Lucene search
+L

1662 matches found

Vulnrichment
Vulnrichment
•added 2024/11/04 10:25 p.m.•17 views

CVE-2024-51734 User data deletion by anoynmous users in Zope

Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data maintained by an AccessControl.userfolder.UserFolder which may prevent any privileged access. This problem has been fixed in version 7.2. Users are advised to...

8.7CVSS6.3AI score0.00434EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/11/04 10:25 p.m.•16 views

CVE-2024-51734 User data deletion by anoynmous users in Zope

Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data maintained by an AccessControl.userfolder.UserFolder which may prevent any privileged access. This problem has been fixed in version 7.2. Users are advised to...

8.7CVSS6.8AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2024/11/04 10:25 p.m.•56 views

CVE-2024-51734 User data deletion by anoynmous users in Zope

Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delete the user data maintained by an AccessControl.userfolder.UserFolder which may prevent any privileged access. This problem has been fixed in version 7.2. Users are advised to...

8.7CVSS0.00434EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/10/30 12:00 a.m.•27 views

Enterprise Learning Management component

The vulnerability of the Enterprise Learning Management component in the Oracle PeopleSoft Enterprise business application suite is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain access to data modification, addition, and...

5.5CVSS7.6AI score0.00316EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2024/10/29 12:50 p.m.•148 views

CVE-2024-8309

Technical details for CVE-2024-8309 are not provided in the supplied documents. Public information appears limited to high‑level description. Monitor for updates and refer to primary sources for affected versions and fixes.

9.8CVSS6.1AI score0.13738EPSS
SaveExploits2References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/28 12:00 a.m.•26 views

Cisco Firepower Threat Defense Command-line Interface Privilege Escalation

The vulnerability of the command-line interface of Cisco Firepower Threat Defense FTD microprogramming systems is related to the use of strictly encrypted account data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data, or cause servic...

9.3CVSS6.5AI score0.00214EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/24 12:00 a.m.•22 views

Connector/ODBC driver for MySQL

The vulnerability of the Connector/ODBC driver for MySQL Connectors in the Oracle MySQL database management system is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to gain read, modify, or delet...

6.5CVSS7.6AI score0.0057EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/24 12:00 a.m.•21 views

Splunk Secure Gateway Access Control Data Deletion

The vulnerability of the mobile device registration and mobile application deployment mechanism of Splunk Secure Gateway, a platform for operational analytics in Splunk Enterprise, is related to deficiencies in access control to the KV Store Key Value Store. Exploiting this vulnerability could...

4.3CVSS5.4AI score0.00341EPSS
SaveExploits0References3Affected Software2
CNVD
CNVD
•added 2024/10/23 12:00 a.m.•17 views

Unspecified Vulnerability in Oracle MySQL (CNVD-2025-18064)

Oracle MySQL is an open source relational database management system from Oracle Corporation.MySQL Connectors is one of the drivers for connecting applications that use MySQL. A security vulnerability exists in MySQL Connectors for Oracle MySQL, which can be exploited by an attacker to update,...

6.5CVSS6.2AI score0.0057EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/10/23 12:00 a.m.•26 views

Auctiones Component Oracle Sourcing Supply Management Unauthorized Access

The vulnerability of the Auctions component of the Oracle Sourcing supply management platform, part of the Oracle E-Business Suite, is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

8.5CVSS7.6AI score0.00446EPSS
SaveExploits0References4Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/21 12:00 a.m.•5 views

CVE-2024-47912: Missing Authentication for Critical Function

A vulnerability in the AWV Audio, Web, and Video Conferencing component of Mitel MiCollab through 9.8 SP1 FP2 9.8.1.201 could allow an unauthenticated attacker to perform unauthorized data-access attacks due to missing authentication mechanisms. A successful exploit could allow an attacker to...

8.2CVSS7.5AI score0.00377EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/21 12:00 a.m.•18 views

Mitel MiCollab 访问控制错误漏洞

Mitel MiCollab is a mobile application that provides voice, video, messaging, audio conferencing, and team collaboration for employees from Mitel Canada. A security vulnerability exists in Mitel MiCollab version 9.8 SP1 FP2 9.8.1.201 and prior versions, which stems from a missing authentication...

8.2CVSS6.8AI score0.00377EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/10/21 12:00 a.m.•25 views

PeopleSoft Enterprise PeopleTools Query Component Data Modification

The vulnerability of the Query component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to gain access to perform dat...

8.5CVSS7.6AI score0.00522EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/21 12:00 a.m.•19 views

Site Hierarchy Flows Oracle E-Business Suite Data Access Modification Deletion

The vulnerability of the Site Hierarchy Flows component of the Oracle Site Hub data storage and management system, a part of the Oracle E-Business Suite automation system for enterprise activities, is related to authentication errors. Exploiting this vulnerability could allow an attacker to gain...

8.5CVSS7.5AI score0.00445EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/10/18 12:00 a.m.•16 views

Oracle BI Publisher Layout Templates Data Access

The vulnerability of the Layout Templates component in the Oracle BI Publisher reporting software lies in insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain read access, modify data, or even delete data...

8CVSS7.6AI score0.00438EPSS
SaveExploits0References3Affected Software1
Malwarebytes
Malwarebytes
•added 2024/10/17 11:45 a.m.•19 views

23andMe will retain your genetic information, even if you delete the account

Deleting your personal data from 23andMe is proving to be hard. There are good reasons for people wanting to delete their data from 23andMe: The DNA testing platform has a lot of problems, so let’s start with a recap. A little over a year ago, cybercriminals put up information belonging to as man...

6.7AI score
SaveExploits0
CNNVD
CNNVD
•added 2024/10/15 12:00 a.m.•20 views

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle MES for Process Manufacturing...

8.1CVSS8AI score0.00432EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/10/15 12:00 a.m.•10 views

Oracle Java SE 安全漏洞

Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. A security vulnerability exists in Oracle Java SE that could be exploited by an attacker to cause unauthorized update,...

3.7CVSS6.2AI score0.0081EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/10/15 12:00 a.m.•19 views

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle E-Business Suite...

8.1CVSS8AI score0.00446EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/10/15 12:00 a.m.•15 views

Oracle PeopleSoft Products 安全漏洞

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle Corporation USA. The product provides human capital management, financial management, vendor relationship management, and other capabilities. A security vulnerability exists in Oracle PeopleSoft's PeopleSoft...

5.4CVSS8AI score0.00316EPSS
SaveExploits0References2
Rows per page
Query Builder