Lucene search
K

342 matches found

CNNVD
CNNVD
added 2023/05/08 12:0 a.m.1 views

Apple macOS Ventura 安全漏洞

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.3. An attacker can view sensitive information by exploiting the vulnerability...

5.5CVSS6.6AI score0.00131EPSS
Exploits0References6
Citrix
Citrix
added 2023/05/04 12:0 a.m.5 views

ADM GUI is down and users only have access via SSH

Users are unable to get any access to ADM GUI on 13.1...

7.1AI score
Exploits0
OSV
OSV
added 2023/04/25 7:15 p.m.1 views

UBUNTU-CVE-2021-44460

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to access the system with the deactivated account and any permission it still holds, via crafted RPC requests...

7.4CVSS6.9AI score0.00594EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/04/25 12:0 a.m.1 views

Odoo 安全漏洞

Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed in Python language, with PostgreSQL as the database, and includes modules for sales management, inventory management, and financial management. A security...

7.4CVSS7.1AI score0.00594EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/04/21 12:0 a.m.2 views

Piwigo SQL注入漏洞

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A security vulnerability exists in Piwigo version v.13.5.0 and earlier versions. An attacker can exploit this vulnerability to execute...

8.8CVSS8.4AI score0.54093EPSS
Exploits5References7
Positive Technologies
Positive Technologies
added 2023/03/27 12:0 a.m.2 views

PT-2023-21633 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 Description: A buffer overflow issue was addressed with improved memory handling. This issue may allow an app to cause unexpected system termination or write kernel memory. Recommendations: For macOS versions prio...

7.8CVSS7.2AI score0.00092EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 4:18 a.m.2 views

SUSE CVE-2019-2977

Vulnerability in the Java SE product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of th...

3.7CVSS7.1AI score0.00908EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 3:47 a.m.2 views

SUSE CVE-2021-20229

A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidentiality...

4.3CVSS6.4AI score0.00086EPSS
Exploits0References7
CNNVD
CNNVD
added 2023/01/23 12:0 a.m.1 views

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura prior to version 13.2, which stems from a permissions issue where applications may be able to access user-sensitive content...

5.5CVSS5.7AI score0.00097EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/01/23 12:0 a.m.2 views

Apple macOS Ventura 安全漏洞

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura prior to version 13.2 that stems from a memory handling issue where an application may leak kernel memory...

5.5CVSS5.8AI score0.00167EPSS
Exploits0References4
Citrix
Citrix
added 2023/01/09 12:0 a.m.6 views

Citrix ADC: 13.1: error message for smart card access to gateway

Citrix ADC: 13.1: error message for smart card access to the gateway...

7.1AI score
Exploits0
Positive Technologies
Positive Technologies
added 2022/12/16 12:0 a.m.2 views

PT-2022-14765 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a tapjacking/overlay attack in the onCreate method of LogAccessDialogActivity.java. This could allow bypassing a permission check, leading to local escalation of privilege with...

6.5CVSS6.5AI score0.00015EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/12/16 12:0 a.m.2 views

PT-2022-14721 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the onAttach method of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a permissions bypass. This could lead to local escalation of privilege with...

7.8CVSS7.9AI score0.00012EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2022/10/24 12:0 a.m.2 views

PT-2022-26595 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: A logic issue was addressed with improved state management. This issue may cause a user to accidentally add a participant to a Shared Album by pressing the Delete key. Recommendations: For versions prio...

4.3CVSS7.5AI score0.00099EPSS
Exploits0References7
CNNVD
CNNVD
added 2022/10/19 12:0 a.m.1 views

F5 BIG-IP 资源管理错误漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A resource management error vulnerability exists in all versions of F5 BIG-IP 13.1.x. The vulnerability stems from an...

7.5CVSS7.3AI score0.0094EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/10/19 12:0 a.m.1 views

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A security vulnerability exists in F5 BIG-IP versions 17.0.x through 17.0.0.1 prior, 16.1.x through 16.1.3.2 prior, 15.1.x...

7.5CVSS7.3AI score0.00647EPSS
Exploits0References3
OSV
OSV
added 2022/10/07 9:15 p.m.1 views

UBUNTU-CVE-2022-3276

Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet and Puppet Enterprise...

8.8CVSS7.1AI score0.00723EPSS
Exploits0References5
OSV
OSV
added 2022/08/12 3:15 p.m.0 views

CVE-2022-20283

In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-233069336...

8.8CVSS6.4AI score0.00164EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/08/11 12:0 a.m.1 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android version 13, which stems from an insecure default value in WindowManager that can be exploited by an attacker to obtain sensitive information...

2.4CVSS5.1AI score0.00025EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/08/11 12:0 a.m.1 views

PT-2022-14530 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue concerns a side channel information disclosure that could allow determination of a user's account, potentially leading to local information disclosure. This requires User execution privileges...

5.5CVSS5AI score0.00018EPSS
Exploits0References2
Rows per page
Query Builder