Lucene search
+L

400 matches found

NVD
NVD
•added 2025/04/28 12:15 a.m.•27 views

CVE-2025-31144

Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication channel to intended endpoints. If exploited, a remote unauthenticated attacker may attempt to log in to an arbitrary host via Windows system where the product is running...

6.9CVSS0.00484EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/28 12:00 a.m.•6 views

CVE-2025-31144: Improper Restriction of Communication Channel to Intended Endpoints

Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication channel to intended endpoints. If exploited, a remote unauthenticated attacker may attempt to log in to an arbitrary host via Windows system where the product is running...

6.9CVSS6.8AI score0.00484EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•18 views

PT-2025-16980 · Unknown · Work Desktop For Mac

Name of the Vulnerable Software and Affected Versions: Work Desktop for Mac versions 10.8.1.46 and earlier Description: The issue is related to improper verification of the source of a communication channel, allowing attackers to execute arbitrary commands via unauthorized access to the Agent...

9.3CVSS7.3AI score0.00273EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/04/10 3:14 p.m.•27 views

CVE-2024-26013

A improper restriction of communication channel to intended endpoints vulnerability CWE-923 in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15 and before 6.2.16, Fortinet FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9 and...

7.5CVSS7.1AI score0.00498EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/10 10:58 a.m.•34 views

CVE-2025-29986

Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized...

8.3CVSS7.3AI score0.00286EPSS
SaveExploits0References3
CVE
CVE
•added 2025/04/08 2:03 p.m.•119 views

CVE-2024-26013

The CVE-2024-26013 entry describes an improper restriction of a communication channel to intended endpoints (CWE-923) in multiple Fortinet products. Affected products and versions include FortiOS: 7.4.0–7.4.4, 7.2.0–7.2.8, 7.0.0–7.0.15, 6.4.0–6.4.15 and before 6.2.16; FortiProxy: 7.4.0–7.4.2, 7.2...

7.5CVSS7.3AI score0.00498EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/04/08 2:03 p.m.•73 views

CVE-2024-26013

A improper restriction of communication channel to intended endpoints vulnerability CWE-923 in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15 and before 6.2.16, Fortinet FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9 and...

7.5CVSS0.00498EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/08 10:40 a.m.•47 views

CVE-2025-29986

Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized...

8.3CVSS0.00286EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/08 10:40 a.m.•24 views

CVE-2025-29986

Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized...

8.3CVSS7.3AI score0.00286EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•5 views

CVE-2025-29986: Improper Restriction of Communication Channel to Intended Endpoints

Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized...

8.3CVSS6AI score0.00286EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/08 12:00 a.m.•15 views

Dell Common Event Enabler 安全漏洞

Dell Common Event Enabler is a framework from Dell USA. An unauthorized access vulnerability exists in Dell Common Event Enabler. The vulnerability stems from a communication channel that does not properly restrict the target endpoint, resulting in unauthorized access. An attacker could exploit...

8.3CVSS6.6AI score0.00286EPSS
SaveExploits0References2
CVE
CVE
•added 2025/02/12 9:20 p.m.•65 views

CVE-2024-39271

CVE-2024-39271 affects Intel PROSet/Wireless WiFi and Killer WiFi software prior to version 23.80. The root cause is improper restriction of the communication channel to intended endpoints, which could allow an unauthenticated adjacent user to disclose information. Multiple sources (Intel advisor...

2.6CVSS6.8AI score0.00257EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:20 p.m.•17 views

CVE-2022-4847

Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...

8.3CVSS6.6AI score0.00642EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:18 p.m.•16 views

CVE-2022-4848

Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...

8.6CVSS6.6AI score0.00528EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/05 10:18 a.m.•15 views

CVE-2024-12399

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs man in the middle attack by intercepting the communication...

7.1CVSS6.6AI score0.00172EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/30 12:00 a.m.•3 views

CVE-2022-43916: Improper Restriction of Communication Channel to Intended Endpoints

IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, and 12.7 Pods do not restrict network egress for Pods that are used for internal infrastructure...

9.1CVSS5.7AI score0.00275EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/17 9:37 a.m.•24 views

CVE-2024-12399

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs man in the middle attack by intercepting the communication...

7.1CVSS0.00172EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/17 9:37 a.m.•74 views

CVE-2024-12399

The CVE-2024-12399 entry concerns Schneider Electric Pro-face GP‑Pro EX and Remote HMI. The underlying issue is improper enforcement of message integrity during transmission in a communication channel, which could enable a man‑in‑the‑middle attack and lead to partial loss of confidentiality, inte...

7.1CVSS6.8AI score0.00172EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/17 9:37 a.m.•7 views

CVE-2024-12399

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs man in the middle attack by intercepting the communication...

7.1CVSS6.8AI score0.00172EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/14 2:15 p.m.•21 views

CVE-2024-36506

An improper verification of source of a communication channel vulnerability CWE-940 in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, 6.4 all versions may allow a remote attacker to bypass the trusted host feature via session connection...

5.3CVSS5.8AI score0.00506EPSS
SaveExploits0References1
Rows per page
Query Builder