Lucene search
K

310 matches found

OSV
OSV
added 2024/12/31 5:15 p.m.0 views

CVE-2024-55917

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7.8CVSS6AI score
Exploits0References1
NVD
NVD
added 2024/12/31 5:15 p.m.9 views

CVE-2024-55917

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7.8CVSS0.00054EPSS
Exploits0References1
CVE
CVE
added 2024/12/31 4:16 p.m.60 views

CVE-2024-55917

CVE-2024-55917 is a local privilege escalation in Trend Micro Apex One caused by an origin validation error. The issue allows a local attacker who can run low-privilege code to escalate to SYSTEM, with the attack surface tied to the Apex One components and services referenced in the linked adviso...

7.8CVSS7.2AI score0.00054EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/31 4:16 p.m.7 views

CVE-2024-55917

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7.8CVSS7.1AI score0.00054EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/11/15 11:15 a.m.1 views

CVE-2024-10534

Origin Validation Error vulnerability in Dataprom Informatics Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS allows Traffic Injection. This issue affects Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS: before 2024...

9.8CVSS5.8AI score0.00216EPSS
Exploits0References3
OSV
OSV
added 2024/11/15 11:15 a.m.1 views

CVE-2024-10534

Origin Validation Error vulnerability in Dataprom Informatics Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS allows Traffic Injection.This issue affects Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS: before 2024...

9.8CVSS5.8AI score0.00216EPSS
Exploits0References1
NVD
NVD
added 2024/11/15 11:15 a.m.19 views

CVE-2024-10534

Origin Validation Error vulnerability in Dataprom Informatics Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS allows Traffic Injection. This issue affects Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS: before 2024...

9.8CVSS0.00216EPSS
Exploits0References2
CVE
CVE
added 2024/11/15 11:2 a.m.54 views

CVE-2024-10534

CVE-2024-10534 affects Dataprom Informatics’ PACS/ACSS products, caused by an origin validation error that enables traffic injection. The vulnerability, described as an improper origin check affecting PACS/ACSS prior to 2024, is documented with high-severity impact (traffic manipulation). Connect...

9.8CVSS5.8AI score0.00216EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/11/15 11:2 a.m.21 views

CVE-2024-10534 Improper Access Control in Dataprom Informatics' PACS-ACSS

Origin Validation Error vulnerability in Dataprom Informatics Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS allows Traffic Injection. This issue affects Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS: before 2024...

8.6CVSS0.00216EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/11/15 11:2 a.m.8 views

CVE-2024-10534 Improper Access Control in Dataprom Informatics' PACS-ACSS

Origin Validation Error vulnerability in Dataprom Informatics Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS allows Traffic Injection. This issue affects Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS: before 2024...

8.6CVSS5.8AI score0.00216EPSS
Exploits0References2
Veracode
Veracode
added 2024/10/18 7:3 a.m.12 views

Origin Validation Error

gradio is vulnerable to Origin Validation Error. The vulnerability is due to the CustomCORSMiddleware class. An attacker can make unauthorized requests and potentially access sensitive data...

8.3CVSS6.5AI score0.00138EPSS
Exploits0References3Affected Software1
Veracode
Veracode
added 2024/10/17 9:43 a.m.5 views

Origin Validation Error

gradio is vulnerable to Origin Validation Error. The vulnerability is due the localhostaliases variable including "null" as a valid origin, when the server is deployed locally. An attacker can make unauthorized requests from sandboxed iframes or other sources with a null origin, potentially leadi...

6.9CVSS6.8AI score0.00168EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2024/10/13 12:0 a.m.8 views

Mozilla Firefox Origin Authentication Error Vulnerability

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. Mozilla Firefox suffers from an origin validation error that originates...

7.5CVSS9.5AI score0.00168EPSS
Exploits0References1
Snyk
Snyk
added 2024/10/10 9:20 p.m.2 views

Origin Validation Error

Overview gradio is a Python library for easily interacting with trained machine learning models Affected versions of this package are vulnerable to Origin Validation Error due to the CustomCORSMiddleware class. An attacker can make unauthorized requests and potentially access sensitive data...

8.8CVSS6.5AI score0.00138EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/10/01 12:0 a.m.1 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. Mozilla Firefox suffers from an origin validation error that originates...

7.5CVSS9.1AI score0.00168EPSS
Exploits0References9
OSV
OSV
added 2024/07/29 9:15 a.m.0 views

CVE-2024-41143

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...

7.8CVSS5.8AI score0.00076EPSS
Exploits0References2
NVD
NVD
added 2024/07/29 9:15 a.m.9 views

CVE-2024-41143

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...

7.8CVSS0.00076EPSS
Exploits0References2
CVE
CVE
added 2024/07/29 8:51 a.m.49 views

CVE-2024-41143

CVE-2024-41143 is a vulnerability in SKYSEA Client View (Windows client) caused by an origin validation error in shared memory/data exchanges. Affected versions are 3.013.00 through 19.210.04e . If exploited by a user who can log in to the PC, an arbitrary process may execute with SYSTEM privileg...

7.8CVSS7AI score0.00076EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/29 8:51 a.m.8 views

CVE-2024-41143

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...

7.2AI score0.00076EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/07/29 8:51 a.m.10 views

CVE-2024-41143

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...

0.00076EPSS
Exploits0References2
Rows per page
Query Builder