Lucene search
+L

1000 matches found

CNVD
CNVD
added 2024/01/22 12:0 a.m.11 views

IBM Sterling Control Center Directory Traversal Vulnerability

IBM Sterling Control Center is a file transfer management solution from International Business Machines IBM. A directory traversal vulnerability exists in IBM Sterling Control Center, which can be exploited by a remote attacker to submit a special request that can be used in an application contex...

5.4CVSS6.4AI score0.00537EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/19 1:15 a.m.8 views

CVE-2023-35020

IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 257874...

5.3CVSS5.9AI score0.00537EPSS
SaveExploits0References2
NVD
NVD
added 2024/01/19 1:15 a.m.20 views

CVE-2023-35020

IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 257874...

5.4CVSS5.4AI score0.00537EPSS
SaveExploits0References2
Prion
Prion
added 2024/01/19 1:15 a.m.21 views

Design/Logic Flaw

IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 257874...

5CVSS6.8AI score0.00537EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/19 1:5 a.m.16 views

CVE-2023-35020 IBM Sterling Control Center directory traversal

IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 257874...

5.4CVSS6.7AI score0.00537EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/01/19 1:5 a.m.38 views

CVE-2023-35020 IBM Sterling Control Center directory traversal

IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 257874...

5.4CVSS5.5AI score0.00537EPSS
SaveExploits0References2
CVE
CVE
added 2024/01/19 1:5 a.m.56 views

CVE-2023-35020

CVE-2023-35020 affects IBM Sterling Control Center 6.3.0. The vulnerability enables a remote attacker to traverse directories by sending URL requests containing "/.." sequences, allowing viewing of arbitrary system files. The primary impact is potential unintended disclosure of files with a Low c...

5.4CVSS5.2AI score0.00537EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/01/19 12:0 a.m.9 views

IBM Sterling Control Center 路径遍历漏洞

IBM Sterling Control Center is a file transfer management solution from International Business Machines IBM. A directory traversal vulnerability exists in IBM Sterling Control Center, which can be exploited by a remote attacker to submit a special request that can be used in an application contex...

5.4CVSS6.6AI score0.00537EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/01/18 12:0 a.m.17 views

PT-2024-12491 · Ibm · Ibm Sterling Control Center

Name of the Vulnerable Software and Affected Versions: IBM Sterling Control Center version 6.3.0 Description: The issue allows a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary file...

5.4CVSS5.2AI score0.00537EPSS
SaveExploits0References7
OSV
OSV
added 2024/01/12 1:15 a.m.8 views

CVE-2024-21589

An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated network-based attacker to access reports without authenticating, potentially containing sensitive configuration information. A feature was introduced in version 3.1.0...

7.5CVSS5.8AI score0.00431EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/12/14 12:0 a.m.14 views

Gnome control center security vulnerability

Gnome control center is a graphical user interface for the GNOME project. It is used to configure all aspects of Gnome. A security vulnerability exists in Gnome control center that stems from an inability to accurately reflect SSH remote login status...

4.9CVSS6.8AI score0.00222EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2023/12/14 12:0 a.m.11 views

Ubuntu: Security Advisory (USN-6554-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.9CVSS7.2AI score0.00222EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2023/12/13 12:0 a.m.28 views

CVE-2023-5616

In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user...

4.9CVSS6AI score0.00222EPSS
SaveExploits1References2
OSV
OSV
added 2023/12/13 12:0 a.m.18 views

UBUNTU-CVE-2023-5616

In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user...

4.9CVSS5.8AI score0.00222EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2023/12/07 12:0 a.m.16 views

Dell Rugged Control Center Installed (Windows)

Binary data dellruggedcontrolcenterwininstalled.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/12/07 12:0 a.m.30 views

Dell Rugged Control Center < 4.7 Multiple Vulnerabilities

The version of Dell Rugged Control Center installed on the remote host is prior to 4.7. It is, therefore, affected by multiple vulnerabilities as described in the DSA-2023-340 and DSA-2023-371 advisories. - Improper access control vulnerability whereby a local attacker, with standard user...

7.8CVSS6.3AI score0.00201EPSS
SaveExploits0References5
CNVD
CNVD
added 2023/12/05 12:0 a.m.10 views

Dell Rugged Control Center Access Control Error Vulnerability (CNVD-2024-0019327)

Dell Rugged Control Center is an application from Dell USA. It allows a range of settings to be configured on the ruggedized device, such as application settings, keyboard backlight settings, night mode settings, stealth mode settings, window settings, antenna switch settings and GPS settings. An...

7.8CVSS6.7AI score0.00201EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/02 5:15 a.m.24 views

CVE-2023-39257

Dell Rugged Control Center, version prior to 4.7, contains an Improper Access Control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder when product installation repair is performed, leading to privilege...

7.8CVSS0.00201EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/02 5:15 a.m.6 views

CVE-2023-39257

Dell Rugged Control Center, version prior to 4.7, contains an Improper Access Control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder when product installation repair is performed, leading to privilege...

7.8CVSS5.8AI score
SaveExploits0References1
OSV
OSV
added 2023/12/02 5:15 a.m.7 views

CVE-2023-39256

Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder during product installation and upgrade, leading to privilege escalation o...

7.8CVSS5.8AI score0.00201EPSS
SaveExploits0References1
Rows per page
Query Builder