Lucene search
+L

6020 matches found

NVD
NVD
•added 2024/05/28 12:15 a.m.•31 views

CVE-2024-29078

Incorrect permission assignment for critical resource issue exists in MosP kintai kanri V4.6.6 and earlier, which may allow a remote unauthenticated attacker with access to the product to alter the product settings...

7.5CVSS6.7AI score0.00402EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/28 12:00 a.m.•8 views

CVE-2024-29078: Incorrect Permission Assignment for Critical Resource

Incorrect permission assignment for critical resource issue exists in MosP kintai kanri V4.6.6 and earlier, which may allow a remote unauthenticated attacker with access to the product to alter the product settings...

7.5CVSS5.9AI score0.00402EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/27 11:52 p.m.•58 views

CVE-2024-29078

Incorrect permission assignment for critical resource issue exists in MosP kintai kanri V4.6.6 and earlier, which may allow a remote unauthenticated attacker with access to the product to alter the product settings...

6.7AI score0.00402EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/05/27 11:52 p.m.•18 views

CVE-2024-29078

Incorrect permission assignment for critical resource issue exists in MosP kintai kanri V4.6.6 and earlier, which may allow a remote unauthenticated attacker with access to the product to alter the product settings...

6.8AI score0.00402EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/05/27 12:00 a.m.•18 views

IdentiBot 安全漏洞

IdentiBot is an open source Discord bot at MIT University written in Node.js that is used to verify an individual's affiliation with MIT, grant them a role in the Discord server, and store information about them in a database backend. IdentiBot has a security vulnerability that stems from members...

7.5CVSS6.6AI score0.005EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/05/24 12:00 a.m.•19 views

Adobe Animate Pointer Error Information Disclosure

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS5.4AI score0.00268EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/05/24 12:00 a.m.•20 views

Adobe Animate Pointer Error Code Execution

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.00365EPSS
SaveExploits0References3Affected Software1
SUSE CVE
SUSE CVE
•added 2024/05/23 3:04 a.m.•6 views

SUSE CVE-2021-47483

In the Linux kernel, the following vulnerability has been resolved: regmap: Fix possible double-free in regcacherbtreeexit In regcacherbtreeinserttoblock, when 'present' realloc failed, the 'blk' which is supposed to assign to 'rbnode-block' will be freed, so 'rbnode-block' points a freed memory,...

7CVSS6AI score0.00229EPSS
SaveExploits0References15
RedHat Linux
RedHat Linux
•added 2024/05/22 10:03 a.m.•16 views

kernel: usb: typec: altmodes/displayport: fix pin_assignment_show

An out-of-bounds array access was found in the USB Type-C DisplayPort altmode driver. When no compatible pin assignments are found, the code performs negative array indexing, causing a use-after-free or out-of-bounds read...

7.8CVSS6.8AI score0.0015EPSS
SaveExploits0References5
The Hacker News
The Hacker News
•added 2024/05/22 5:15 a.m.•62 views

QNAP Patches New Flaws in QTS and QuTS hero Impacting NAS Appliances

Taiwanese company QNAP has rolled out fixes for a set of medium-severity flaws impacting QTS and QuTS hero, some of which could be exploited to achieve code execution on its network-attached storage NAS appliances. The issues, which impact QTS 5.1.x and QuTS hero h5.1.x, are listed below -...

8.8CVSS9.1AI score0.3752EPSS
SaveExploits3
osv_cve
osv_cve
•added 2024/05/21 4:15 p.m.•25 views

CVE-2024-21902

An incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerability in the...

8.1CVSS5.8AI score0.00353EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/21 4:15 p.m.•34 views

CVE-2024-21902

An incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerability in the...

8.1CVSS6.2AI score0.00353EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/21 4:08 p.m.•128 views

CVE-2024-21902

CVE-2024-21902 affects QNAP QTS and QuTS hero systems, stemming from an incorrect permission assignment for a critical resource. The vulnerability could allow authenticated users to read or modify the resource over a network. Public details in the provided documents confirm affected products are ...

8.1CVSS6.6AI score0.00353EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/05/21 4:08 p.m.•55 views

CVE-2024-21902 QTS, QuTS hero

An incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerability in the...

6.4CVSS6.3AI score0.00353EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/21 4:08 p.m.•26 views

CVE-2024-21902 QTS, QuTS hero

An incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerability in the...

6.4CVSS6.5AI score0.00353EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/21 2:20 p.m.•21 views

CVE-2021-47284 isdn: mISDN: netjet: Fix crash in nj_probe:

In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: netjet: Fix crash in njprobe: 'njsetup' in netjet.c might fail with -EIO and in this case 'card-irq' is initialized and is bigger than zero. A subsequent call to 'njrelease' will free the irq that has not been...

6.6AI score0.00226EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2024/05/21 2:20 p.m.•22 views

CVE-2021-47281 ALSA: seq: Fix race of snd_seq_timer_open()

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix race of sndseqtimeropen The timer instance per queue is exclusive, and sndseqtimeropen should have managed the concurrent accesses. It looks as if it's checking the already existing timer instance at the beginning,...

7.8CVSS6.8AI score0.00239EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/21 12:00 a.m.•5 views

CVE-2024-21902: Incorrect Permission Assignment for Critical Resource

An incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerability in the...

8.1CVSS5.7AI score0.00353EPSS
SaveExploits0References1
Virtuozzo
Virtuozzo
•added 2024/05/21 12:00 a.m.•120 views

Virtuozzo Hybrid Infrastructure 6.1 Update 1 (6.1.1-35)

In this release, Virtuozzo Hybrid Infrastructure enables virtual CPU and RAM overcommitment per node, as well as provides stability and performance improvements, and addresses issues found in previous releases. Vulnerability id: VSTOR-49565 Network errors occur when migrating a VM that was...

7.8AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
•added 2024/05/21 12:00 a.m.•13 views

VulnCheck KEV: CVE-2024-35700

Incorrect Privilege Assignment vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a through = 5.1.8...

9.8CVSS5.8AI score0.00487EPSS
SaveIn wildExploits0References3
Rows per page
Query Builder