Lucene search
K

40 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2015-1564

Malware in sbrugna...

7.5CVSS7.5AI score0.01964EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 7:31 a.m.6 views

CVE-2024-40404

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established...

9.8CVSS7.4AI score0.00445EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:31 a.m.11 views

CVE-2024-40408

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...

7.3CVSS7.4AI score0.00271EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:32 a.m.6 views

CVE-2024-40407

A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors...

7.5CVSS6.8AI score0.0038EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:32 a.m.8 views

CVE-2024-40405

Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request...

8.1CVSS7.1AI score0.00441EPSS
Exploits0References1
NVD
NVD
added 2024/11/13 11:15 p.m.21 views

CVE-2024-40410

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key used for encryption...

4.8CVSS0.00135EPSS
Exploits0References1
NVD
NVD
added 2024/11/13 11:15 p.m.17 views

CVE-2024-40408

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...

7.3CVSS0.00271EPSS
Exploits0References1
OSV
OSV
added 2024/11/13 11:15 p.m.3 views

CVE-2024-40405

Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request...

8.1CVSS5.8AI score0.00441EPSS
Exploits0References1
NVD
NVD
added 2024/11/13 11:15 p.m.16 views

CVE-2024-40405

Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request...

8.1CVSS0.00441EPSS
Exploits0References1
NVD
NVD
added 2024/11/13 11:15 p.m.14 views

CVE-2024-40407

A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors...

7.5CVSS0.0038EPSS
Exploits0References1
NVD
NVD
added 2024/11/13 11:15 p.m.26 views

CVE-2024-40404

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established...

9.8CVSS0.00445EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.4 views

Cybele Software Thinfinity Workspace 安全漏洞

Cybele Software Thinfinity Workspace is an integrated solution for virtualizing applications, desktops, data and accessing any host from a unified portal from Cybele Software, USA. A security vulnerability exists in Cybele Software Thinfinity Workspace versions prior to v7.0.3.109 that stems from...

8.1CVSS6.6AI score0.00441EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/11/13 12:0 a.m.19 views

CVE-2024-40404

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established...

7.5AI score0.00445EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/13 12:0 a.m.14 views

CVE-2024-40405

Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request...

7.3AI score0.00441EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/13 12:0 a.m.11 views

CVE-2024-40408

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...

7.6AI score0.00271EPSS
Exploits0References1
CVE
CVE
added 2024/11/13 12:0 a.m.63 views

CVE-2024-40407

CVE-2024-40407 affects Cybele Software Thinfinity Workspace prior to v7.0.2.113. The issue is a full path disclosure that allows an attacker to obtain the root path of the application via unspecified vectors. Affected product: Thinfinity Workspace. Root cause: disclosure of sensitive filesystem p...

7.5CVSS6.8AI score0.0038EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/11/13 12:0 a.m.52 views

CVE-2024-40405

CVE-2024-40405 affects Cybele Software Thinfinity Workspace (before v7.0.3.109). The issue is described as incorrect access control that lets an attacker access a secondary broker via a crafted request. The vulnerability is documented with CVSS v3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (base scor...

8.1CVSS7.1AI score0.00441EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.3 views

Cybele Software Thinfinity Workspace 安全漏洞

Cybele Software Thinfinity Workspace is an integrated solution for virtualizing applications, desktops, data and accessing any host from a unified portal from Cybele Software, USA. A security vulnerability exists in Cybele Software Thinfinity Workspace prior to v7.0.2.113 that stems from improper...

7.3CVSS6.8AI score0.00271EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/11/13 12:0 a.m.14 views

CVE-2024-40410

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key used for encryption...

0.00135EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/13 12:0 a.m.13 views

CVE-2024-40405

Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request...

0.00441EPSS
Exploits0References1
Rows per page
Query Builder