Lucene search
+L

432 matches found

RedhatCVE
RedhatCVE
added 2025/09/30 8:56 p.m.13 views

CVE-2025-45376

Dell Repository Manager DRM, versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.5CVSS6.4AI score0.00095EPSS
Exploits0References1
OSV
OSV
added 2025/09/29 9:15 p.m.13 views

CVE-2025-45376

Dell Repository Manager DRM, versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS5.8AI score0.00095EPSS
Exploits0References1
NVD
NVD
added 2025/09/29 9:15 p.m.7 views

CVE-2025-45376

Dell Repository Manager DRM, versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS0.00095EPSS
Exploits0References1
CVE
CVE
added 2025/09/29 8:13 p.m.20 views

CVE-2025-45376

Dell Repository Manager (DRM) versions 3.4.7–3.4.8 are affected by an Improper Handling of Insufficient Permissions that could allow a local, low-privilege attacker to elevate privileges. The underlying issue is privilege handling rather than remote access, and exploitation is described as local ...

7.8CVSS6.1AI score0.00095EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/09/29 8:13 p.m.10 views

CVE-2025-45376

Dell Repository Manager DRM, versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.5CVSS0.00095EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/29 8:13 p.m.4 views

CVE-2025-45376

Dell Repository Manager DRM, versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.5CVSS6.1AI score0.00095EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/29 12:0 a.m.10 views

PT-2025-39876

Name of the Vulnerable Software and Affected Versions Dell Repository Manager versions 3.4.7 through 3.4.8 Description Dell Repository Manager DRM versions 3.4.7 and 3.4.8 have an issue related to improper handling of insufficient permissions or privileges. A local attacker with limited privilege...

7.5CVSS6.5AI score0.00095EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/09/29 12:0 a.m.6 views

Dell Repository Manager 安全漏洞

Dell Repository Manager is a data repository manager from Dell USA. A security vulnerability exists in Dell Repository Manager versions 3.4.7 and 3.4.8, which stems from improper handling of privileges and could result in elevated privileges...

7.8CVSS6.7AI score0.00095EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:4 a.m.11 views

CVE-2022-28619

A potential security vulnerability has been identified in the installer of HPE Version Control Repository Manager. The vulnerability could allow local escalation of privilege. HPE has made the following software update to resolve the vulnerability in HPE Version Control Repository Manager install...

7.8CVSS7.1AI score0.0023EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:39 p.m.10 views

CVE-2022-27907

Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF...

4.3CVSS7AI score0.00657EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:23 p.m.9 views

CVE-2021-29158

Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control...

4.9CVSS7AI score0.00844EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:6 p.m.8 views

CVE-2021-42568

Sonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL Certificates Loading function via a low-privileged account...

4.3CVSS6.8AI score0.00456EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 8:4 p.m.14 views

CVE-2021-37152

Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications...

5.4CVSS5.9AI score0.24389EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:35 p.m.9 views

CVE-2021-29159

A cross-site scripting XSS vulnerability has been discovered in Nexus Repository Manager 3.x before 3.30.1. An attacker with a local account can create entities with crafted properties that, when viewed by an administrator, can execute arbitrary JavaScript in the context of the NXRM application...

6.1CVSS5.8AI score0.00671EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:51 p.m.10 views

CVE-2021-43961

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

4.3CVSS6.8AI score0.00716EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 3:54 p.m.13 views

CVE-2020-11444

Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control...

8.8CVSS6.9AI score0.08508EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:52 p.m.13 views

CVE-2020-15870

Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS Issue 2 of 2...

6.1CVSS6.1AI score0.00677EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 3:30 p.m.13 views

CVE-2020-29436

Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Fixed in version 3.29.0...

6.5CVSS7AI score0.01441EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 8:22 a.m.12 views

CVE-2019-15893

Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution...

7.2CVSS7.3AI score0.02061EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:35 a.m.9 views

CVE-2019-15588

There is an OS Command Injection in Nexus Repository Manager = 2.14.14 bypass CVE-2019-5475 that could allow an attacker a Remote Code Execution RCE. All instances using CommandLineExecutor.java with user-supplied data is vulnerable, such as the Yum Configuration Capability...

9CVSS7.8AI score0.18396EPSS
Exploits5References1
Rows per page
Query Builder