Lucene search
+L

919 matches found

attackerkb
attackerkb
•added 2023/11/26 10:15 p.m.•15 views

CVE-2023-49312

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...

9.1CVSS5.8AI score0.00676EPSS
SaveExploits1References3
OSV
OSV
•added 2023/11/26 10:15 p.m.•13 views

CVE-2023-49312

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...

9.1CVSS5.8AI score
SaveExploits0References2
NVD
NVD
•added 2023/11/26 10:15 p.m.•31 views

CVE-2023-49312

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...

9.1CVSS0.00676EPSS
SaveExploits1References2
Prion
Prion
•added 2023/11/26 10:15 p.m.•19 views

Design/Logic Flaw

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...

6.4CVSS7AI score0.00676EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/11/26 12:00 a.m.•11 views

PT-2023-31162 · Unknown · Precision Bridge

Name of the Vulnerable Software and Affected Versions: Precision Bridge PrecisionBridge.exe versions prior to 7.3.21 Description: The issue allows for an integrity violation where the same license key can be used on multiple systems. This is achieved through vectors involving a Process Hacker...

9.1CVSS9AI score0.00676EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2023/11/26 12:00 a.m.•37 views

CVE-2023-49312

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...

9.2AI score0.00676EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/11/26 12:00 a.m.•12 views

Precision Bridge Security Vulnerability

Precision Bridge is a data migration and synchronization software from Precision Bridge. Precision Bridge A security vulnerability exists in PrecisionBridge.exe versions prior to 7.3.21, which stems from the use of the same license key on multiple systems via vectors involving Process Hacker memo...

9.1CVSS6.8AI score0.00676EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/26 12:00 a.m.•2 views

CVE-2023-49312: Improper Certificate Validation

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...

9.1CVSS8.1AI score0.00676EPSS
SaveExploits1References2
CVE
CVE
•added 2023/11/26 12:00 a.m.•49 views

CVE-2023-49312

CVE-2023-49312 affects Precision Bridge's Thick Client (PrecisionBridge.exe) prior to version 7.3.21. The root cause is an integrity violation that enables reuse of the same license key across multiple systems. Reported attack vectors involve a Process Hacker memory dump, inspecting error message...

9.1CVSS8.9AI score0.00676EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2023/10/19 2:15 a.m.•16 views

CVE-2023-4645

The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the aiajax function. This can allow unauthenticated attackers to extract sensitive data such as post titles and slugs including those of protected posts along with their...

5.3CVSS6.5AI score0.00767EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/10/19 1:53 a.m.•40 views

CVE-2023-4645 Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax

The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the aiajax function. This can allow unauthenticated attackers to extract sensitive data such as post titles and slugs including those of protected posts along with their...

5.3CVSS5.6AI score0.00767EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/19 12:00 a.m.•3 views

CVE-2023-4645: Missing Authorization

The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the aiajax function. This can allow unauthenticated attackers to extract sensitive data such as post titles and slugs including those of protected posts along with their...

5.3CVSS6.4AI score0.00767EPSS
SaveExploits0References3
Amazon
Amazon
•added 2023/09/25 12:00 a.m.•19 views

Medium: lynis

Issue Overview: In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. This license can be used to upload data to a central Lynis server. Although no data can be extracted by knowing the license key, it may be...

4.2CVSS6.9AI score0.00365EPSS
SaveExploits0
NVD
NVD
•added 2023/05/30 4:15 p.m.•48 views

CVE-2023-32448

PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains License Key Stored in Cleartext vulnerability. A local user with access to the installation directory can retrieve the license key of the product and use it to install and license PowerPath on different systems...

5.5CVSS5.4AI score0.00119EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/30 4:15 p.m.•29 views

Design/Logic Flaw

PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains License Key Stored in Cleartext vulnerability. A local user with access to the installation directory can retrieve the license key of the product and use it to install and license PowerPath on different systems...

1.7CVSS5.4AI score0.00119EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/05/30 3:29 p.m.•30 views

CVE-2023-32448

PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains License Key Stored in Cleartext vulnerability. A local user with access to the installation directory can retrieve the license key of the product and use it to install and license PowerPath on different systems...

5.5CVSS5.7AI score0.00119EPSS
SaveExploits0References1
CVE
CVE
•added 2023/05/30 3:29 p.m.•61 views

CVE-2023-32448

Affected product: Dell PowerPath for Windows (versions 7.0–7.2). Vulnerability: License key is stored in cleartext in the installation directory, enabling a local user with access to retrieve the key and use it to license PowerPath on other systems. Impact: Local access may lead to unauthorized l...

5.5CVSS5.4AI score0.00119EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/30 3:29 p.m.•7 views

CVE-2023-32448

PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains License Key Stored in Cleartext vulnerability. A local user with access to the installation directory can retrieve the license key of the product and use it to install and license PowerPath on different systems...

5.5CVSS5.4AI score0.00119EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/05/30 12:00 a.m.•18 views

Dell PowerPath Management Appliance 安全漏洞

Dell PowerPath Management Appliance is a PowerPath host management application from Dell USA that offers two models: a virtual machine-based appliance and a Docker containerized appliance. A security vulnerability exists in Dell PowerPath Management Appliance version 7.0, 7.1, and 7.2. An attacke...

5.5CVSS5.8AI score0.00119EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/30 12:00 a.m.•6 views

CVE-2023-32448: Cleartext Storage of Sensitive Information

PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains License Key Stored in Cleartext vulnerability. A local user with access to the installation directory can retrieve the license key of the product and use it to install and license PowerPath on different systems...

5.5CVSS5.7AI score0.00119EPSS
SaveExploits0References2
Rows per page
Query Builder