Lucene search
+L

3283 matches found

CNNVD
CNNVD
added 2023/01/10 12:00 a.m.10 views

WordPress plugin Royal Elementor Addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS7.9AI score0.00754EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2023/01/10 12:00 a.m.8 views

PT-2023-15141 · WordPress · Royal Elementor Addons

Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons plugin for WordPress versions up to, and including, 1.3.59 Description: The issue is related to insufficient access control in the 'wpr import templates kit' AJAX action. This allows any authenticated user, includin...

8.1CVSS5.6AI score0.00792EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2023/01/10 12:00 a.m.8 views

PT-2023-15128 · WordPress · Royal Elementor Addons

Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons plugin for WordPress versions up to, and including, 1.3.59 Description: The issue is related to insufficient access control in the 'wpr activate required theme' AJAX action. This allows any authenticated user,...

8.8CVSS8.3AI score0.00818EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2023/01/10 12:00 a.m.9 views

PT-2023-15139 · WordPress · Royal Elementor Addons

Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons plugin for WordPress versions up to, and including, 1.3.59 Description: The issue is related to insufficient access control in the 'wpr reset previous import' AJAX action. This allows any authenticated user, includi...

8.1CVSS7.8AI score0.00945EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2023/01/10 12:00 a.m.15 views

PT-2023-15156 · WordPress · Royal Elementor Addons

Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons plugin for WordPress versions up to, and including, 1.3.59 Description: The issue is related to insufficient access control in the 'wpr save template conditions' AJAX action. This allows any authenticated user,...

6.5CVSS6.6AI score0.00603EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
added 2022/12/28 12:00 a.m.14 views

The vulnerability of the kbdint_next_device() function in the sshd service of the OpenSSH security tool allows a attacker to execute a brute-force attack or cause a service failure.

The vulnerability of the kbdintnextdevice function in the sshd service of the OpenSSH cryptographic protection mechanism is related to deficiencies in access control when processing the oKbdInteractiveDevices parameter, which contains a list of methods for authenticating using an interactive...

8.5CVSS6.6AI score0.09377EPSS
SaveExploits1References23Affected Software19
BDU FSTEC
BDU FSTEC
added 2022/12/28 12:00 a.m.11 views

The vulnerability of the Oracle Solaris operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the Oracle Solaris operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.2AI score0.0021EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/12/28 12:00 a.m.6 views

PT-2022-28102 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to insufficient granularity of access control, allowing an attacker to archive any user's public or private post. This affects the usememos/memos GitHub repository...

8.2CVSS8.3AI score0.00681EPSS
SaveExploits1References10
BDU FSTEC
BDU FSTEC
added 2022/12/24 12:00 a.m.17 views

The vulnerability of the Fax Compose Form component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Fax Compose Form component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.3AI score0.00515EPSS
SaveExploits0References2
OSV
OSV
added 2022/12/22 10:15 p.m.4 views

DEBIAN-CVE-2022-4662

A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system...

5.5CVSS6.2AI score0.00317EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/12/22 12:00 a.m.13 views

Rockwell Automation Studio 5000 Logix Designer 授权问题漏洞

Rockwell Automation Studio 5000 Logix Designer is a Windows-based application from Rockwell Automation, Inc. It is used to build programs for PLCs. An access control error vulnerability exists in Rockwell Automation Studio 5000 Logix Designer version v.20-33, which arises from a user being grante...

7.8CVSS7.9AI score0.00368EPSS
SaveExploits0References4
OSV
OSV
added 2022/12/13 4:15 p.m.7 views

CVE-2022-46664

A vulnerability has been identified in Mendix Workflow Commons All versions V2.4.0, Mendix Workflow Commons V2.1 All versions V2.1.4, Mendix Workflow Commons V2.3 All versions V2.3.2. Affected versions of the module improperly handle access control for some module entities. This could allow...

8.1CVSS5.8AI score0.00691EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/13 4:15 p.m.10 views

CVE-2022-45936

A vulnerability has been identified in Mendix Email Connector All versions V2.0.0. Affected versions of the module improperly handle access control for some module entities. This could allow authenticated remote attackers to read and manipulate sensitive information...

8.1CVSS5.8AI score0.00705EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/12/08 12:00 a.m.7 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Dec-2022 Release 1, which stems from an incorrect access control...

4CVSS5AI score0.00114EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/12/08 12:00 a.m.9 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in versions prior to SMR Dec-2022 Release 1, which stems from an incorrect access control vulnerability in...

3.3CVSS5AI score0.00141EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/12/08 12:00 a.m.8 views

PT-2022-27337 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda A18 version 15.13.07.09 Description: An access control issue allows unauthenticated attackers to access the Telnet service. Recommendations: For Tenda A18 version 15.13.07.09, consider restricting access to the Telnet service until a...

7.5CVSS7.5AI score0.00674EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/12/08 12:00 a.m.9 views

Aruba Networks AirWave Management Platform 安全漏洞

Aruba Networks AirWave Management Platform, from Aruba Networks, provides granular visibility into wired and wireless networks and is the leading multi-vendor management platform designed for local campus environments. A security vulnerability exists in the Aruba Networks AirWave Management...

8.1CVSS7.7AI score0.00767EPSS
SaveExploits0References2
OSV
OSV
added 2022/12/02 3:15 a.m.12 views

CVE-2022-44929

An access control issue in D-Link DVG-G5402SP GE1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles...

9.8CVSS5.8AI score0.01115EPSS
SaveExploits1References1
OSV
OSV
added 2022/12/01 10:15 p.m.8 views

CVE-2022-44211

In GL.iNet Goodcloud 1.1 Incorrect access control allows a remote attacker to access/change devices' settings...

7.4CVSS5.8AI score0.00608EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/12/01 12:00 a.m.9 views

PT-2022-22586 · Unknown · Ixp Data Easy Install

Name of the Vulnerable Software and Affected Versions: IXPdata EasyInstall version 6.6.14725 Description: The issue is related to an access control problem. Recommendations: For version 6.6.14725, at the moment, there is no information about a newer version that contains a fix for this issue...

8.8CVSS6.9AI score0.00187EPSS
SaveExploits1References3
Rows per page
Query Builder