Lucene search
K

3969 matches found

Prion
Prion
added 2022/02/02 1:15 p.m.18 views

Design/Logic Flaw

In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration...

9CVSS8.5AI score0.0099EPSS
Exploits0References1Affected Software65
Cvelist
Cvelist
added 2022/02/02 12:26 p.m.23 views

CVE-2022-22509 PHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment

In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration...

8.8CVSS8.7AI score0.0099EPSS
Exploits0References1
CVE
CVE
added 2022/02/02 12:26 p.m.64 views

CVE-2022-22509

CVE-2022-22509 affects Phoenix Contact FL SWITCH Series 2xxx (version 3.00). The issue is an incorrect privilege assignment that lets a low-privilege user gain full access to the device configuration, exposing confidentiality, integrity, and availability (all rated high) per CVSS metrics. No expl...

9CVSS8.6AI score0.0099EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/01/24 9:15 p.m.4 views

CVE-2022-0177

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

7AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2022/01/21 6:6 p.m.31 views

Microweber Incorrect Permission Assignment for Critical Resource vulnerability

In Microweber prior to 1.2.11, a non-admin user is able to access other users' sensitive information...

6.5CVSS6.2AI score0.01291EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/01/21 6:6 p.m.20 views

GHSA-VCGF-VMPC-PH79 Microweber Incorrect Permission Assignment for Critical Resource vulnerability

In Microweber prior to 1.2.11, a non-admin user is able to access other users' sensitive information...

6.5CVSS6.3AI score0.01291EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2022/01/21 11:15 a.m.4 views

CVE-2022-0329

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

5.4AI score
Exploits0References1
NVD
NVD
added 2022/01/20 10:15 a.m.24 views

CVE-2022-0277

Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11...

6.5CVSS0.01291EPSS
Exploits1References2
CVE
CVE
added 2022/01/20 12:0 a.m.81 views

CVE-2022-0277

CVE-2022-0277 affects microweber/microweber prior to version 1.2.11, due to an incorrect permission assignment for a critical resource . This allows a non-admin user to access other users’ sensitive information (improper access control). The issue is documented across multiple sources, which cons...

6.5CVSS6.3AI score0.01291EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/01/20 12:0 a.m.24 views

CVE-2022-0277 Incorrect Permission Assignment for Critical Resource in microweber/microweber

Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11...

6.5CVSS6.5AI score0.01291EPSS
Exploits1References4
Cvelist
Cvelist
added 2022/01/20 12:0 a.m.25 views

CVE-2022-0277 Incorrect Permission Assignment for Critical Resource in microweber/microweber

Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11...

6.5CVSS6.6AI score0.01291EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2022/01/20 12:0 a.m.2 views

The vulnerability of the systemd service initialization and management subsystem, related to improper privilege assignment, allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the systemd service initialization and management subsystem is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS5.8AI score0.00912EPSS
Exploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.5 views

The vulnerability of the wireshark traffic analysis program, related to pointer assignment errors, allows a hacker to trigger a service failure.

The vulnerability of the wireshark traffic analysis program is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

6.5CVSS6.8AI score0.01457EPSS
Exploits1References9Affected Software4
Prion
Prion
added 2022/01/14 5:15 p.m.4 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

7AI score
Exploits0
Prion
Prion
added 2022/01/14 5:15 p.m.6 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

7AI score
Exploits0
Prion
Prion
added 2022/01/14 5:15 p.m.6 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

7AI score
Exploits0
Prion
Prion
added 2022/01/14 5:15 p.m.9 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

7AI score
Exploits0
Prion
Prion
added 2022/01/14 5:15 p.m.6 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

7AI score
Exploits0
Prion
Prion
added 2022/01/14 5:15 p.m.10 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

7AI score
Exploits0
Prion
Prion
added 2022/01/14 5:15 p.m.11 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

7AI score
Exploits0
Rows per page
Query Builder