Lucene search
+L

5961 matches found

Prion
Prion
•added 2023/11/06 8:15 a.m.•34 views

Input validation

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6...

4.3CVSS7.4AI score0.00203EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/11/06 7:19 a.m.•23 views

CVE-2023-28794 PAC Files Exposed to Internet Websites

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6...

4.3CVSS7AI score0.00203EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/11/06 7:19 a.m.•41 views

CVE-2023-28794 PAC Files Exposed to Internet Websites

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6...

4.3CVSS6.7AI score0.00203EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/06 7:19 a.m.•66 views

CVE-2023-28794

CVE-2023-28794 concerns an Origin Validation Error in Zscaler Client Connector for Linux prior to version 1.3.1.6 . Multiple connected sources (e.g., PT-2023-21970, RH, NVD, Red Hat, CNNVD mirrors) describe a vulnerability that could permit privilege abuse due to faulty origin validation. Affecte...

6.5CVSS5.1AI score0.00203EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/11/06 12:00 a.m.•24 views

Zscaler Client Connector Access Control Error Vulnerability

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

6.5CVSS6.7AI score0.00203EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/06 12:00 a.m.•8 views

CVE-2023-28794: Origin Validation Error

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6...

6.5CVSS6.6AI score0.00203EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/11/06 12:00 a.m.•21 views

PT-2023-21970 · Zscaler · Zscaler Client Connector

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector for Linux versions prior to 1.3.1.6 Description: The issue is related to an Origin Validation Error vulnerability in Zscaler Client Connector on Linux, allowing Privilege Abuse. Recommendations: For versions prior to...

6.5CVSS6.4AI score0.00203EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/11/02 12:00 a.m.•20 views

IBM MQ Appliance Input Validation Error Vulnerability

IBM MQ IBM WebSphere MQ is a messaging middleware product from International Business Machines IBM. The product focuses on providing a reliable and validated messaging backbone for Service Oriented Architecture SOA. An input validation error vulnerability exists in IBM MQ Appliance, which stems...

5.3CVSS6.6AI score0.00599EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/11/02 12:00 a.m.•23 views

GLPI Input Validation Error Vulnerability

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...

10CVSS7.1AI score0.01058EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/11/01 12:00 a.m.•19 views

SolarWinds Platform Input Validation Error Vulnerability

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. An input validation error vulnerability exists in SolarWinds Platform that stems from the presence of a remote code execution vulnerability that allows a low-privileged use...

8.8CVSS8.3AI score0.02729EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/11/01 12:00 a.m.•20 views

Project Worlds Online Examination System Input Validation Error Vulnerability

Project Worlds Online Examination System is an online examination system. Project Worlds Online Examination System v1.0 suffers from an input validation error vulnerability that stems from susceptibility to multiple open redirection vulnerabilities that allow an attacker to redirect a victim user...

6.1CVSS7.2AI score0.00407EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/11/01 12:00 a.m.•15 views

Dolibarr ERP/CRM Security Breach

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders and more. A security vulnerability exists in Dolibarr ERP/CRM v18.0.1 and...

8.8CVSS6.8AI score0.35919EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/11/01 12:00 a.m.•21 views

SolarWinds Platform Input Validation Error Vulnerability

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. An input validation error vulnerability exists in SolarWinds Platform that stems from the presence of an insecure job execution mechanism vulnerability that could lead to...

8.8CVSS6.8AI score0.00419EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/01 12:00 a.m.•2 views

CVE-2023-5858: Origin Validation Error

Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.7AI score0.00651EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/01 12:00 a.m.•4 views

CVE-2023-5853: Origin Validation Error

Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6AI score0.00651EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/01 12:00 a.m.•4 views

CVE-2023-5851: Origin Validation Error

Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.7AI score0.00935EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/30 12:00 a.m.•16 views

Lenovo ThinkPad Input Validation Error Vulnerability

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. The Lenovo ThinkPad suffers from an input validation error vulnerability that stems from a security issue in the SMI handler in the BIOS that could allow an attacker with local access and elevated privileges to execute arbitra...

6.7CVSS7AI score0.00191EPSS
SaveExploits0References2
CNVD
CNVD
•added 2023/10/30 12:00 a.m.•50 views

Rockwell Automation FactoryTalk View SE Input Validation Error Vulnerability (CNVD-2024-37628)

Rockwell Automation FactoryTalk View SE is an industrial automation system view interface from Rockwell Automation. A security vulnerability exists in Rockwell Automation FactoryTalk View SE, which can be exploited by a remote attacker to submit a special request that can take the product offline...

7.5CVSS6.8AI score0.00898EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/10/30 12:00 a.m.•21 views

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

7.5CVSS6.6AI score0.00501EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/10/30 12:00 a.m.•22 views

AnythingLLM Input Validation Error Vulnerability

AnythingLLM is a business-compliant document chatbot. An input validation error vulnerability exists in versions of AnythingLLM prior to 0.1.0 that stems from incorrect input validation...

9.1CVSS6.7AI score0.00736EPSS
SaveExploits1References3
Rows per page
Query Builder