.07477EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/05 9:8 a.m.11 views

CVE-2024-47253

In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to write files on the filesystem and potentially achieve arbitrary remote code execution. This vulnerability cannot be exploited by users with lower privilege...

7.2CVSS7.9AI score0.07477EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/05 9:8 a.m.14 views

CVE-2024-47253

In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to write files on the filesystem and potentially achieve arbitrary remote code execution. This vulnerability cannot be exploited by users with lower privilege...

7.2CVSS0.07477EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/05 12:0 a.m.3 views

2N Access Commander 安全漏洞

2N Access Commander is an access control solution from 2N. A security vulnerability exists in 2N Access Commander version 3.1.1.2 and prior versions, which stems from the presence of a Data Authenticity Validation Insufficiency vulnerability that allows an attacker to elevate its privileges and...

7.2CVSS6.7AI score0.00154EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/05 12:0 a.m.2 views

2N Access Commander 安全漏洞

2N Access Commander is an access control solution from 2N. A security vulnerability exists in 2N Access Commander version 3.1.1.2 and earlier, which originates from a local attacker who can elevate system privileges to execute arbitrary code with root privileges...

7.8CVSS7.4AI score0.00029EPSS
Exploits0References1
Snyk
Snyk
added 2024/10/01 6:40 a.m.1 views

Use of Cache Containing Sensitive Information

Overview querycommander is a Browser-based SQL Query Tool for Universal Database Management Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information potentially exposing user data across sessions due to improper caching. Remediation Upgrade querycommander ...

8.7CVSS7.4AI score
Exploits0References3
OSV
OSV
added 2024/09/14 11:9 a.m.2 views

OESA-2024-2133 osc security update

The osc is an opensuse-commander with svn like handling. It's a command line interface to work with an Open Build Service. Security Fixes: CVE-2024-22034...

5.5CVSS7.1AI score0.00021EPSS
Exploits0References2
Rows per page
Query Builder