Lucene search
+L

537 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 11:58 a.m.•20 views

CVE-2025-22605

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Starting in version 4.0.0-beta.18 and prior to 4.0.0-beta.253, a vulnerability in the execution of commands on remote servers allows an authenticated user to execute arbitrary code on the local...

9.3CVSS7.7AI score0.00519EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:09 a.m.•18 views

CVE-2024-28167

SAP Group Reporting Data Collection does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, specific data can be changed via the Enter Package Data app although the user does not have sufficient authorization...

6.5CVSS7.3AI score0.00364EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:49 a.m.•9 views

CVE-2024-34691

Manage Incoming Payment Files F1680 of SAP S/4HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. As a result, it has high impact on integrity and no impact on the confidentiality and availability of the system...

6.5CVSS7.2AI score0.00282EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:01 a.m.•15 views

CVE-2024-40856

An integrity issue was addressed with Beacon Protection. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18. An attacker may be able to force a device to disconnect from a secure network...

7.5CVSS5.8AI score0.00887EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:28 a.m.•13 views

CVE-2023-25616

In some scenario, SAP Business Objects Business Intelligence Platform CMC - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact th...

9.9CVSS7.8AI score0.00949EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:12 a.m.•14 views

CVE-2023-23858

Due to insufficient input validation, SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attacker to send a crafted URL to a user, and by clicking the URL, the tricked user accesses SAP and might be directed with...

6.1CVSS6.8AI score0.0037EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:32 a.m.•13 views

CVE-2023-5512

An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect...

5.7CVSS6.3AI score0.00494EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:28 a.m.•18 views

CVE-2022-48287

The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data integrity...

7.5CVSS6.9AI score0.00362EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 12:26 a.m.•18 views

CVE-2022-48348

The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability may affect confidentiality and integrity...

9.1CVSS6.9AI score0.00422EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:26 p.m.•10 views

CVE-2021-30826

A logic issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. In certain situations, the baseband would fail to enable integrity and ciphering protection...

7.5CVSS5.7AI score0.01255EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:13 p.m.•20 views

CVE-2021-36751

ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm that is vulnerable to data manipulation without knowledge of the key. This is called ciphertext malleability. There is no data integrity mechanism to detect this manipulation...

6.4CVSS6.8AI score0.00486EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 6:44 p.m.•16 views

CVE-2021-40013

Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity...

6.5CVSS6.9AI score0.00257EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 11:28 a.m.•14 views

CVE-2013-3766

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.1, 8.2, and 8.3 allows remote authenticated users to affect integrity via unknown vectors related to Web Access...

4CVSS5.7AI score0.00871EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:43 a.m.•14 views

CVE-2013-3750

Unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel/VM...

7.2CVSS6.2AI score0.00413EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:33 a.m.•15 views

CVE-2011-0844

Unspecified vulnerability in the OpenSSO Enterprise and Sun Java System Access Manager components in Oracle Sun Products Suite 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Authentication...

4.3CVSS6.2AI score0.01453EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:13 a.m.•15 views

CVE-2011-2316

Unspecified vulnerability in the Siebel Apps - Marketing component in Oracle Siebel CRM 8.0.0 allows remote attackers to affect integrity via unknown vectors related to Email Marketing...

4.3CVSS6.2AI score0.01504EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/13 12:00 a.m.•30 views

PT-2025-20881

Name of the Vulnerable Software and Affected Versions: Centreon web versions 22.10.0 through 22.10.29 Centreon web versions 23.04.0 through 23.04.27 Centreon web versions 23.10.0 through 23.10.22 Centreon web versions 24.04.0 through 24.04.11 Centreon web versions 24.10.0 through 24.10.5...

8.4CVSS5.9AI score0.00256EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2025/05/13 12:00 a.m.•27 views

PT-2025-21207

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps affected versions not specified Description: The issue is related to the improper neutralization of special elements in some Zoom Workplace Apps, which may allow an authenticated user to impact app integrity via network...

6.1CVSS5.9AI score0.00295EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/05/06 7:16 a.m.•11 views

CVE-2025-46588

Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

4.4CVSS6.9AI score0.00111EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/30 3:16 p.m.•48 views

CVE-2025-32974

XWiki is a generic wiki platform. In versions starting from 15.9-rc-1 to before 15.10.8 and from 16.0.0-rc-1 to before 16.2.0, the required rights analysis doesn't consider TextAreas with default content type. When editing a page, XWiki warns since version 15.9 when there is content on the page...

9CVSS0.00354EPSS
SaveExploits0References3
Rows per page
Query Builder