Lucene search
K

75 matches found

Positive Technologies
Positive Technologies
added 2026/04/02 12:0 a.m.2 views

PT-2026-29931

Harbor: LDAP password and OIDC secret are not redacted in the audit log in github.com/goharbor/harbor...

5.9AI score
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 8:34 a.m.5 views

CVE-2024-34082

Grav is a file-based Web platform. Prior to version 1.7.46, a low privilege user account with page edit privilege can read any server files using Twig Syntax. This includes Grav user account files - /grav/user/accounts/.yaml. This file stores hashed user password, 2FA secret, and the password res...

9.9CVSS6.9AI score0.00276EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/07 12:19 a.m.9 views

CVE-2025-27919

An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can manipulate remote AnyDesk settings and create a password for the Full Access profile without needing confirmation from the counterparty. Consequently, the attacker can later...

8.2CVSS7.1AI score0.00063EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/06 6:32 p.m.2 views

EUVD-2025-38149

An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can manipulate remote AnyDesk settings and create a password for the Full Access profile without needing confirmation from the counterparty. Consequently, the attacker can later...

6.5AI score0.00063EPSS
Exploits1References3
NVD
NVD
added 2025/11/06 6:15 p.m.2 views

CVE-2025-27919

An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can manipulate remote AnyDesk settings and create a password for the Full Access profile without needing confirmation from the counterparty. Consequently, the attacker can later...

8.2CVSS0.00063EPSS
Exploits1References2
OSV
OSV
added 2025/11/06 6:15 p.m.1 views

CVE-2025-27919

An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can manipulate remote AnyDesk settings and create a password for the Full Access profile without needing confirmation from the counterparty. Consequently, the attacker can later...

8.2CVSS5.8AI score
Exploits0References2
Cvelist
Cvelist
added 2025/11/06 12:0 a.m.4 views

CVE-2025-27919

An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can manipulate remote AnyDesk settings and create a password for the Full Access profile without needing confirmation from the counterparty. Consequently, the attacker can later...

0.00063EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.3 views

AnyDesk 安全漏洞

AnyDesk is a remote desktop connection software from the German company AnyDesk. A security vulnerability exists in AnyDesk 9.0.4 and earlier versions that originates from a remote connection user with Control My Device privileges can manipulate remote AnyDesk settings and create a password for a...

8.2CVSS6.8AI score0.00063EPSS
Exploits1References3
CVE
CVE
added 2025/11/06 12:0 a.m.6 views

CVE-2025-27919

CVE-2025-27919 affects AnyDesk up to version 9.0.4. A remote user with the 'Control my device' permission can modify remote AnyDesk settings and create a password for the Full Access profile without counterparty confirmation, enabling later connections without confirmation. Impact per sources: co...

8.2CVSS6.7AI score0.00063EPSS
Exploits1References2Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-0480

Malware in sbrugna...

4.6CVSS6.4AI score0.00066EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2013-4848

Malware in sbrugna...

4.3CVSS6.1AI score0.08274EPSS
Exploits5References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2011-4253

Malware in sbrugna...

5CVSS6.4AI score0.00331EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2016-7987

Malware in sbrugna...

6.5CVSS6.7AI score0.00098EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2012-0275

Malware in sbrugna...

5CVSS6.4AI score0.00175EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2012-1850

Malware in sbrugna...

7.5CVSS6.4AI score0.00624EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-6773

Malware in sbrugna...

7.5CVSS7.4AI score0.01728EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-4040

Malware in sbrugna...

7.5CVSS6.3AI score0.01571EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-6411

Malware in sbrugna...

5.5CVSS6.4AI score0.00269EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-30294

Malware in sbrugna...

9.8CVSS9.2AI score0.00937EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-8073

Malware in sbrugna...

9.8CVSS9.2AI score0.0039EPSS
Exploits0References3
Rows per page
Query Builder