Lucene search
+L

5767 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/04 12:00 a.m.•2 views

CVE-2022-44436: Missing Authorization

In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed...

5.5CVSS5.8AI score0.00115EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/01/04 12:00 a.m.•19 views

Google Android OS和unisoc部分产品安全漏洞

Google Android is a set of Linux-based open source operating system by the American company Google Google. A security vulnerability exists in some Google Android OS and unisoc products, which stems from a lack of permission checking in the messaging service, leading to a local denial of service...

5.5CVSS5.6AI score0.00115EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/01/04 12:00 a.m.•39 views

CVE-2022-44438

In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed...

5.7AI score0.00115EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/01/04 12:00 a.m.•21 views

Google Android OS和unisoc部分产品安全漏洞

Google Android is a set of Linux-based open source operating system by the American company Google Google. A security vulnerability exists in some Google Android OS and unisoc products, which stems from a lack of permission checking in the messaging service, leading to a local denial of service...

5.5CVSS5.6AI score0.00115EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/01/04 12:00 a.m.•7 views

PT-2023-14479 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: Messaging service affected versions not specified Description: The issue is related to a missing permission check in the messaging service, which could lead to a local denial of service in the contacts service. No additional execution...

5.5CVSS5.2AI score0.00115EPSS
SaveExploits0References3
OSV
OSV
•added 2023/01/01 12:00 a.m.•12 views

ASB-A-258760519

Messaging do not check the permission , which may cause a Elevation of privilege...

5.5CVSS6AI score0.00115EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/01/01 12:00 a.m.•7 views

CVE-2022-47952

lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to open" often indicates that a file does not exist, whereas "does not refer to a network namespace path" often indicates...

5.5AI score0.00702EPSS
SaveExploits0References5
OSV
OSV
•added 2023/01/01 12:00 a.m.•20 views

ASB-A-258760518

Messaging do not check the permission , which may cause a Elevation of privilege...

5.5CVSS6AI score0.00115EPSS
SaveExploits0References1
OSV
OSV
•added 2023/01/01 12:00 a.m.•18 views

ASB-A-258759192

Messaging do not check the permission , which may cause a Elevation of privilege...

5.5CVSS6AI score0.00115EPSS
SaveExploits0References1
OSV
OSV
•added 2023/01/01 12:00 a.m.•28 views

ASB-A-258759189

Messaging do not check the permission , which may cause a Elevation of privilege...

5.5CVSS6AI score0.00115EPSS
SaveExploits0References1
OSV
OSV
•added 2023/01/01 12:00 a.m.•10 views

ASB-A-258760781

Messaging do not check the permission , which may cause a Elevation of privilege...

5.5CVSS6AI score0.00115EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/12/24 12:00 a.m.•19 views

The vulnerability of the AMQP protocol implementation of the message broker RabbitMQ in Dell EMC NetWorker’s backup and disaster recovery systems allows a perpetrator to escalate their privileges.

The vulnerability of the Advanced Message Queuing Protocol AMQP implementation of the message broker RabbitMQ in Dell EMC NetWorker’s backup and disaster recovery systems lies in the transmission of critical information in plaintext. Exploiting this vulnerability could allow an attacker to enhanc...

8.8CVSS7.6AI score0.00683EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2022/12/21 9:15 a.m.•20 views

CVE-2022-43543

KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handling of Unicode control characters. +Message App displays text unprocessed, even when control characters are contained, and the text is shown based on Unicode control character's...

5.4CVSS5.8AI score0.00502EPSS
SaveExploits0References4
CNVD
CNVD
•added 2022/12/19 12:00 a.m.•79 views

Google Android Denial of Service Vulnerability (CNVD-2023-07664)

Google Android is a Linux-based open-source operating system from the US company Google. Google Android suffers from a denial-of-service vulnerability, which is caused by a flaw in messaging. By sending a specially crafted request, an attacker can exploit this vulnerability to cause a denial of...

5.5CVSS5.3AI score0.00121EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2022/12/13 4:12 p.m.•51 views

Moderate: Red Hat Security Advisory: dbus security update

An update for dbus is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

6.5CVSS6.5AI score0.01755EPSS
SaveExploits3References4
NVD
NVD
•added 2022/12/13 3:15 a.m.•33 views

CVE-2022-41271

An unauthenticated user can attach to an open interface exposed through JNDI by the Messaging System of SAP NetWeaver Process Integration PI - version 7.50. This user can make use of an open naming and directory API to access services that could perform unauthorized operations. The vulnerability...

9.4CVSS0.00586EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/13 12:00 a.m.•3 views

CVE-2022-41271: Missing Authorization

An unauthenticated user can attach to an open interface exposed through JNDI by the Messaging System of SAP NetWeaver Process Integration PI - version 7.50. This user can make use of an open naming and directory API to access services that could perform unauthorized operations. The vulnerability...

9.4CVSS6.3AI score0.00586EPSS
SaveExploits0References5
CNVD
CNVD
•added 2022/12/12 12:00 a.m.•66 views

Google Android Denial of Service Vulnerability (CNVD-2023-07613)

Google Android is a Linux-based open source operating system from Google, Inc. A denial-of-service vulnerability exists in Google Android, which is caused by a flaw in messaging. An attacker could exploit this vulnerability to cause a denial of service...

5.5CVSS4AI score0.0017EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/12/09 12:00 a.m.•17 views

Broadcom Symantec Messaging Gateway 跨站脚本漏洞

Broadcom Symantec Messaging Gateway Broadcom SMG is an internal email security solution from Broadcom Corporation. A security vulnerability exists in Broadcom Symantec Messaging Gateway versions prior to 10.8, which originates from an authenticated user being able to embed malicious content with...

5.4CVSS5.6AI score0.01574EPSS
SaveExploits3References5
CNNVD
CNNVD
•added 2022/12/09 12:00 a.m.•13 views

Broadcom Symantec Messaging Gateway 跨站脚本漏洞

Broadcom Symantec Messaging Gateway Broadcom SMG is an internal email security solution from Broadcom Corporation USA. A cross-site scripting vulnerability exists in Broadcom Symantec Messaging Gateway versions prior to 10.8 that originates. , an authenticated user with the ability to add/edit...

5.4CVSS5.4AI score0.00404EPSS
SaveExploits0References3
Rows per page
Query Builder