Lucene search
+L

62168 matches found

CNNVD
CNNVD
added 2024/10/10 12:00 a.m.5 views

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. An improper access control vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a security feature bypass...

4.3CVSS6.6AI score0.00535EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/10/10 12:00 a.m.9 views

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. An improper access control vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a security feature bypass...

4.3CVSS6.6AI score0.00551EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/10/10 12:00 a.m.8 views

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. An improper access control vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a security feature bypass...

4.3CVSS6.6AI score0.00535EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/10/10 12:00 a.m.18 views

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. An improper access control vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a security feature bypass...

6.5CVSS6.6AI score0.00643EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/10/10 12:00 a.m.12 views

PT-2024-7203 · Jetbrains · Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.3.46677 Description: The issue is related to improper access control in JetBrains YouTrack, allowing users with project update permission to delete applications via API. This could potentially allow a...

5.5CVSS7.2AI score0.00378EPSS
SaveExploits0References10
IBM Security Bulletins
IBM Security Bulletins
added 2024/10/08 1:28 p.m.15 views

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime affecting Tivoli Netcool/OMNIbus

Summary Vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 8 that is used by Tivoli Netcool/OMNIbus have been addressed. Vulnerability Details CVEID:CVE-2024-21144 DESCRIPTION: An unspecified vulnerability in Java SE related to the Concurrency component could allow a...

7.5CVSS5.8AI score0.01286EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/10/08 7:15 a.m.8 views

CVE-2024-34662

Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14 allows local attackers to execute privileged behaviors...

7.8CVSS5.8AI score0.00139EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/08 7:15 a.m.19 views

CVE-2024-34662

Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14 allows local attackers to execute privileged behaviors...

7.8CVSS0.00139EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/08 6:30 a.m.64 views

CVE-2024-34662

CVE-2024-34662 involves improper access control in Android’s ActivityManager. The issue affects select Android 12 and 13 earlier than SMR Oct-2024 Release 1, and select Android 14 earlier than SMR Sep-2024 Release 1, enabling local attackers to perform privileged actions. Mitigation is via update...

7.8CVSS7.1AI score0.00139EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/08 6:30 a.m.12 views

CVE-2024-34662

Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14 allows local attackers to execute privileged behaviors...

6.2CVSS6.8AI score0.00139EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/08 6:30 a.m.26 views

CVE-2024-34662

Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14 allows local attackers to execute privileged behaviors...

6.2CVSS0.00139EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/08 12:00 a.m.6 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices that stems from improper access control...

7.8CVSS6.6AI score0.00139EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/08 12:00 a.m.4 views

PT-2024-6957 · Adobe · Commerce +1

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Description: The issue is related to an Improper Access Control vulnerability that...

5.3CVSS7.2AI score0.00551EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2024/10/08 12:00 a.m.5 views

PT-2024-6892 · Adobe · Commerce +1

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Description: The issue is related to an Improper Access Control vulnerability that...

4.3CVSS6.9AI score0.00478EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2024/10/08 12:00 a.m.4 views

PT-2024-6962 · Adobe · Commerce +1

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Description: The issue is related to an Improper Access Control vulnerability that...

7.1CVSS6.9AI score0.00643EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2024/10/08 12:00 a.m.10 views

PT-2024-6959 · Adobe · Magento Open Source +1

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Description: The issue is related to an Improper Access Control vulnerability that...

5.3CVSS7AI score0.00535EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2024/10/07 6:57 p.m.9 views

CVE-2024-47975

Improper access control validation in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access or an attacker with local access to potentially enable denial of service...

7CVSS6.8AI score0.00194EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/07 12:00 a.m.9 views

PT-2024-32925 · Solidigm · Solidigm Dc Products

Name of the Vulnerable Software and Affected Versions: Solidigm DC Products affected versions not specified Description: The issue is related to improper access control validation in the firmware of some Solidigm DC Products. This may allow an attacker with physical access to gain unauthorized...

7CVSS6.8AI score0.00194EPSS
SaveExploits0References6
Snyk
Snyk
added 2024/10/04 9:45 p.m.4 views

Improper Access Control

Overview Affected versions of this package are vulnerable to Improper Access Control via the abusefiltercheckmatch API, due to missing checks of the permissions to see the log details for the given filter. This allows an attacker to bypass hidden and protected visibility settings. Remediation A f...

5.4CVSS6.8AI score0.00453EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/10/04 12:30 p.m.44 views

CVE-2024-47657 Improper Access Control Vulnerability

This vulnerability exists in the Shilpi Net Back Office due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter dfclientid through API request URLs which could lead to unauthorized access to sensitive...

7.1CVSS0.00387EPSS
SaveExploits0References1
Rows per page
Query Builder