Lucene search
+L

54 matches found

UbuntuCve
UbuntuCve
added 2013/02/23 9:55 p.m.22 views

CVE-2013-0887

The developer-tools process in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict privileges during interaction with a connected server, which has unspecified impact and attack vectors...

7.5CVSS7.2AI score0.0088EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2013/02/23 9:0 p.m.45 views

CVE-2013-0887

Removed by vendor...

7.5CVSS9.4AI score0.0088EPSS
SaveExploits0
Cvelist
Cvelist
added 2013/02/23 9:0 p.m.29 views

CVE-2013-0887

The developer-tools process in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict privileges during interaction with a connected server, which has unspecified impact and attack vectors...

5.8AI score0.0088EPSS
SaveExploits0References5
CVE
CVE
added 2013/02/23 9:0 p.m.70 views

CVE-2013-0887

Chromium-based: CVE-2013-0887 affects Google Chrome prior to 25.0.1364.97 (Windows/Linux) and prior to 25.0.1364.99 (Mac). The developer-tools process does not properly restrict privileges when interacting with a connected server, but the provided documents do not specify impact, attack vectors, ...

7.5CVSS6AI score0.0088EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2013/02/13 12:4 p.m.30 views

CVE-2013-0073

The Windows Forms aka WinForms component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP or 2 ...

10CVSS7.4AI score0.29632EPSS
SaveExploits0References3
CVE
CVE
added 2013/02/13 11:0 a.m.90 views

CVE-2013-0073

CVE-2013-0073 affects the Windows Forms component of Microsoft .NET Framework (versions 2.0 SP2, 3.5, 3.5.1, 4, 4.5). The root cause is improper restriction of privileges for a callback function during object creation, which can allow remote attackers to execute arbitrary code via a crafted XBAP ...

10CVSS7.6AI score0.29632EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2013/01/21 9:55 p.m.15 views

Design/Logic Flaw

Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and 1 enable or 2 disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065...

4CVSS6.8AI score0.01658EPSS
SaveExploits1References3
Packet Storm
Packet Storm
added 2011/03/16 12:0 a.m.50 views

SugarCRM 6.1.1 Privilege Restriction Bypass

Advisory: SugarCRM list privilege restriction bypass RedTeam Pentesting discovered a vulnerability in SugarCRM that allows logged in users to bypass restrictions of their list privilege, allowing to list all entries. Details ======= Product: SugarCRM Community Edition SugarCRM Professional SugarC...

4CVSS0.5AI score0.06264EPSS
SaveExploits3
securityvulns
securityvulns
added 2011/03/15 12:0 a.m.52 views

[RT-SA-2011-002] SugarCRM list privilege restriction bypass

Advisory: SugarCRM list privilege restriction bypass RedTeam Pentesting discovered a vulnerability in SugarCRM that allows logged in users to bypass restrictions of their list privilege, allowing to list all entries. Details ======= Product: SugarCRM Community Edition SugarCRM Professional SugarC...

4CVSS6.1AI score0.06264EPSS
SaveExploits3
NVD
NVD
added 2010/12/07 9:0 p.m.20 views

CVE-2010-4491

Google Chrome before 8.0.552.215 does not properly restrict privileged extensions, which allows remote attackers to cause a denial of service memory corruption via a crafted extension...

4.3CVSS6.1AI score0.00897EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2010/12/07 8:0 p.m.25 views

CVE-2010-4491

Google Chrome before 8.0.552.215 does not properly restrict privileged extensions, which allows remote attackers to cause a denial of service memory corruption via a crafted extension...

6AI score0.00897EPSS
SaveExploits0References4
NVD
NVD
added 2007/03/30 10:19 a.m.16 views

CVE-2007-1781

Minna De Office 1.x and 2.x does not properly restrict user access to certain privileged actions, which allows local users to change the configuration or have other unspecified impact. NOTE: some of these details are obtained from third party information...

4.6CVSS6.3AI score0.00324EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2007/03/30 10:0 a.m.18 views

CVE-2007-1781

Minna De Office 1.x and 2.x does not properly restrict user access to certain privileged actions, which allows local users to change the configuration or have other unspecified impact. NOTE: some of these details are obtained from third party information...

6.3AI score0.00324EPSS
SaveExploits0References7
CVE
CVE
added 2003/05/15 4:0 a.m.73 views

CVE-2003-0246

CVE-2003-0246 affects the Linux kernel (2.4.x) where the ioperm system call does not properly restrict privileges, enabling a local user to gain read and/or write access to certain I/O ports on 2.4.20 and earlier. The connected OpenVAS and advisory records reference Debian and other vendor adviso...

3.6CVSS6AI score0.005EPSS
SaveExploits0References13Affected Software1
Rows per page
Query Builder