Lucene search
+L

2213 matches found

Positive Technologies
Positive Technologies
•added 2024/04/16 12:00 a.m.•21 views

PT-2024-4911

Name of the Vulnerable Software and Affected Versions: Oracle Outside In Technology versions 8.5.6 through 8.5.7 Description: The issue is related to insufficient input validation in the Outside In Core component of Oracle Outside In Technology, allowing a low-privileged attacker with logon to th...

5.3CVSS5.8AI score0.00188EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/16 12:00 a.m.•3 views

CVE-2024-21105: Integer Overflow or Wraparound

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

2CVSS5.8AI score0.00258EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/16 12:00 a.m.•4 views

CVE-2024-21117: Improper Neutralization of Special Elements used in a Command

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Core. Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Outside In...

5.3CVSS5.7AI score0.0032EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/04/16 12:00 a.m.•21 views

PT-2024-3074 · Oracle · Oracle Enterprise Manager Base Platform

Name of the Vulnerable Software and Affected Versions: Oracle Enterprise Manager Base Platform version 13.5.0.0 Description: The issue is related to insufficient input validation in the Host Management component of the Oracle Enterprise Manager Base Platform. This allows a low-privileged attacker...

8.8CVSS7.3AI score0.00199EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2024/04/16 12:00 a.m.•8 views

PT-2024-4913 · Oracle +1 · Virtualbox +1

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 7.0.16 Description: The issue is related to the use of memory after it has been freed, which can allow an attacker to disclose protected information. A low-privileged attacker with logon access to the...

6.5CVSS7.2AI score0.00379EPSS
SaveExploits0References23
VulnCheck KEV
VulnCheck KEV
•added 2024/04/15 12:00 a.m.•10 views

VulnCheck KEV: CVE-2018-16167

LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...

10CVSS7.6AI score0.74916EPSS
SaveIn wildExploits3References3
Citrix
Citrix
•added 2024/03/19 12:00 a.m.•31 views

Citrix Workspace app timeout Notification is shown

After the end user logon Citrix DaaS session using native Citrix Workspace app, if there is no activity within the Citrix Workspace app window for the specified interval of time, Citrix Workspace app timeout Notification will be shown. The Warning Message is "Your session is about to expire. You...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/03/15 12:00 a.m.•9 views

PT-2024-3243 · Oracle +1 · Virtualbox +1

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 7.0.16 Description: The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with logon access to the infrastructure where...

7.3CVSS7AI score0.00454EPSS
SaveExploits0References21
OSV
OSV
•added 2024/03/06 5:15 p.m.•19 views

CVE-2024-20292

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

5.5CVSS5.8AI score0.00109EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/06 5:15 p.m.•33 views

CVE-2024-20301

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

6.2CVSS6.3AI score0.00266EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/06 5:15 p.m.•20 views

CVE-2024-20301

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

6.2CVSS5.8AI score0.00266EPSS
SaveExploits0References1
Prion
Prion
•added 2024/03/06 5:15 p.m.•52 views

Authentication flaw

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

4CVSS7.1AI score0.00266EPSS
SaveExploits0References1
Prion
Prion
•added 2024/03/06 5:15 p.m.•33 views

Input validation

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

1.4CVSS6.4AI score0.00109EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/06 4:32 p.m.•23 views

CVE-2024-20292

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

4.4CVSS6.2AI score0.00109EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/06 4:32 p.m.•41 views

CVE-2024-20292

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

4.4CVSS4.8AI score0.00109EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/06 4:32 p.m.•108 views

CVE-2024-20292

Cisco Duo Authentication for Windows Logon and RDP contains a local, authenticated-information disclosure vulnerability in its logging component. The issue stems from improper storage of an unencrypted registry key in logs, allowing a local attacker to read sensitive data in clear text on the aff...

5.5CVSS4.5AI score0.00109EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/06 4:28 p.m.•25 views

CVE-2024-20301

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

6.2CVSS6.9AI score0.00266EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/06 4:28 p.m.•50 views

CVE-2024-20301

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

6.2CVSS6.5AI score0.00266EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/06 4:28 p.m.•112 views

CVE-2024-20301

Cisco Duo Authentication for Windows Logon and RDP is affected by an authentication bypass vulnerability. The issue stems from failure to invalidate locally created trusted sessions after reboot, allowing an authenticated, physical attacker to bypass secondary authentication and access the Window...

6.2CVSS6.3AI score0.00266EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
•added 2024/03/06 4:00 p.m.•47 views

Cisco Duo Authentication for Windows Logon and RDP Authentication Bypass Vulnerability

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

6.2CVSS6.3AI score0.00266EPSS
SaveExploits0References1
Rows per page
Query Builder