Lucene search
+L

458 matches found

OSV
OSV
•added 2022/05/24 7:02 p.m.•38 views

GHSA-X2Q9-R8GM-F657 Drupal Core Access bypass vulnerability

Access bypass vulnerability in of Drupal Core Workspaces allows an attacker to access data without correct permissions. The Workspaces module doesn't sufficiently check access permissions when switching workspaces, leading to an access bypass vulnerability. An attacker might be able to see conten...

5.3CVSS5.8AI score0.00928EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2022/05/24 7:02 p.m.•23 views

Drupal Core Access bypass vulnerability

Access bypass vulnerability in of Drupal Core Workspaces allows an attacker to access data without correct permissions. The Workspaces module doesn't sufficiently check access permissions when switching workspaces, leading to an access bypass vulnerability. An attacker might be able to see conten...

5.3CVSS5.8AI score0.00928EPSS
SaveExploits0References5Affected Software2
RedhatCVE
RedhatCVE
•added 2022/05/21 12:24 a.m.•73 views

CVE-2020-13667

Access bypass vulnerability in of Drupal Core Workspaces allows an attacker to access data without correct permissions. The Workspaces module doesn't sufficiently check access permissions when switching workspaces, leading to an access bypass vulnerability. An attacker might be able to see conten...

7.4CVSS5.8AI score0.00928EPSS
SaveExploits0References1
OSV
OSV
•added 2022/05/17 3:53 a.m.•18 views

GHSA-X3P3-929J-PQ66 Improper Neutralization of Input During Web Page Generation in Jenkins

Cross-site scripting XSS vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to workspaces and archived artifacts...

5.4CVSS6.6AI score0.01251EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2022/05/17 3:53 a.m.•43 views

Improper Neutralization of Input During Web Page Generation in Jenkins

Cross-site scripting XSS vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to workspaces and archived artifacts...

5.4CVSS5.6AI score0.01251EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
•added 2022/04/21 12:00 a.m.•24 views

Mattermost Access Control Error Vulnerability (CNVD-2022-31756)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. An Access Control Error vulnerability exists in Mattermost 6.4.x and earlier versions, which stems from an inability to properly invalidate a pending email invitation when executed from the system...

5.8CVSS6.2AI score0.00843EPSS
SaveExploits1References1
ThreatPost
ThreatPost
•added 2021/12/08 6:54 p.m.•30 views

AWS, Other Cloud Services Affected by Flaws in Eltima SDK

Researchers have found a number of high-security vulnerabilities in a library created by network virtualization firm Eltima, that leave about a dozen cloud services used by millions of users worldwide open to privilege-escalation attacks. That includes Amazon WorkSpaces, Accops and NoMachine, amo...

8.9AI score
SaveExploits0References13
CNVD
CNVD
•added 2021/12/08 12:00 a.m.•66 views

Amazon WorkSpaces Buffer Overflow Vulnerability

Amazon WorkSpaces is a fully managed persistent desktop virtualization service from Amazon that lets your users access the data, applications, and resources they need from any supported device, anywhere, anytime. Amazon WorkSpaces is vulnerable to a buffer overflow vulnerability that could be...

8.8CVSS6.3AI score0.00479EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/12/08 12:00 a.m.•57 views

Amazon WorkSpaces integer overflow vulnerability

Amazon Workspaces is a fully managed persistent desktop virtualization service from Amazon that lets your users access the data, applications, and resources they need from any supported device, anytime, anywhere. Amazon Workspaces is vulnerable to an integer overflow vulnerability that could be...

8.8CVSS6.5AI score0.00545EPSS
SaveExploits1References1
OSV
OSV
•added 2021/12/07 8:15 p.m.•14 views

CVE-2021-43638

Amazon Amazon WorkSpaces agent is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Pack...

8.8CVSS7.6AI score0.00545EPSS
SaveExploits1References1
OSV
OSV
•added 2021/12/07 8:15 p.m.•17 views

CVE-2021-43637

Amazon WorkSpaces agent is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Packet...

8.8CVSS6.1AI score0.00479EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/12/07 8:15 p.m.•10 views

CVE-2021-43637

Amazon WorkSpaces agent is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Packet...

8.8CVSS7.7AI score0.00479EPSS
SaveExploits1References2
NVD
NVD
•added 2021/12/07 8:15 p.m.•30 views

CVE-2021-43638

Amazon Amazon WorkSpaces agent is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Pack...

8.8CVSS0.00545EPSS
SaveExploits1References1
NVD
NVD
•added 2021/12/07 8:15 p.m.•40 views

CVE-2021-43637

Amazon WorkSpaces agent is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Packet...

8.8CVSS0.00479EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/12/07 8:15 p.m.•12 views

CVE-2021-43638

Amazon Amazon WorkSpaces agent is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Pack...

8.8CVSS7.7AI score0.00545EPSS
SaveExploits1References2
Prion
Prion
•added 2021/12/07 8:15 p.m.•25 views

Integer overflow

Amazon Amazon WorkSpaces agent is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Pack...

7.2CVSS8.7AI score0.00545EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2021/12/07 8:15 p.m.•25 views

Buffer overflow

Amazon WorkSpaces agent is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Packet...

7.2CVSS8.7AI score0.00479EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/12/07 8:00 p.m.•67 views

CVE-2021-43638

The CVE-2021-43638 entry affects the Amazon WorkSpaces agent. The issue is an Integer Overflow in the IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537, allowing local attackers to execute arbitrary kernel‑mode code or cause a denial of service (memory corruption and OS cras...

8.8CVSS8.8AI score0.00545EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/12/07 8:00 p.m.•37 views

CVE-2021-43638

Amazon Amazon WorkSpaces agent is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Pack...

9AI score0.00545EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/12/07 7:59 p.m.•38 views

CVE-2021-43637

Amazon WorkSpaces agent is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Packet...

9AI score0.00479EPSS
SaveExploits1References1
Rows per page
Query Builder