Lucene search
K

310 matches found

OSV
OSV
added 2022/10/13 12:0 a.m.10 views

CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb

Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...

3.7CVSS4.7AI score0.0022EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2022/10/10 9:15 p.m.3 views

CVE-2022-41749

An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7.8CVSS7.6AI score0.0005EPSS
Exploits0References3
NVD
NVD
added 2022/10/10 9:15 p.m.12 views

CVE-2022-41749

An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7.8CVSS0.0005EPSS
Exploits0References2
Prion
Prion
added 2022/10/10 9:15 p.m.14 views

Input validation

An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

4.3CVSS7.7AI score0.0005EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/10/10 12:0 a.m.10 views

CVE-2022-41749

An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7.9AI score0.0005EPSS
Exploits0References2
CVE
CVE
added 2022/10/10 12:0 a.m.54 views

CVE-2022-41749

CVE-2022-41749 is an origin validation error affecting Trend Micro Apex One agents, enabling local privilege escalation if an attacker can run low-privilege code. The vulnerability is characterized by a LOCAL attack vector, LOW attack complexity, and requires user- or attacker-side conditions to ...

7.8CVSS7.7AI score0.0005EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/09/19 6:15 p.m.1 views

CVE-2022-40140

An origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to cause a denial-of-service on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to...

5.5CVSS6.8AI score0.00209EPSS
Exploits0References3
NVD
NVD
added 2022/09/19 6:15 p.m.14 views

CVE-2022-40140

An origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to cause a denial-of-service on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to...

5.5CVSS0.00209EPSS
Exploits0References2
Prion
Prion
added 2022/09/19 6:15 p.m.12 views

Input validation

An origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to cause a denial-of-service on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to...

1.7CVSS5.9AI score0.00209EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2022/09/19 6:1 p.m.73 views

CVE-2022-40140

CVE-2022-40140 affects Trend Micro Apex One and Apex One as a Service. It is an origin validation error that can allow a local attacker with low-privilege code execution to cause a denial-of-service on affected installations. According to the provided sources, fixes are in August 2022 updates: On...

5.5CVSS5.9AI score0.00209EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/09/14 12:0 a.m.2 views

PT-2022-25240 · Trend Micro · Trend Micro Apex One +1

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Description: The issue is related to an origin validation error that could allow a local attacker to cause a...

5.5CVSS5.4AI score0.00209EPSS
Exploits0References13
NVD
NVD
added 2022/06/28 2:15 p.m.11 views

CVE-2022-23763

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections...

8.8CVSS0.00131EPSS
Exploits0References1
OSV
OSV
added 2022/06/28 2:15 p.m.0 views

CVE-2022-23763

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections...

8.8CVSS7.5AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/06/28 2:15 p.m.2 views

CVE-2022-23763

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections...

8.8CVSS7.6AI score0.00131EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/06/28 1:49 p.m.15 views

CVE-2022-23763 DOUZONE BIZON NeoRS file download and execute vulnerability

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections...

7.8CVSS9.1AI score0.00131EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2022/05/14 1:33 a.m.13 views

github.com/gofiber/fiber/v2 vulnerable to Origin Validation Error

The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems...

5.9CVSS6.9AI score0.00146EPSS
Exploits0References8Affected Software2
OSV
OSV
added 2022/05/13 1:38 a.m.27 views

GHSA-73W7-6W9G-GC8W RubyGems has Origin Validation Error vulnerability

RubyGems version 2.6.12 and earlier is vulnerable to a DNS hijacking vulnerability that allows a MITM attacker to force the RubyGems client to download and install gems from a server that the attacker controls...

8.1CVSS8.4AI score0.04996EPSS
Exploits1References16
OSV
OSV
added 2022/05/13 1:23 a.m.17 views

GHSA-Q7FX-WM2P-QFJ8 HashiCorp Consul vulnerable to Origin Validation Error

HashiCorp Consul 1.4.3 lacks server hostname verification for agent-to-agent TLS communication. In other words, the product behaves as if verifyserverhostname were set to false, even when it is actually set to true. This is fixed in 1.4.4...

7.4CVSS7.2AI score0.00183EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2022/04/04 7:45 p.m.4 views

CVE-2021-32985 AVEVA System Platform Origin Validation Error

AVEVA System Platform versions 2017 through 2020 R2 P01 does not properly verify that the source of data or communication is valid...

7.2CVSS7AI score0.00085EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2022/01/27 4:28 p.m.797 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Podman_Project Podman

CVE-2021-4034-Rust Linux LPE using polkit-1 written in Rust...

7.8CVSS7.3AI score0.88057EPSS
Exploits149
Rows per page
Query Builder