Lucene search
+L

4324 matches found

OSV
OSV
added 2023/11/15 3:30 p.m.53 views

GHSA-3W8R-3JH9-89V9 xxl-job-admin vulnerable to Insecure Permissions

xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat...

5.4CVSS5.3AI score0.00362EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2023/11/15 3:30 p.m.33 views

xxl-job-admin vulnerable to Insecure Permissions

xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat...

5.4CVSS6.8AI score0.00362EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2023/11/15 3:15 p.m.21 views

CVE-2023-48087

xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat...

5.4CVSS0.00362EPSS
SaveExploits1References1
Prion
Prion
added 2023/11/15 3:15 p.m.21 views

Code injection

xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat...

5.5CVSS7.1AI score0.00362EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2023/11/15 12:00 a.m.76 views

CVE-2023-48087

CVE-2023-48087 affects xxl-job-admin version 2.4.0. The vulnerability stems from insecure permissions / privilege mismanagement on the API endpoints /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat, potentially leading to disclosure of sensitive information. Publicly document...

5.4CVSS5.4AI score0.00362EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/15 12:00 a.m.11 views

CVE-2023-48087

xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat...

6.8AI score0.00362EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/11/15 12:00 a.m.28 views

CVE-2023-48087

xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat...

5.7AI score0.00362EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/11/15 12:00 a.m.22 views

PT-2023-30693 · Unknown · Xxl-Job-Admin

Name of the Vulnerable Software and Affected Versions: xxl-job-admin version 2.4.0 Description: The issue concerns insecure permissions in xxl-job-admin, specifically affecting the "/xxl-job-admin/joblog/clearLog" and "/xxl-job-admin/joblog/logDetailCat" API endpoints. Recommendations: For...

5.4CVSS5.3AI score0.00362EPSS
SaveExploits1References6
OSV
OSV
added 2023/11/15 12:00 a.m.21 views

CVE-2023-48087

xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat...

5.5AI score
SaveExploits0References3
OSV
OSV
added 2023/11/14 7:15 p.m.8 views

CVE-2023-34997

Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00177EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/14 7:15 p.m.10 views

CVE-2022-41700

Insecure inherited permissions in some IntelR NUC Pro Software Suite installation software before version 2.0.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00167EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/14 7:15 p.m.20 views

CVE-2022-41700

Insecure inherited permissions in some IntelR NUC Pro Software Suite installation software before version 2.0.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS0.00167EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/14 7:15 p.m.27 views

CVE-2022-33898

Insecure inherited permissions in some IntelR NUC Watchdog Timer installation software before version 2.0.21.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS0.00167EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/14 7:15 p.m.12 views

CVE-2022-33898

Insecure inherited permissions in some IntelR NUC Watchdog Timer installation software before version 2.0.21.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00167EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/14 7:15 p.m.22 views

Privilege escalation

Insecure inherited permissions in some IntelR NUC Watchdog Timer installation software before version 2.0.21.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

4.3CVSS7.3AI score0.00167EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/11/14 7:15 p.m.22 views

Privilege escalation

Insecure inherited permissions in some IntelR NUC Pro Software Suite installation software before version 2.0.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

4.3CVSS7.4AI score0.00167EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/11/14 7:15 p.m.24 views

Privilege escalation

Insecure inherited permissions in some Intel Rapid Storage Technology software before version 16.8.5.1014.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

4.3CVSS7.2AI score0.00177EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/14 7:04 p.m.33 views

CVE-2022-41700

Insecure inherited permissions in some IntelR NUC Pro Software Suite installation software before version 2.0.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS8AI score0.00167EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/14 7:04 p.m.37 views

CVE-2023-34997

Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS8AI score0.00177EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/11/14 7:04 p.m.15 views

CVE-2023-34997

Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS7.8AI score0.00177EPSS
SaveExploits0References1
Rows per page
Query Builder