Lucene search
+L

13 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•6 views

CVE-2026-49170: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00298EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/10/15 5:44 p.m.•16 views

CVE-2025-59203

Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally...

5.5CVSS7.2AI score0.0045EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•2 views

CVE-2025-59203: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally...

5.5CVSS7.1AI score0.0045EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•14 views

PT-2025-42095

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in the Windows StateRepository API where sensitive information is inserted into log files. This allows an authorized attacker to disclose information locally. Recommendations ...

5.5CVSS7AI score0.0045EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•25 views

EUVD-2025-20623

Malicious code in bioql PyPI...

8.8CVSS6.3AI score0.00356EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/12 6:15 p.m.•11 views

CVE-2025-53789

Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00357EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•2 views

CVE-2025-53789: Missing Authentication for Critical Function

Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00357EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/07/10 5:18 p.m.•17 views

CVE-2025-49723

Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...

8.8CVSS7.1AI score0.00356EPSS
SaveExploits0References1
OSV
OSV
•added 2025/07/08 5:16 p.m.•20 views

CVE-2025-49723

Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...

8.8CVSS5.8AI score0.00356EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/08 5:16 p.m.•13 views

CVE-2025-49723

Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...

8.8CVSS0.00356EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/07/08 2:00 p.m.•15 views

Windows StateRepository API Server file Tampering Vulnerability

Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...

8.8CVSS6.6AI score0.00356EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/08 12:00 a.m.•2 views

CVE-2025-49723: Missing Authorization

Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...

8.8CVSS5.6AI score0.00356EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/11 12:00 a.m.•3 views

CVE-2022-21863: Undefined Security Weakness

Windows StateRepository API Server file Elevation of Privilege Vulnerability...

7CVSS5.8AI score0.00673EPSS
SaveExploits0References1
Rows per page
Query Builder