Lucene search
+L

15887 matches found

BDU FSTEC
BDU FSTEC
added 2024/02/14 12:00 a.m.12 views

The vulnerability of the official interface for developing container applications in Plone Docker allows a hacker to gain access to modify or delete files.

The vulnerability of the official Plone Docker image for container applications lies in the absence of a mechanism to prevent unintended modifications to resources during request processing. Exploiting this vulnerability could allow an attacker to gain access to modify or delete files using PUT a...

5.5CVSS7.2AI score0.00602EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2024/02/14 12:00 a.m.13 views

The vulnerability of the Scheduler Application component of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability allows a perpetrator to execute arbitrary code.

The vulnerability of the Scheduler Application component in the XWiki platform for creating collaborative web applications exists due to the failure to address issues related to eliminating specific elements. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

9CVSS8AI score0.75693EPSS
SaveExploits1References4Affected Software1
OpenVAS
OpenVAS
added 2024/02/14 12:00 a.m.35 views

SUSE: Security Advisory (SUSE-SU-2024:0459-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS7.2AI score0.18087EPSS
SaveExploits18References4
RedhatCVE
RedhatCVE
added 2024/02/13 6:30 p.m.55 views

CVE-2024-21404

A denial of service vulnerability exists in .NET applications with OpenSSL support when parsing X509 certificates. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service DoS attack by providing specially crafte...

7.5CVSS7AI score0.02707EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/13 3:15 a.m.9 views

CVE-2024-22131

In SAP ABA Application Basis - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75I, an attacker authenticated as a user with a remote execution authorization can use a vulnerable interface. This allows the attacker to use the interface to invoke an application function to perform actions...

7.2CVSS5.9AI score0.01079EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2024/02/12 4:48 p.m.48 views

Moderate: Red Hat Security Advisory: nss security update

An update for nss is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

4.3CVSS6.9AI score0.00714EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/02/12 12:00 a.m.20 views

PT-2024-19677

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A maliciously crafted MODEL file, when parsed in libodxdll.dll and ASMDATAX229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access...

7.8CVSS7.1AI score0.00515EPSS
SaveExploits0References17
OSV
OSV
added 2024/02/12 12:00 a.m.31 views

ALSA-2024:0790 Moderate: nss security update

Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Security Fixes: nss: vulnerable to Minerva side-channel information leak CVE-2023-6135 For more details about the security issues, including t...

4.3CVSS6.2AI score0.00714EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2024/02/12 12:00 a.m.12 views

SUSE: Security Advisory (SUSE-SU-2024:0444-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8AI score
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/02/07 8:38 a.m.44 views

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.15 Security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

8.8CVSS6.8AI score0.01884EPSS
SaveExploits0References20
RedHat Linux
RedHat Linux
added 2024/02/07 8:37 a.m.79 views

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.15 Security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

8.8CVSS6.8AI score0.01884EPSS
SaveExploits0References20
RedHat Linux
RedHat Linux
added 2024/02/07 8:37 a.m.45 views

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.15 security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

8.8CVSS6.8AI score0.01884EPSS
SaveExploits0References20
NVD
NVD
added 2024/02/07 4:15 a.m.43 views

CVE-2024-23447

An issue was discovered in the Windows Network Drive Connector when using Document Level Security to assign permissions to a file, with explicit allow write and deny read. Although the document is not accessible to the user in Network Drive it is visible in search applications to the user...

6.5CVSS5.5AI score0.00365EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/07 4:15 a.m.28 views

Code injection

An issue was discovered in the Windows Network Drive Connector when using Document Level Security to assign permissions to a file, with explicit allow write and deny read. Although the document is not accessible to the user in Network Drive it is visible in search applications to the user...

4CVSS7.2AI score0.00365EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2024/02/07 3:46 a.m.68 views

CVE-2024-23447

The CVE-2024-23447 entry relates to Elastic Network Drive Connector and the Windows Network Drive Connector, where a misconfiguration of Document Level Security (explicit allow write and deny read) allows a user to see a document in search results even though it is not accessible in the network d...

6.5CVSS6.4AI score0.00365EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/07 3:46 a.m.23 views

CVE-2024-23447 Elastic Network Drive Connector Improper Access Control

An issue was discovered in the Windows Network Drive Connector when using Document Level Security to assign permissions to a file, with explicit allow write and deny read. Although the document is not accessible to the user in Network Drive it is visible in search applications to the user...

5.3CVSS6.9AI score0.00365EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/07 3:46 a.m.36 views

CVE-2024-23447 Elastic Network Drive Connector Improper Access Control

An issue was discovered in the Windows Network Drive Connector when using Document Level Security to assign permissions to a file, with explicit allow write and deny read. Although the document is not accessible to the user in Network Drive it is visible in search applications to the user...

5.3CVSS6.7AI score0.00365EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2024/02/06 7:55 p.m.53 views

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.15 Security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8.8CVSS6.8AI score0.01884EPSS
SaveExploits0References21
CNNVD
CNNVD
added 2024/02/06 12:00 a.m.9 views

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from Core memory corruption when rolling back a version of an update with TA and OTA functionality enabled...

7.8CVSS6.9AI score0.00109EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2024/02/06 12:00 a.m.35 views

SUSE: Security Advisory (SUSE-SU-2024:0327-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS8.5AI score0.93305EPSS
SaveExploits4References4
Rows per page
Query Builder