Lucene search
+L

10 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2016-5580

Malware in sbrugna...

7.8CVSS7.8AI score0.01253EPSS
SaveExploits0References11
OSV
OSV
•added 2025/03/01 12:00 a.m.•35 views

ASB-A-376259166

In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

4CVSS5.8AI score0.00095EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/11/05 12:00 a.m.•19 views

PT-2024-33513 · Dressroom · Dressroom

Name of the Vulnerable Software and Affected Versions: Dressroom versions prior to SMR Nov-2024 Release 1 Description: The issue is related to improper input validation, allowing physical attackers to access data across multiple user profiles. Recommendations: For versions prior to SMR Nov-2024...

4.6CVSS6.9AI score0.0022EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2023/10/11 2:15 p.m.•12 views

CVE-2023-45396

An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...

6.5CVSS6.6AI score0.00385EPSS
SaveExploits0References3
Prion
Prion
•added 2023/10/11 2:15 p.m.•28 views

Design/Logic Flaw

An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...

6.4CVSS6.4AI score0.00385EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/11 12:00 a.m.•14 views

CVE-2023-45396

An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...

6.8AI score0.00385EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/10/11 12:00 a.m.•47 views

CVE-2023-45396

An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...

6.6AI score0.00385EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/11 12:00 a.m.•3 views

CVE-2023-45396: Authorization Bypass Through User-Controlled Key

An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...

6.5CVSS6.7AI score0.00385EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/09/08 4:15 p.m.•8 views

CVE-2022-27968

Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of monitored files and profiles via a crafted GET request sent to /WebApp/SettingsFileMonitor/GetFileMonitorProfiles...

5.3CVSS5.9AI score0.0071EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/10/12 12:00 a.m.•11 views

Siemens SINEC NMS 信息泄露漏洞

SINEC NMS is a network management system introduced by Siemens for monitoring and managing industrial networks.A user profile download vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1. An attacker could exploit this vulnerability to download any user's user profile, which coul...

6.5CVSS5.6AI score0.00852EPSS
SaveExploits0References5
Rows per page
Query Builder