Lucene search
+L

8783 matches found

NVD
NVD
added 2024/12/10 7:15 p.m.22 views

CVE-2024-8540

Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application components...

8.8CVSS0.00252EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/10 6:52 p.m.26 views

CVE-2024-8540

Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application components...

8.8CVSS0.00252EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/10 6:52 p.m.11 views

CVE-2024-8540

Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application components...

8.8CVSS6.4AI score0.00252EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/10 6:52 p.m.75 views

CVE-2024-8540

CVE-2024-8540 affects Ivanti Sentry. Insecure permissions in Ivanti Sentry before versions 9.20.2 and before 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application components. Patches are available: Sentry 9.20.2, 10.0.2, and 10.1.0. This entry is supported by multi...

8.8CVSS8.3AI score0.00252EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/12/10 12:0 a.m.5 views

Ivanti Sentry 安全漏洞

Ivanti Sentry is an in-line gateway from Ivanti USA, Inc. It is used to manage, encrypt and protect traffic between mobile devices and back-end enterprise systems. A security vulnerability exists in Ivanti Sentry that stems from insecure privilege management. An attacker could exploit the...

8.8CVSS8.6AI score0.00252EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/10 12:0 a.m.20 views

PT-2024-39081 · Ivanti · Ivanti Sentry

Name of the Vulnerable Software and Affected Versions: Ivanti Sentry versions prior to 9.20.2 Ivanti Sentry versions prior to 10.0.2 Ivanti Sentry versions prior to 10.1.0 Description: The issue allows a local authenticated attacker to modify sensitive application components due to insecure...

8.8CVSS6.7AI score0.00252EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/12/10 12:0 a.m.7 views

PT-2024-33656 · Siemens · Comos

Name of the Vulnerable Software and Affected Versions: COMOS V10.3 versions prior to V10.3.3.5.8 COMOS V10.4.0 versions prior to V10.4.4.2 COMOS V10.4.1 versions prior to V10.4.4.2 COMOS V10.4.2 versions prior to V10.4.4.2 COMOS V10.4.3 versions prior to V10.4.3.0.47 COMOS V10.4.4 versions prior ...

5.7CVSS6.8AI score0.00186EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/09 8:24 a.m.4 views

Malicious code in @neo-ds/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb7303825f9830a20957d406c7a1b9193816b17c907592e4fa1e8a6fa48c61e3 The OpenSSF Package Analysis project identified '@neo-ds/components' @ 3.3.7 npm as malicious. It is considered malicious because: - The package...

6.9AI score
SaveExploits0
OSV
OSV
added 2024/12/09 8:24 a.m.8 views

MAL-2024-11251 Malicious code in @neo-ds/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb7303825f9830a20957d406c7a1b9193816b17c907592e4fa1e8a6fa48c61e3 The OpenSSF Package Analysis project identified '@neo-ds/components' @ 3.3.7 npm as malicious. It is considered malicious because: - The package...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/09 6:32 a.m.2 views

Malicious code in wordpress-components-slotfill (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/12/09 6:32 a.m.7 views

MAL-2024-11501 Malicious code in wordpress-components-slotfill (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/09 2:50 a.m.6 views

Malicious code in mona-speedy-components (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/12/09 2:50 a.m.7 views

MAL-2024-11402 Malicious code in mona-speedy-components (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSV
OSV
added 2024/12/08 9:59 p.m.5 views

MAL-2024-11277 Malicious code in @platform-ui-kit/components-library-react (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSV
OSV
added 2024/12/08 9:58 p.m.4 views

MAL-2024-11263 Malicious code in @conundra/components-frontend (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/08 9:58 p.m.3 views

Malicious code in @conundra/components-frontend (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/12/06 12:0 a.m.8 views

Tenable Security Center < 6.5.0 Multiple Vulnerabilities (TNS-2024-19)

According to its self-reported version, the Tenable Security Center running on the remote host is prior to 6.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-19 advisory. - Security Center leverages third-party software to help provide underlying...

9.1CVSS7.2AI score0.66582EPSS
SaveExploits5References10
BDU FSTEC
BDU FSTEC
added 2024/12/05 12:0 a.m.9 views

The vulnerability of DRM/MSM components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of DRM/SMM components in the Linux operating system is related to the lack of memory release after the effective lifespan of these components. Exploiting this vulnerability can allow a hacker to cause a service failure...

5.5CVSS5.9AI score0.00205EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/12/05 12:0 a.m.7 views

Vulnerability of TCP components of Linux operating system’s kernel, allowing attackers to cause service failures

The vulnerability of TCP components in Linux operating systems is related to the operation of data out of the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.5CVSS6.8AI score0.00863EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/12/04 12:0 a.m.11 views

Vulnerability of components of Linux operating systems with PowerPC/32-core processors, allowing attackers to cause system failures

The vulnerability of the powerpc/32 kernel components of the Linux operating system is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00224EPSS
SaveExploits0References7Affected Software3
Rows per page
Query Builder