Lucene search
+L

3670 matches found

BDU FSTEC
BDU FSTEC
•added 2022/09/05 12:00 a.m.•30 views

The vulnerability of the ActiveX control on the SCADA server of Measuresoft ScadaPro Server allows a intruder to execute arbitrary code.

The vulnerability of the ActiveX control in the SCADA server of Measuresoft ScadaPro Server is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS7.6AI score0.00323EPSS
SaveExploits0References4
CNVD
CNVD
•added 2022/08/31 12:00 a.m.•15 views

TOTOLINK A7000R Access Control Error Vulnerability

TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK that supports WiFi7 technology for home or small business network environments. The TOTOLINK A7000R suffers from an access control vulnerability that stems from improper access control in its /cgi-bin/ExportSettings.sh...

9.8CVSS7AI score0.00938EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/08/29 12:00 a.m.•19 views

TOTOLINK A7000R 安全漏洞

TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK that supports WiFi7 technology for home or small business network environments. The TOTOLINK A7000R suffers from an access control vulnerability that stems from improper access control in its /cgi-bin/ExportSettings.sh...

9.8CVSS6.8AI score0.00938EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2022/08/24 12:00 a.m.•21 views

The vulnerability of the McAfee Security Scan Plus (MSS+) antivirus software, related to deficiencies in access control, allows a perpetrator to execute a LotL attack (a type of Living off the Land attack).

The vulnerability of the McAfee Security Scan Plus MSS+ antivirus software is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to execute a LotL attack a type of Living off the Land attack...

7.9CVSS7.2AI score0.00213EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
•added 2022/08/18 7:43 p.m.•13 views

CVE-2022-21140

Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow a privileged user to potentially enable information disclosure via local access...

6.3AI score0.00211EPSS
SaveExploits0References1
OSV
OSV
•added 2022/08/17 9:15 p.m.•17 views

CVE-2022-35122

An access control issue in Ecowitt GW1100 Series Weather Stations =GW1100Bv2.1.5 allows unauthenticated attackers to access sensitive information including device and local WiFi passwords...

9.1CVSS5.8AI score0.01127EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2022/08/16 12:00 a.m.•14 views

The vulnerability of the Windows operating system’s Fax Service allows attackers to escalate their privileges.

The vulnerability of the Windows operating system’s Fax Service is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.1CVSS7.2AI score0.00608EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/08/09 12:00 a.m.•8 views

PT-2022-4091 · Microsoft · Windows Defender +1

Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to insufficient access control in Windows Defender, which is part of the Windows operating system. It allows an attacker to elevate their privileges...

7.8CVSS7.8AI score0.00872EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2022/08/09 12:00 a.m.•17 views

PT-2022-23751 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A permission control vulnerability exists in the network module. Successful exploitation of this issue may affect service availability. Recommendations: At the moment, there is no...

7.5CVSS7.5AI score0.00542EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2022/08/05 3:12 p.m.•58 views

CVE-2022-2095

Removed by vendor...

4.3CVSS5.8AI score0.01038EPSS
SaveExploits0
Code423n4
Code423n4
•added 2022/08/05 12:00 a.m.•14 views

H01: code is not same as intended function description

Lines of code Vulnerability details MIMOAutoAction.sol, 26-38 / @notice Sets a vault automation parameters @dev Can only be called by vault owner @param vaultId Vault id of the vault to be automated @param autoParams AutomatedVault struct containing all automation parameters / function...

6.8AI score
SaveExploits0
Fortinet
Fortinet
•added 2022/08/02 12:00 a.m.•66 views

Inter-VDOM information leaking

...

4.3CVSS5.5AI score0.00558EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2022/07/29 3:40 p.m.•17 views

CVE-2022-2578 SourceCodester Garage Management System createUser.php access control

A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0. This issue affects some unknown processing of the file /phpaction/createUser.php. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit...

6.3CVSS7.2AI score0.00711EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/07/26 12:00 a.m.•23 views

Honeywell Safety Manager 访问控制错误漏洞

Honeywell Safety Manager is used by Honeywell to minimize accidents, maximize production uptime, reduce compliance costs, and manage plant safety. An access control error vulnerability exists in all versions of Honeywell Safety Manager that stems from the use of the Security Builder protocol, whi...

7.5CVSS7.4AI score0.00916EPSS
SaveExploits0References6
Openbugbounty
Openbugbounty
•added 2022/07/24 4:12 p.m.•8 views

andoverandvillages.co.uk Improper Access Control vulnerability OBB-2813631

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/07/20 12:00 a.m.•16 views

The vulnerability of the Windows operating system’s Portable Device Enumerator service allows a hacker to circumvent existing security restrictions.

The vulnerability of the Windows operating system’s Portable Device Enumerator service is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...

6.8CVSS6.9AI score0.00602EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/07/19 12:00 a.m.•19 views

MiCODUS MV720 GPS 访问控制错误漏洞

The MiCODUS MV720 GPS is a GPS tracker from MiCODUS USA. An access control error vulnerability exists in the MiCODUS MV720 GPS that stems from SMS-based GPS commands that can be executed without authentication...

9.8CVSS8.5AI score0.01345EPSS
SaveExploits0References4
Circl
Circl
•added 2022/07/15 8:17 a.m.•10 views

CVE-2020-7066

creationtimestamp| type| source ---|---|--- 2022-07-15 08:17:26+00:00| seen| Telegram/tvagmoXGD-sjRG5teDO-DfPH2iB-IEEjYRnLqN5-gAxoA 2022-07-16 09:11:59+00:00| seen| https://t.me/crackcodes/838 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02...

5.3CVSS6.7AI score0.02767EPSS
SaveExploits1References2
OSV
OSV
•added 2022/07/12 2:15 p.m.•13 views

CVE-2022-34738

The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the background...

7.5CVSS5.8AI score0.00579EPSS
SaveExploits0References2
Prion
Prion
•added 2022/07/12 2:15 p.m.•30 views

Design/Logic Flaw

Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality...

3.3CVSS6.5AI score0.00275EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder