Lucene search
+L

64280 matches found

Microsoft CVE
Microsoft CVE
added 2025/10/14 2:00 p.m.13 views

Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...

7.8CVSS6.9AI score0.00573EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/10/14 2:00 p.m.14 views

Windows Error Reporting Service Elevation of Privilege Vulnerability

Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

7.8CVSS6.9AI score0.03028EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/10/14 2:00 p.m.16 views

Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...

7CVSS6.9AI score0.00555EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.9 views

PT-2025-41974

Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description An improper access control issue exists in Microsoft PowerShell. This allows an authorized attacker with local access to elevate privileges. The flaw enables privilege escalation...

7.3CVSS8.8AI score0.0048EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.6 views

PT-2025-42044

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An improper access control issue exists in Windows Error Reporting. This allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...

7.8CVSS9.2AI score0.03028EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.14 views

PT-2025-42091

Name of the Vulnerable Software and Affected Versions Software Protection Platform affected versions not specified Description Improper access control in the Software Protection Platform SPP, specifically within the Sppsvc.exe service, allows an authorized attacker to elevate privileges locally...

7.8CVSS7.2AI score0.04238EPSS
SaveExploits0References19
CNNVD
CNNVD
added 2025/10/14 12:00 a.m.18 views

WordPress plugin SureForms 安全漏洞

WordPress SureForms plugin is a visual form builder plugin designed for WordPress , support drag and drop operation , no programming foundation to quickly build responsive forms . An information disclosure vulnerability exists in the WordPress SureForms plugin, which stems from improper access...

4.3CVSS6.1AI score0.00254EPSS
SaveExploits0References4
VulnCheck KEV
VulnCheck KEV
added 2025/10/14 12:00 a.m.7 views

VulnCheck KEV: CVE-2025-59230

Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally...

7.8CVSS7.3AI score0.02684EPSS
SaveIn wildExploits1References9
CISA KEV Catalog
CISA KEV Catalog
added 2025/10/14 12:00 a.m.67 views

Microsoft Windows Improper Access Control Vulnerability

Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally...

7.8CVSS6.8AI score0.02684EPSS
SaveIn wildExploits1
CNNVD
CNNVD
added 2025/10/14 12:00 a.m.12 views

Siemens SiPass integrated 安全漏洞

Siemens SiPass Integrated is a powerful and extremely flexible access control system from Siemens, Germany. A security vulnerability exists in Siemens SiPass integrated prior to version V3.0, which stems from improper access control and could allow an attacker to manipulate other users' data...

5.3CVSS6.4AI score0.00196EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.14 views

PT-2025-42060

Name of the Vulnerable Software and Affected Versions Azure Connected Machine Agent affected versions not specified Description An improper access control issue exists in the Azure Connected Machine Agent. A successful exploit could allow a local attacker to gain elevated privileges...

7.8CVSS6.2AI score0.00573EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/10/13 9:29 p.m.13 views

CVE-2025-11646

A vulnerability was detected in Tomofun Furbo 360 and Furbo Mini. This vulnerability affects unknown code of the component GATT Service. The manipulation results in improper access controls. The attack can only be performed from the local network. The exploit is now public and may be used. The...

8.1CVSS6.3AI score0.00558EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/13 7:24 p.m.25 views

CVE-2025-11641

A vulnerability was determined in Tomofun Furbo 360 and Furbo Mini. This impacts an unknown function of the component Trial Restriction Handler. This manipulation causes improper access controls. It is feasible to perform the attack on the physical device. The attack is considered to have high...

6.4CVSS6.2AI score0.00185EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/13 6:32 a.m.27 views

EUVD-2025-33960

HCL Unica Platform is affected by unprotected files due to improper access controls. These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, infrastructure, or users...

5.3CVSS6.1AI score0.00242EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/13 4:15 a.m.12 views

CVE-2025-31996

HCL Unica Platform is affected by unprotected files due to improper access controls. These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, infrastructure, or users...

7.5CVSS0.00242EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/13 4:15 a.m.13 views

CVE-2025-31996

HCL Unica Platform is affected by unprotected files due to improper access controls. These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, infrastructure, or users...

7.5CVSS5.8AI score0.00242EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/13 3:46 a.m.8 views

CVE-2025-31996 Unprotected files are impacting HCL Unica Platform

HCL Unica Platform is affected by unprotected files due to improper access controls. These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, infrastructure, or users...

5.3CVSS6.2AI score0.00242EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/13 3:46 a.m.37 views

CVE-2025-31996 Unprotected files are impacting HCL Unica Platform

HCL Unica Platform is affected by unprotected files due to improper access controls. These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, infrastructure, or users...

5.3CVSS0.00242EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/13 3:46 a.m.31 views

CVE-2025-31996

CVE-2025-31996 affects HCL Unica Platform with unprotected files caused by improper access controls. Files may disclose private or system information, enabling compromise of the application, infrastructure, or users. Documents describe the issue and potential impact, but do not provide concrete v...

7.5CVSS6.2AI score0.00242EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/13 12:00 a.m.15 views

PT-2025-41751

Name of the Vulnerable Software and Affected Versions HCL Unica Platform affected versions not specified Description The HCL Unica Platform is susceptible to unauthorized access to files due to inadequate access controls. These files potentially contain sensitive data, including private or system...

5.3CVSS6.3AI score0.00242EPSS
SaveExploits0References6
Rows per page
Query Builder