Lucene search
+L

4070 matches found

OSV
OSV
•added 2023/01/20 7:15 a.m.•11 views

CVE-2023-20044

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A...

7.3CVSS7.1AI score0.00143EPSS
SaveExploits0References1
NVD
NVD
•added 2023/01/20 7:15 a.m.•28 views

CVE-2023-20044

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A...

7.3CVSS6.6AI score0.00143EPSS
SaveExploits0References1
Prion
Prion
•added 2023/01/20 7:15 a.m.•28 views

Design/Logic Flaw

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A...

4.1CVSS7AI score0.00143EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/01/20 7:15 a.m.•20 views

Design/Logic Flaw

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by calling the script with sudo. A successful exploit could allow the attacker ...

4CVSS6.4AI score0.0021EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/01/19 1:37 a.m.•39 views

CVE-2023-20044

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A...

6.7CVSS7.3AI score0.00143EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/01/19 1:37 a.m.•6 views

CVE-2023-20044

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A...

6.7CVSS6.7AI score0.00143EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/01/19 1:36 a.m.•42 views

CVE-2023-20043

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by calling the script with sudo. A successful exploit could allow the attacker ...

6.7CVSS6.6AI score0.0021EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/19 12:00 a.m.•3 views

CVE-2023-20044: Incorrect Ownership Assignment

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A...

7.3CVSS5.9AI score0.00143EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/19 12:00 a.m.•2 views

CVE-2023-20043: Incorrect Ownership Assignment

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by calling the script with sudo. A successful exploit could allow the attacker ...

6.7CVSS5.9AI score0.0021EPSS
SaveExploits0References3
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/01/18 4:51 a.m.•19 views

File and Directory Permissions Vulnerability in Hitachi Tuning Manager

Overview A File and Directory Permissions Vulnerability CVE-2020-36611 exists in Hitachi Tuning Manager. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take...

7.1CVSS6.8AI score0.0015EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/01/18 12:00 a.m.•17 views

Adobe Acrobat Reader安全漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. A security vulnerability exists in Adobe Acrobat Reader 22.003.20282 and earlier versions, 22.003.20281 and earlier versions, and 20.005.30418 and earlier versions,...

7.8CVSS7.2AI score0.00397EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/01/12 11:54 p.m.•13 views

CVE-2022-4616

The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to command injection through the network diagnosis page. This vulnerability could allow a remote unauthenticated user to add files, delete files, and change file permissions...

7.2CVSS7.1AI score0.04757EPSS
SaveExploits1References2
EUVD
EUVD
•added 2023/01/12 11:54 p.m.•18 views

EUVD-2022-51947

The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to command injection through the network diagnosis page. This vulnerability could allow a remote unauthenticated user to add files, delete files, and change file permissions...

9.1CVSS9.2AI score0.04757EPSS
SaveExploits1References2
OSV
OSV
•added 2023/01/12 6:15 a.m.•11 views

UBUNTU-CVE-2022-47927

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When installing with a pre-existing data directory that has weak permissions, the SQLite files are created with file mode 0644, i.e., world readable to local users. These files inclu...

5.5CVSS6.1AI score0.00269EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2023/01/12 12:00 a.m.•8 views

CVE-2022-39186 EXFO - BV-10 Performance Endpoint Unit Misconfiguration

EXFO - BV-10 Performance Endpoint Unit misconfiguration. System configuration file has misconfigured permissions...

6.2CVSS7.2AI score0.00163EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/01/12 12:00 a.m.•10 views

Cisco CX Cloud Agent 安全漏洞

Cisco CX Cloud Agent is a cloud agent application from Cisco USA. A security vulnerability exists in Cisco CX Cloud Agent that stems from insecure file permissions...

7.3CVSS7.3AI score0.00143EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/01/12 12:00 a.m.•12 views

Cisco CX Cloud Agent 安全漏洞

Cisco CX Cloud Agent is a cloud agent application from Cisco USA. A security vulnerability exists in Cisco CX Cloud Agent that stems from insecure file permissions. An attacker can exploit the vulnerability to elevate privileges...

6.7CVSS6.6AI score0.0021EPSS
SaveExploits0References3
Cisco
Cisco
•added 2023/01/11 4:00 p.m.•64 views

Cisco CX Cloud Agent Privilege Escalation Vulnerabilities

Multiple vulnerabilities in Cisco CX Cloud Agent could allow an authenticated, local attacker to elevate privileges. These vulnerabilities are due to insecure file permissions. A successful exploit could allow an attacker to take complete control of the affected device. For more information about...

6.7CVSS6.8AI score0.0021EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/01/11 12:00 a.m.•11 views

PT-2023-1103 · Cisco · Cisco Cx Cloud Agent

Name of the Vulnerable Software and Affected Versions: Cisco CX Cloud Agent affected versions not specified Description: A vulnerability in Cisco CX Cloud Agent could allow an authenticated, local attacker to elevate their privileges due to insecure file permissions. An attacker could exploit thi...

6.7CVSS6.5AI score0.0021EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/01/11 12:00 a.m.•8 views

PT-2023-1104 · Cisco · Cisco Cx Cloud Agent

Name of the Vulnerable Software and Affected Versions: Cisco CX Cloud Agent affected versions not specified Description: A vulnerability in Cisco CX Cloud Agent could allow an authenticated, local attacker to elevate their privileges due to insecure file permissions. An attacker could exploit thi...

7.3CVSS6.5AI score0.00143EPSS
SaveExploits0References6
Rows per page
Query Builder