Lucene search
K

997 matches found

Virtuozzo
Virtuozzo
added 2023/07/03 12:0 a.m.36 views

Virtuozzo Hybrid Infrastructure 5.4 Update 3 (5.4.3-100)

In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover core storage, the system configuration, updates, documentation, and the compute services. Additionally, this release delivers stability improvements and addresses issues found in previous releases...

6.8AI score
Exploits0
ATTACKERKB
ATTACKERKB
added 2023/06/23 6:15 p.m.2 views

CVE-2023-32357

An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permissio...

7.1CVSS5.7AI score0.00248EPSS
Exploits0References7
NVD
NVD
added 2023/06/23 6:15 p.m.21 views

CVE-2023-32357

An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permissio...

7.1CVSS5.6AI score0.00248EPSS
Exploits0References6
OSV
OSV
added 2023/06/23 6:15 p.m.7 views

CVE-2023-32357

An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permissio...

7.1CVSS5.7AI score0.00248EPSS
Exploits0References6
Prion
Prion
added 2023/06/23 6:15 p.m.26 views

Authorization

An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permissio...

3.3CVSS6.4AI score0.00248EPSS
Exploits0References6Affected Software5
CVE
CVE
added 2023/06/23 12:0 a.m.93 views

CVE-2023-32357

CVE-2023-32357 is an authorization issue affecting Apple platforms. The root cause is improved state management that prevents proper revocation of access, allowing an app to retain access to system configuration files after permissions are revoked. Affected products include watchOS, tvOS, and var...

7.1CVSS6.5AI score0.00248EPSS
Exploits0References6Affected Software5
Vulnrichment
Vulnrichment
added 2023/06/23 12:0 a.m.13 views

CVE-2023-32357

An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permissio...

5.4AI score0.00248EPSS
Exploits0References6
Zero Day Initiative
Zero Day Initiative
added 2023/06/08 12:0 a.m.19 views

NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the system configuration. The system contains a hardcoded user account...

6.3CVSS6.8AI score0.00447EPSS
Exploits0References1
NVD
NVD
added 2023/06/02 11:15 a.m.12 views

CVE-2023-30604

It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310. An unauthorized remote attacker can exploit this vulnerability to access system configuration interface, resulting in performing arbitrary system operation or...

9.8CVSS9.5AI score0.00926EPSS
Exploits0References1
Prion
Prion
added 2023/06/02 11:15 a.m.23 views

Authentication flaw

It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310. An unauthorized remote attacker can exploit this vulnerability to access system configuration interface, resulting in performing arbitrary system operation or...

7.5CVSS9.4AI score0.00926EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/02 12:0 a.m.4 views

CVE-2023-30604 Hitron Technologies Inc. CODA-5310 - Broken Access Control

It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310. An unauthorized remote attacker can exploit this vulnerability to access system configuration interface, resulting in performing arbitrary system operation or...

9.8CVSS9.5AI score0.00926EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/06/02 12:0 a.m.3 views

Hitron Technologies CODA 访问控制错误漏洞

Hitron Technologies CODA is a wireless router from Hitron Technologies China. An access control error vulnerability exists in Hitron Technologies CODA version 7.2.4.7.1b3, which stems from an insufficient authentication issue in the system configuration interface. An attacker could exploit this...

9.8CVSS8.6AI score0.00926EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/05/30 11:15 p.m.2 views

CVE-2022-39071

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could overwrite some system configuration files and user installers without user permission...

7.1CVSS7.1AI score0.00293EPSS
Exploits0References2
NVD
NVD
added 2023/05/30 11:15 p.m.13 views

CVE-2022-39071

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could overwrite some system configuration files and user installers without user permission...

7.1CVSS6.8AI score0.00293EPSS
Exploits0References1
Prion
Prion
added 2023/05/30 11:15 p.m.15 views

Design/Logic Flaw

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could overwrite some system configuration files and user installers without user permission...

3.3CVSS6.8AI score0.00293EPSS
Exploits0References1Affected Software17
Vulnrichment
Vulnrichment
added 2023/05/30 12:0 a.m.9 views

CVE-2022-39071

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could overwrite some system configuration files and user installers without user permission...

6.8AI score0.00293EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/05/18 12:0 a.m.2 views

Apple macOS Ventura 安全漏洞

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.4, which stems from an application that may be able to retain access to system configuration files even after its privileges have been revoked...

7.1CVSS6.9AI score0.00248EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2023/05/18 12:0 a.m.3 views

PT-2023-3610 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 macOS Big Sur versions prior to 11.7.7 macOS Monterey versions prior to 12.6.6 iOS versions prior to 16.5 iPadOS versions prior to 16.5 Description...

7.1CVSS5.5AI score0.00248EPSS
Exploits0References15
BDU FSTEC
BDU FSTEC
added 2023/05/02 12:0 a.m.3 views

The vulnerability of the microprogramming software in the embedded converter Moxa MiiNePort E1, related to the lack of authentication for a critical function, allows a intruder to gain access to the system configuration interface, enabling them to view, modify, or terminate services.

The vulnerability of the microprogramming software in the embedded converter Moxa MiiNePort E1 is related to the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker to gain access to the system configuration interface, enabling them to view, modify,...

10CVSS7.8AI score0.00887EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/02 12:0 a.m.5 views

PT-2023-3550 · Hitron Technologies · Coda-5310

Name of the Vulnerable Software and Affected Versions: Hitron Technologies CODA-5310 affected versions not specified Description: The issue is related to insufficient authentication in the system configuration interface, allowing an unauthorized remote attacker to access the interface. This can...

9.8CVSS9.3AI score0.00926EPSS
Exploits0References5
Rows per page
Query Builder