Lucene search
+L

1971 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/01 12:0 a.m.11 views

The vulnerability of the Microsoft Dataverse data management platform, related to incorrect authorization, allows a perpetrator to escalate their privileges.

The vulnerability of the Microsoft Dataverse data management platform is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

9CVSS5.4AI score0.00701EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/01 12:0 a.m.23 views

ASB-A-388480622

In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS7.9AI score0.00366EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.10 views

The vulnerability of the SmartFabric OS10 network operating system, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the SmartFabric OS10 network operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

9CVSS5.4AI score0.00663EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2025/03/14 4:15 p.m.8 views

CVE-2025-25873

Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges via the Change Root Password function...

5.5CVSS5.8AI score0.00164EPSS
SaveExploits2References2
SUSE CVE
SUSE CVE
added 2025/03/14 3:0 a.m.5 views

SUSE CVE-2024-57603

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting...

6.3CVSS7.4AI score0.0043EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2025/03/14 3:0 a.m.5 views

SUSE CVE-2024-57604

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component...

9.8CVSS7.5AI score0.00709EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.8 views

The vulnerability of Microprogramming Software in the Wiren Board controller lies in the lack of implementation for authentication when changing access rights, allowing attackers to escalate their privileges.

The vulnerability of the Microprogramming Software of the Wiren Board controller is related to the absence of authentication mechanisms for changing access rights. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

10CVSS5.5AI score
SaveExploits0Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.8 views

The vulnerability of Zoom’s video conferencing software is related to the overflowing of buffers in dynamic memory, allowing attackers to exploit their privileges.

The vulnerability of Zoom’s video conferencing software is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

8.5CVSS5.5AI score0.00584EPSS
SaveExploits0References2Affected Software19
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.11 views

The vulnerability of the Splunk App for SOAR software lies in its insecure management of privileges, allowing attackers to elevate their privileges.

The vulnerability of the Splunk App for SOAR software relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

6.6CVSS5.4AI score0.0026EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/03/11 5:16 p.m.4 views

CVE-2025-26634

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network...

7.5CVSS6.1AI score0.00649EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/10 12:0 a.m.11 views

The vulnerability of the software platform for developing and managing Adobe Commerce B2B, related to violations of secure design principles, allows attackers to enhance their privileges.

The vulnerability of the software platform for developing and managing Adobe Commerce B2B is related to the violation of secure design principles. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges...

8.5CVSS5.5AI score0.00923EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/07 12:0 a.m.9 views

The vulnerability of the PROCON-WIN SCADA system, which stems from the use of rigidly encoded account data, allows a intruder to increase their privileges.

The vulnerability of the PROCON-WIN SCADA system is related to the use of strictly encrypted account data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

10CVSS5.4AI score0.00546EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/03/06 3:15 p.m.7 views

CVE-2025-25450

An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to escalate privileges via the deactivation of the activated second factor to the /session endpoint...

5.1CVSS5.8AI score0.00262EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2016-7943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger...

9.8CVSS7.5AI score0.04286EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2012-4820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and...

9.3CVSS5.9AI score0.05086EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2019-25067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1. This affects an unknown part of the component API. The manipulation...

8.8CVSS6.2AI score0.02479EPSS
SaveExploits1References3
OSV
OSV
added 2025/03/03 3:15 a.m.4 views

CVE-2025-20646

In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074; Issue ID: MSV-1803...

9.8CVSS5.9AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/03/03 3:15 a.m.3 views

CVE-2025-20646

In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074; Issue ID: MSV-1803...

9.8CVSS6AI score0.00866EPSS
SaveExploits0References2
NVD
NVD
added 2025/03/03 3:15 a.m.13 views

CVE-2025-20646

In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074; Issue ID: MSV-1803...

9.8CVSS0.00866EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/03 2:25 a.m.16 views

CVE-2025-20646

In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074; Issue ID: MSV-1803...

7.1AI score0.00866EPSS
SaveExploits0References1
Rows per page
Query Builder