Lucene search
+L

5974 matches found

RedhatCVE
RedhatCVE
•added 2025/03/19 6:18 p.m.•20 views

CVE-2024-49561

Dell SmartFabric OS10 Software, versions 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS6.7AI score0.00167EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/03/19 12:24 a.m.•40 views

CVE-2025-30143

Rule 3000216 before version 2 in Akamai App & API Protector with Akamai ASE before 2024-12-10 does not properly consider JavaScript variable assignment to built-in functions and properties...

5.4CVSS7AI score0.00238EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/03/19 12:00 a.m.•20 views

Dell SmartFabric OS10 Licensing Issues Vulnerability

Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell Dell. Dell SmartFabric OS10 suffers from an authorization issue vulnerability that stems from improper privilege assignment, which can be exploited by an attacker to cause elevation of privilege...

7.8CVSS6.3AI score0.00167EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/17 6:15 p.m.•22 views

CVE-2024-49561

Dell SmartFabric OS10 Software, versions 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS0.00167EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2025/03/17 6:15 p.m.•16 views

CVE-2024-49561

Dell SmartFabric OS10 Software, versions 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS5.8AI score0.00167EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/03/17 5:35 p.m.•12 views

CVE-2024-49561

Dell SmartFabric OS10 Software, versions 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS7.5AI score0.00167EPSS
SaveExploits0References4
CVE
CVE
•added 2025/03/17 5:35 p.m.•74 views

CVE-2024-49561

Dell SmartFabric OS10 vulnerabilities affect versions 10.5.4.x–10.5.6.x and 10.6.0.x. The issue is an Incorrect Privilege Assignment that lets a low-privileged, locally authenticated attacker escalate privileges. Impact is described as HIGH for confidentiality, integrity, and availability. Root c...

7.8CVSS6.7AI score0.00167EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2025/03/17 5:35 p.m.•25 views

CVE-2024-49561

Dell SmartFabric OS10 Software, versions 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS0.00167EPSS
SaveExploits0References4
NVD
NVD
•added 2025/03/17 4:15 p.m.•32 views

CVE-2025-30143

Rule 3000216 before version 2 in Akamai App & API Protector with Akamai ASE before 2024-12-10 does not properly consider JavaScript variable assignment to built-in functions and properties...

5.4CVSS0.00238EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/03/17 12:00 a.m.•39 views

CVE-2025-30143

Rule 3000216 before version 2 in Akamai App & API Protector with Akamai ASE before 2024-12-10 does not properly consider JavaScript variable assignment to built-in functions and properties...

5.4CVSS0.00238EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/03/17 12:00 a.m.•9 views

PT-2025-11510

Name of the Vulnerable Software and Affected Versions Akamai App & API Protector with Akamai ASE versions before 2024-12-10 Description The issue arises from improper consideration of JavaScript variable assignment to built-in functions and properties in Rule 3000216. This can potentially lead to...

5.4CVSS0.00238EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/03/17 12:00 a.m.•28 views

CVE-2025-30143

Rule 3000216 before version 2 in Akamai App & API Protector with Akamai ASE before 2024-12-10 does not properly consider JavaScript variable assignment to built-in functions and properties...

5.4CVSS5.5AI score0.00238EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/17 12:00 a.m.•7 views

CVE-2024-49561: Incorrect Privilege Assignment

Dell SmartFabric OS10 Software, versions 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS7.4AI score0.00167EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/17 12:00 a.m.•13 views

Dell SmartFabric OS10 安全漏洞

Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell Dell. Dell SmartFabric OS10 suffers from an authorization issue vulnerability that stems from improper privilege assignment, which can be exploited by an attacker to cause elevation of privilege...

7.8CVSS6.7AI score0.00167EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/17 12:00 a.m.•5 views

CVE-2025-30143: Improper Neutralization of Input During Web Page Generation

Rule 3000216 before version 2 in Akamai App & API Protector with Akamai ASE before 2024-12-10 does not properly consider JavaScript variable assignment to built-in functions and properties...

5.4CVSS5.7AI score0.00238EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/03/17 12:00 a.m.•19 views

Fluent Bit Heap Buffer Overflow DoS

The vulnerability of the Fluent Bit logging and processing tool is related to the assignment of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially crafted HTTP request...

7.8CVSS7.2AI score0.00944EPSS
SaveExploits2References6Affected Software1
RedhatCVE
RedhatCVE
•added 2025/03/15 2:16 a.m.•24 views

CVE-2025-25620

Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...

5.4CVSS6AI score0.00572EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2025/03/14 3:32 p.m.•35 views

Camaleon CMS Vulnerable to Privilege Escalation through a Mass Assignment

A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishes to change his password, the 'updatedajax' method of the UsersController is called. The vulnerability stems from the use of the dangerous permit! method, which allows all parameters to pass through without a...

9.4CVSS6.7AI score0.00628EPSS
SaveExploits17References7Affected Software1
osv_ghsa
osv_ghsa
•added 2025/03/14 3:32 p.m.•25 views

GHSA-RP28-MVQ3-WF8J Camaleon CMS Vulnerable to Privilege Escalation through a Mass Assignment

A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishes to change his password, the 'updatedajax' method of the UsersController is called. The vulnerability stems from the use of the dangerous permit! method, which allows all parameters to pass through without a...

9.4CVSS6.7AI score0.00628EPSS
SaveExploits17References7
osv_cve
osv_cve
•added 2025/03/14 1:15 p.m.•15 views

CVE-2025-2304

A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishes to change his password, the 'updatedajax' method of the UsersController is called. The vulnerability stems from the use of the dangerous permit! method, which allows all parameters to pass through without a...

9.4CVSS5.8AI score0.00628EPSS
SaveExploits17References2
Rows per page
Query Builder