Lucene search
+L

1112 matches found

OSV
OSV
added 2022/07/01 10:15 a.m.8 views

CVE-2022-34894

In JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of untrusted services...

5.3CVSS5.8AI score0.00576EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/05/26 12:00 a.m.8 views

PT-2022-5413 · Nessus +1 · Nessus

Name of the Vulnerable Software and Affected Versions: Nessus affected versions not specified Description: The issue is related to insufficient access control in the Nessus web interface, allowing an authenticated attacker to read Nessus Debug Log file attachments without proper privileges. This...

6.5CVSS6.5AI score0.00835EPSS
SaveExploits0References4
OSV
OSV
added 2022/05/19 10:15 p.m.9 views

CVE-2020-4107

HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or information disclosure...

7.8CVSS7.1AI score0.0023EPSS
SaveExploits0References1
Prion
Prion
added 2022/05/19 10:15 p.m.21 views

Improper access control

HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or information disclosure...

4.6CVSS7.4AI score0.0023EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/05/19 9:25 p.m.29 views

CVE-2020-4107 HCL Domino is affected by an Insufficient Access Control vulnerability

HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or information disclosure...

8.8CVSS8.5AI score0.0023EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/05/19 12:00 a.m.16 views

PT-2022-9034 · Hcl · Hcl Domino

Name of the Vulnerable Software and Affected Versions: HCL Domino affected versions not specified Description: The issue is related to an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of...

8.8CVSS7.5AI score0.0023EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2022/05/18 12:00 a.m.39 views

WordPress Jupiter premium theme <= 6.10.1 - Insufficient Access Control leading to Authenticated Arbitrary Plugin Deletion

Insufficient Access Control leading to Authenticated Arbitrary Plugin Deletion discovered by Ramuel Gall Wordfence in WordPress Jupiter premium theme versions = 6.10.1. Solution Update the WordPress Jupiter premium theme to the latest available version at least 6.10.2...

5.5CVSS3.4AI score0.00725EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2022/05/18 12:00 a.m.28 views

WordPress JupiterX premium theme <= 2.0.6 - Insufficient Access Control leading to Authenticated Arbitrary Plugin Deactivation and Settings Modification

Insufficient Access Control leading to Authenticated Arbitrary Plugin Deactivation and Settings Modification discovered by Ramuel Gall Wordfence in WordPress JupiterX premium theme versions = 2.0.6. Solution Update the WordPress JupiterX premium theme to the latest available version at least 2.0....

5.5CVSS4.1AI score0.00534EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2022/05/11 7:12 p.m.41 views

CVE-2022-29855

Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Series SIP phones excluding 6970, versions 5.1 SP8 5.1.0.8016 and earlier, and 6.0 6.0.0.368 through 6.1 HF4 6.1.0.165, could allow a unauthenticated...

7.1AI score0.00739EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
added 2022/05/10 12:00 a.m.6 views

PT-2022-2449 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient access control in the Windows Print Spooler, which can be exploited to elevate privileges. This allows an attacker to affect the system. N...

7.8CVSS9.4AI score0.1209EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2022/05/03 12:00 a.m.8 views

PT-2022-3212 · Microsoft · Windows Lsa +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description: The issue is related to insufficient access control in the Local Security Authority Subsystem Service LSASS of Windows operating systems. It...

7.8CVSS9.2AI score0.01389EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.7 views

PT-2022-2890 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient access control in Visual Studio Code, allowing an attacker to potentially elevate their privileges. Recommendations: At the moment, there is ...

7.8CVSS7.1AI score0.00604EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.3 views

PT-2022-2747 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of Windows operating systems. It allows an attacker to elevate their privileges. Recommendations: At the moment,...

7.8CVSS9.2AI score0.0082EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.7 views

PT-2022-2669 · Microsoft · Windows Ancillary Function Driver For Winsock +1

Name of the Vulnerable Software and Affected Versions: Windows Ancillary Function Driver for WinSock affected versions not specified Description: The issue is related to insufficient access control in the Windows Ancillary Function Driver for WinSock, which can be exploited to elevate privileges...

7.8CVSS7.8AI score0.01905EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2022/04/11 12:00 a.m.10 views

PT-2022-2857 · D Link · D-Link Dir-816L

Name of the Vulnerable Software and Affected Versions: D-Link DIR816L versions prior to FW206b01 Description: The issue is related to insufficient access control in the software of D-Link DIR816L routers. This allows remote attackers to access sensitive folders, specifically "folder view.php" and...

7.5CVSS7.4AI score0.39733EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2022/04/06 6:13 p.m.28 views

CVE-2022-20762 Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure Privilege Escalation Vulnerability

A vulnerability in the Common Execution Environment CEE ConfD CLI of Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure SMI software could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to insufficient access control in...

7.8CVSS7.8AI score0.00263EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2022/03/31 12:00 a.m.11 views

VulnCheck KEV: CVE-2021-21551

Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service DoS, or information disclosure...

8.8CVSS7.3AI score0.79249EPSS
SaveExploits18References1
Positive Technologies
Positive Technologies
added 2022/03/02 12:00 a.m.7 views

PT-2022-1962 · Cisco · Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure

Name of the Vulnerable Software and Affected Versions: Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure SMI affected versions not specified Description: The issue is related to insufficient access control in the Common Execution Environment CEE ConfD CLI, which could allow an...

7.8CVSS7.4AI score0.00263EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2022/02/08 12:00 a.m.6 views

PT-2022-1666 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient access control in the Windows Print Spooler, which can be exploited to elevate privileges. This allows an attacker to affect the system. N...

7CVSS7.1AI score0.00714EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2022/02/05 12:00 a.m.6 views

PT-2022-2787 · Microsoft · Endpoint Configuration Manager +1

Name of the Vulnerable Software and Affected Versions: Microsoft Endpoint Configuration Manager affected versions not specified Description: The issue is related to insufficient access control in the Microsoft Endpoint Configuration Manager, part of the Microsoft Windows operating system. This ca...

7.8CVSS9AI score0.00879EPSS
SaveExploits0References8
Rows per page
Query Builder