Lucene search
K

32 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-0863

Malware in sbrugna...

9.8CVSS8.1AI score0.00247EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-0862

Malware in sbrugna...

9.8CVSS9.5AI score0.00462EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2018-0865

Malware in sbrugna...

9.8CVSS9.5AI score0.00462EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-27299

Malicious code in bioql PyPI...

7.7CVSS7AI score0.00327EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-27336

Malicious code in bioql PyPI...

7.8CVSS7.7AI score0.00029EPSS
Exploits0References1
NVD
NVD
added 2022/04/14 4:15 p.m.11 views

CVE-2022-22189

An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration CSO allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects:...

7.8CVSS0.00029EPSS
Exploits0References1
OSV
OSV
added 2022/04/14 4:15 p.m.1 views

CVE-2022-22189

An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration CSO allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects:...

7.8CVSS7.1AI score
Exploits0References1
Cvelist
Cvelist
added 2022/04/14 3:50 p.m.14 views

CVE-2022-22189 Contrail Service Orchestration: An authenticated local user may have their permissions elevated via the device via management interface without authentication

An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration CSO allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects:...

7.3CVSS7.8AI score0.00029EPSS
Exploits0References1
CVE
CVE
added 2022/04/14 3:50 p.m.84 views

CVE-2022-22189

CVE-2022-22189 (Contrail Service Orchestration) : An Incorrect Ownership Assignment vulnerability affects Juniper Networks CSO 6.0.0 on on‑prem installations, prior to 6.0.0 Patch v3. A locally authenticated user can elevate permissions and take control of the local system they are authenticated ...

7.8CVSS7.3AI score0.00029EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2022/04/14 12:0 a.m.1 views

Juniper Networks Contrail Service Orchestration 安全漏洞

Juniper Networks Contrail Service Orchestration is a powerful software platform from Juniper Networks, Inc. for connecting many enterprise and multi-tenant service provider solutions. A security vulnerability exists in Juniper Networks Contrail Service Orchestration CSO versions prior to 6.0.0 th...

7.8CVSS7.4AI score0.00029EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/04/13 4:0 p.m.3 views

CVE-2022-22189

An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration CSO allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects:...

7.8CVSS7.2AI score0.00029EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2022/01/19 1:15 a.m.11 views

CVE-2022-22152

A Protection Mechanism Failure vulnerability in the REST API of Juniper Networks Contrail Service Orchestration allows one tenant on the system to view confidential configuration details of another tenant on the same system. By utilizing the REST API, one tenant is able to obtain information on...

7.7CVSS0.00327EPSS
Exploits0References1
OSV
OSV
added 2022/01/19 1:15 a.m.0 views

CVE-2022-22152

A Protection Mechanism Failure vulnerability in the REST API of Juniper Networks Contrail Service Orchestration allows one tenant on the system to view confidential configuration details of another tenant on the same system. By utilizing the REST API, one tenant is able to obtain information on...

6.5CVSS6.6AI score0.00327EPSS
Exploits0References1
CVE
CVE
added 2022/01/19 12:20 a.m.145 views

CVE-2022-22152

The CVE covers a REST API access-control failure in Juniper Networks Contrail Service Orchestration. A tenant can view confidential configuration details of other tenants (e.g., firewall configuration and access control policies) due to insufficient authorization checks, exposing sensitive inform...

7.7CVSS6.5AI score0.00327EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/01/19 12:20 a.m.14 views

CVE-2022-22152 Contrail Service Orchestration: Tenants able to see other tenants policies via REST API interface

A Protection Mechanism Failure vulnerability in the REST API of Juniper Networks Contrail Service Orchestration allows one tenant on the system to view confidential configuration details of another tenant on the same system. By utilizing the REST API, one tenant is able to obtain information on...

7.7CVSS7.6AI score0.00327EPSS
Exploits0References1
CNVD
CNVD
added 2022/01/19 12:0 a.m.21 views

Juniper Networks Contrail Service Orchestration Access Control Error Vulnerability

Juniper Networks Contrail Service Orchestration is a robust software platform from Juniper Networks USA, Inc. used to connect many enterprise and multi-tenant service provider solutions. Juniper Networks Contrail Service Orchestration suffers from an access control error vulnerability that stems...

7.7CVSS2.8AI score0.00327EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/01/17 12:0 a.m.2 views

Juniper Networks Contrail Service Orchestration 访问控制错误漏洞

Juniper Networks Contrail Service Orchestration is a robust software platform from Juniper Networks USA, Inc. used to connect many enterprise and multi-tenant service provider solutions. Juniper Networks Contrail Service Orchestration suffers from an access control error vulnerability that stems...

7.7CVSS5.7AI score0.00327EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/01/12 5:0 p.m.3 views

CVE-2022-22152

A Protection Mechanism Failure vulnerability in the REST API of Juniper Networks Contrail Service Orchestration allows one tenant on the system to view confidential configuration details of another tenant on the same system. By utilizing the REST API, one tenant is able to obtain information on...

7.7CVSS6.6AI score0.00327EPSS
Exploits0References2
CNVD
CNVD
added 2018/07/12 12:0 a.m.2 views

Juniper Networks CSO Information Disclosure Vulnerability

Juniper Contrail Service Orchestration CSO is a Juniper Networks suite of products for designing and deploying network services in a centralized cloud CPE deployment model. An information disclosure vulnerability exists in Juniper CSO versions prior to 3.3.0 that stems from the program's use of...

9.8CVSS9.1AI score0.00462EPSS
Exploits0References1
CNVD
CNVD
added 2018/07/12 12:0 a.m.1 views

Juniper Contrail Service Orchestration Unauthorized Access Vulnerability

Juniper Contrail Service Orchestration CSO is a Juniper Networks suite of products for designing and deploying network services in a centralized cloud CPE deployment model. An unauthorized access vulnerability exists in Juniper CSO versions prior to 4.0.0, which stems from the program's use of...

10CVSS9.6AI score0.00162EPSS
Exploits0References1
Rows per page
Query Builder