Lucene search
+L

67 matches found

ATTACKERKB
ATTACKERKB
added 2020/04/08 12:00 a.m.28 views

CVE-2020-1985

Incorrect Default Permissions on C:\Programdata\Secdo\Logs folder in Secdo allows local authenticated users to overwrite system files and gain escalated privileges. This issue affects all versions Secdo for Windows. Recent assessments: xFreed0m at April 10, 2020 3:06pm UTC reported: CVE-2020-1985...

7.8CVSS1.8AI score0.00255EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2020/03/18 12:00 a.m.281 views

Ivanti Workspace Manager Security Bypass

Rem Remarks CVE-2019-10885 - 0day Rem An issue was discovered in Ivanti Workspace Control before 10.3.90.0. Local authenticated Rem users with low privileges in a Workspace Control managed session can bypass Workspace Control Rem security features configured for this session by resetting the...

4.6CVSS0.2AI score0.01043EPSS
SaveExploits2
OSV
OSV
added 2017/10/13 5:29 p.m.10 views

CVE-2017-6223

Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping functionality that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating...

8.8CVSS6AI score0.0172EPSS
SaveExploits0References1
Prion
Prion
added 2017/10/13 5:29 p.m.23 views

Command injection

Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping functionality that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating...

9.3CVSS8.9AI score0.0172EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2017/10/13 5:00 p.m.32 views

CVE-2017-6223

Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping functionality that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating...

9AI score0.0172EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2015/10/30 9:43 a.m.24 views

CVE-2007-3635

Multiple unspecified vulnerabilities in the G/PGP GPG Plugin before 2.1 for Squirrelmail might allow "local authenticated users" to inject certain commands via unspecified vectors. NOTE: this might overlap CVE-2005-1924, CVE-2006-4169, or CVE-2007-3634...

9.3CVSS7.4AI score0.10263EPSS
SaveExploits3References2
CERT
CERT
added 2005/04/13 12:00 a.m.43 views

Microsoft Client Server Runtime System Vulnerability

Overview The Microsoft Client Server Runtime System CSRSS incorrectly validates certain messages potentially resulting in privilege elevation. Description CSRSS is the user-mode part of the Win32 subsystem. Win32.sys is the kernel-mode portion of the Win32 subsystem. The Win32 subsystem must be...

10CVSS6.8AI score0.20327EPSS
SaveExploits1References2
Rows per page
Query Builder