Lucene search
+L

1156 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 10:20 a.m.•15 views

CVE-2019-15663

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges issue 1 of 2...

4CVSS6.8AI score0.00875EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:09 a.m.•22 views

CVE-2019-19291

A vulnerability has been identified in Control Center Server CCS All versions V1.5.0, SiNVR/SiVMS Video Server All versions V5.0.0. The FTP services of the SiVMS/SiNVR Video Server and the Control Center Server CCS maintain log files that store login credentials in cleartext. In configurations...

6.5CVSS6.6AI score0.00749EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:21 a.m.•19 views

CVE-2019-19295

A vulnerability has been identified in Control Center Server CCS All versions V1.5.0. The Control Center Server CCS does not enforce logging of security-relevant activities in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. An authenticated remote...

4.3CVSS6.3AI score0.01054EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:20 a.m.•17 views

CVE-2019-19294

A vulnerability has been identified in Control Center Server CCS All versions V1.5.0. The web interface of the Control Center Server CCS contains multiple stored Cross-site Scripting XSS vulnerabilities in several input fields. This could allow an authenticated remote attacker to inject malicious...

6.3CVSS5.8AI score0.0101EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:20 a.m.•21 views

CVE-2019-13947

A vulnerability has been identified in Control Center Server CCS All versions V1.5.0. The user configuration menu in the web interface of the Control Center Server CCS transfers user passwords in clear to the client browser. An attacker with administrative privileges for the web interface could b...

4.9CVSS6.4AI score0.00857EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:20 a.m.•17 views

CVE-2019-19293

A vulnerability has been identified in Control Center Server CCS All versions V1.5.0. The web interface of the Control Center Server CCS contains a reflected Cross-site Scripting XSS vulnerability that could allow an unauthenticated remote attacker to steal sensitive data or execute administrativ...

6.1CVSS6AI score0.01281EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:18 a.m.•16 views

CVE-2019-15662

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120444 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary read primitive that can be used as part of a chain to escalate privileges...

4CVSS7AI score0.00936EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:31 a.m.•17 views

CVE-2019-15664

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges issue 2 of 2...

4CVSS6.9AI score0.00875EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:52 a.m.•17 views

CVE-2012-0301

Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to hijack web sessions via unspecified vectors...

5.4CVSS7AI score0.00772EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:54 a.m.•19 views

CVE-2019-19290

A vulnerability has been identified in Control Center Server CCS All versions V1.5.0. The DOWNLOADS section in the web interface of the Control Center Server CCS contains a path traversal vulnerability that could allow an authenticated remote attacker to access and download arbitrary files from t...

6.5CVSS6.7AI score0.01813EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:36 a.m.•17 views

CVE-2019-15665

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120004 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary write primitive that can lead to code execution or escalation of privileges...

9CVSS7.8AI score0.02556EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/16 12:00 a.m.•25 views

PT-2025-21591

Name of the Vulnerable Software and Affected Versions: Wibu CodeMeter versions prior to 8.30a Description: The issue allows for privilege escalation immediately after installation, before a logoff or reboot, under specific conditions. These conditions include an unprivileged installation with UAC...

8.2CVSS6.4AI score0.0017EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/16 12:00 a.m.•1 views

CVE-2025-47809: Least Privilege Violation

Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation before a logoff or reboot. For exploitation, there must have been an unprivileged installation with UAC, and the CodeMeter Control Center component must be installed, and the CodeMeter Control Center...

8.2CVSS5.8AI score0.0017EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/04/25 12:00 a.m.•25 views

IBM Sterling Control Center Cross-Site Scripting Vulnerability (CNVD-2025-09285)

IBM Sterling Control Center is an application system from International Business Machines IBM. A centralized monitoring and management system. IBM Sterling Control Center suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping o...

5.4CVSS6.1AI score0.00232EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/04/18 1:42 a.m.•29 views

SUSE CVE-2023-5616

In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user...

4.9CVSS6.7AI score0.00232EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/04/17 8:03 p.m.•39 views

CVE-2023-5616

A flaw was found in the GNOME Control Center. This vulnerability allows the SSH service to be improperly enabled without properly managing systemd units, which could unintentionally expose remote login access through insecure service activation management. Mitigation Mitigation for this issue is...

4.9CVSS4.9AI score0.00232EPSS
SaveExploits1References6
NVD
NVD
•added 2025/04/15 7:16 p.m.•29 views

CVE-2023-5616

In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user...

4.9CVSS0.00232EPSS
SaveExploits1References3
OSV
OSV
•added 2025/04/15 7:16 p.m.•92 views

DEBIAN-CVE-2023-5616

In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user...

4.9CVSS5.3AI score0.00232EPSS
SaveExploits1References1
OSV
OSV
•added 2025/04/15 7:16 p.m.•29 views

CVE-2023-5616

In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user...

4.9CVSS7AI score
SaveExploits0References3
Debian CVE
Debian CVE
•added 2025/04/15 6:29 p.m.•143 views

CVE-2023-5616

In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user...

4.9CVSS5.3AI score0.00232EPSS
SaveExploits1
Rows per page
Query Builder