Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 6:19 p.m.9 views

CVE-2021-21734

Some PON MDU devices of ZTE stored sensitive information in plaintext, and users with login authority can obtain it by inputing command. This affects: ZTE PON MDU device ZXA10 F821 V1.7.0P3T22, ZXA10 F822 V1.4.3T6, ZXA10 F819 V1.2.1T5, ZXA10 F832 V1.1.1T7, ZXA10 F839 V1.1.0T8, ZXA10 F809 V3.2.1T1...

6.5CVSS6.4AI score0.00138EPSS
Exploits0References1
NVD
NVD
added 2021/03/05 5:15 p.m.11 views

CVE-2021-21725

A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. This affects: ZXHN H196Q V9.1.0C2...

5.7CVSS0.00076EPSS
Exploits0References1
Prion
Prion
added 2021/03/05 5:15 p.m.11 views

Design/Logic Flaw

A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. This affects: ZXHN H196Q V9.1.0C2...

2.7CVSS5.4AI score0.00076EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2020/11/19 5:15 p.m.1 views

CVE-2020-28942

An issue exists in PrimeKey EJBCA before 7.4.3 when enrolling with EST while proxied through an RA over the Peers protocol. As a part of EJBCA's domain security model, the peer connector allows the restriction of client certificates for the RA, not the end user to a limited set of allowed CAs, th...

4.3CVSS5.8AI score0.00096EPSS
Exploits0References1
OSV
OSV
added 2013/10/03 9:55 p.m.4 views

CVE-2013-4327

systemd does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2 pkexec process, a related issue to CVE-2013-4288...

6.1AI score
Exploits0References7
OSV
OSV
added 2013/10/03 9:55 p.m.6 views

CVE-2013-1064

apt-xapian-index before 0.45ubuntu2.1, 0.44ubuntu7.1, and 0.44ubuntu5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2...

6.1AI score
Exploits0References5
NVD
NVD
added 2013/10/03 9:55 p.m.25 views

CVE-2013-1065

backend.py in Jockey before 0.9.7-0ubuntu7.11 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2 pkexec process, a related...

4.6CVSS6.1AI score0.00058EPSS
Exploits0References3
Rows per page
Query Builder