Lucene search
+L

2879 matches found

OSV
OSV
added 2025/04/16 6:16 p.m.10 views

CVE-2025-32833

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UnlockProjectUserRights' method. This could allow an authenticated remote attacker to bypass authorization controls, to read...

8.7CVSS5.8AI score0.00751EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/16 6:16 p.m.11 views

CVE-2025-32832

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'LockProjectUserRights' method. This could allow an authenticated remote attacker to bypass authorization controls, to read fr...

8.7CVSS5.8AI score0.00751EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/16 6:16 p.m.8 views

CVE-2025-32475

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateProject' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and...

8.7CVSS5.8AI score0.00751EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/16 6:16 p.m.10 views

CVE-2025-31349

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateSmtpSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from...

8.7CVSS5.8AI score0.00806EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/16 6:16 p.m.15 views

CVE-2025-30032

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateDatabaseSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read...

8.7CVSS5.8AI score0.00806EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/16 6:16 p.m.11 views

CVE-2025-29905

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'RestoreFromBackup' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from a...

8.7CVSS5.8AI score0.00857EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/16 6:16 p.m.21 views

CVE-2025-27540

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'Authenticate' method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and...

9.3CVSS5.8AI score0.00956EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/16 5:38 p.m.21 views

CVE-2025-32869

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'ImportCertificate' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from a...

8.8CVSS0.00417EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/16 3:16 p.m.15 views

UBUNTU-CVE-2025-22072

In the Linux kernel, the following vulnerability has been resolved: spufs: fix gang directory lifetimes prior to "POWERPC spufs: Fix gang destroy leaks" we used to have a problem with gang lifetimes - creation of a gang returns opened gang directory, which normally gets removed when that gets...

7.8CVSS6.2AI score0.00204EPSS
SaveExploits0References26
VulnCheck KEV
VulnCheck KEV
added 2025/04/16 12:00 a.m.8 views

VulnCheck KEV: CVE-2025-31201

Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication...

9.8CVSS5.9AI score0.14652EPSS
SaveExploits4References1
Positive Technologies
Positive Technologies
added 2025/04/16 12:00 a.m.13 views

PT-2025-16848 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.5AI score0.00751EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/04/16 12:00 a.m.24 views

PT-2025-16832 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.5AI score0.00751EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/04/16 12:00 a.m.25 views

PT-2025-16834 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS8.1AI score0.00751EPSS
SaveExploits0References4
OSV
OSV
added 2025/04/15 9:16 p.m.8 views

CVE-2025-30711

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments, File Upload. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

5.4CVSS5.8AI score0.0034EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/08 12:43 a.m.28 views

CVE-2024-58133

In chainmaker-go aka ChainMaker before 2.4.0, when making frequent updates to a node's configuration file and restarting this node, concurrent writes by logger.go to a map are mishandled. Creating other logs simultaneously can lead to a read-write conflict and panic...

4CVSS7.2AI score0.00266EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/06 3:15 a.m.16 views

CVE-2024-58133

In chainmaker-go aka ChainMaker before 2.4.0, when making frequent updates to a node's configuration file and restarting this node, concurrent writes by logger.go to a map are mishandled. Creating other logs simultaneously can lead to a read-write conflict and panic...

4CVSS0.00266EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/06 12:00 a.m.58 views

CVE-2024-58133

CVE-2024-58133 affects chainmaker-go (ChainMaker) before version 2.4.0. The root cause is concurrent writes to a map performed by logger.go during frequent updates to a node’s configuration file and subsequent restart, which can cause a read-write conflict and panic. Public sources explicitly des...

4CVSS6.9AI score0.00266EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/06 12:00 a.m.15 views

PT-2025-15082 · Unknown · Chainmaker

Name of the Vulnerable Software and Affected Versions: ChainMaker versions prior to 2.4.0 Description: The issue arises from concurrent writes to a map by logger.go when a node's configuration file is frequently updated and the node is restarted. This can lead to a read-write conflict, resulting ...

4CVSS6.4AI score0.00266EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/04/05 12:00 a.m.13 views

chainMaker 安全漏洞

chainMaker is a Go library in the Go open source. A security vulnerability exists in chainMaker versions prior to 2.4.0, which stems from logger.go mishandling concurrent writes to mappings, which can lead to read/write conflicts and crashes...

4CVSS6.6AI score0.00266EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/03/22 11:29 a.m.14 views

CVE-2024-8551

A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, potentially leading to the exposure or modification of...

9.1CVSS6.5AI score0.00958EPSS
SaveExploits1References1
Rows per page
Query Builder