Lucene search
K

8 matches found

CNNVD
CNNVD
added 2025/08/12 12:0 a.m.1 views

Microsoft Azure Stack 路径遍历漏洞

Microsoft Azure Stack is a hybrid cloud computing software solution based on the Azure cloud platform from Microsoft USA. The product supports building and deploying hybrid applications. A path traversal vulnerability exists in Microsoft Azure Stack. An attacker exploiting this vulnerability coul...

7.5CVSS6.3AI score0.01377EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2025/03/18 4:15 p.m.0 views

CVE-2025-27688

Dell ThinOS 2408 and prior, contains an improper permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS5.8AI score0.00084EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/03/18 12:0 a.m.2 views

Dell ThinOS 安全漏洞

Dell ThinOS is a client operating system from the American company Dell. An authorization issue vulnerability exists in Dell ThinOS 2408 and prior versions, which arises from improper privilege settings and can be exploited by a local, low-privilege attacker to cause an elevation of privilege...

7.8CVSS6.7AI score0.00084EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/11 12:0 a.m.3 views

Dell ThinOS 命令注入漏洞

Dell ThinOS is a client operating system from the American company Dell. A command injection vulnerability exists in Dell ThinOS version 2408, which stems from improper neutralization of special elements, and can be exploited by an attacker with local access rights to cause command execution...

8.4CVSS7.3AI score0.00598EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/11 12:0 a.m.1 views

Dell ThinOS 安全漏洞

Dell ThinOS is a client operating system from Dell USA. A security vulnerability exists in Dell ThinOS version 2408, which stems from a Time of Check to Time of Use TOCTOU race condition that could allow a low-privileged attacker with local access privileges to exploit the vulnerability, resultin...

7.8CVSS6.3AI score0.00104EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/04 12:0 a.m.2 views

PT-2024-36585 · WordPress · Table Of Contents Plus

Name of the Vulnerable Software and Affected Versions: Table of Contents Plus WordPress plugin versions through 2408 Description: The Table of Contents Plus WordPress plugin does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform...

4.8CVSS6.2AI score0.00228EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2024/10/20 12:0 a.m.2 views

PT-2024-33388 · Michael Tran · Table Of Contents Plus

Name of the Vulnerable Software and Affected Versions: Table of Contents Plus versions n/a through 2408 Description: A Cross-Site Request Forgery CSRF issue is found in Michael Tran's Table of Contents Plus, allowing malicious activities. This issue enables Cross Site Request Forgery...

8.8CVSS7AI score0.002EPSS
Exploits0References7
Patchstack
Patchstack
added 2024/10/14 12:11 p.m.3 views

WordPress Table of Contents Plus plugin <= 2408 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Table of Contents Plus versions = 2408...

8.8CVSS7AI score0.002EPSS
Exploits0Affected Software1
Rows per page
Query Builder