Lucene search
+L

215 matches found

CNNVD
CNNVD
added 2022/11/08 12:0 a.m.9 views

Microsoft Windows Hyper-V 安全漏洞

Microsoft Windows Hyper-V is an application from Microsoft USA. A system hypervisor virtualization technology that enables desktop virtualization. A security vulnerability exists in Microsoft Windows Hyper-V. The following products and versions are affected:Windows Server 2016,Windows Server 2016...

6.5CVSS7.8AI score0.00622EPSS
SaveExploits0References5
NVD
NVD
added 2022/08/26 4:15 p.m.32 views

CVE-2021-20260

A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with viewhosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

7.8CVSS0.00202EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/08/26 4:15 p.m.4 views

CVE-2021-20260

A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with viewhosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

7.8CVSS7.1AI score0.00202EPSS
SaveExploits0References3
OSV
OSV
added 2022/08/26 4:15 p.m.8 views

CVE-2021-20260

A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with viewhosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

7.8CVSS5.8AI score0.00202EPSS
SaveExploits0References2
Prion
Prion
added 2022/08/26 4:15 p.m.22 views

Design/Logic Flaw

A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with viewhosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

4.3CVSS7.4AI score0.00202EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/08/26 3:25 p.m.34 views

CVE-2021-20260

A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with viewhosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

7.6AI score0.00202EPSS
SaveExploits0References2
CVE
CVE
added 2022/08/26 3:25 p.m.1565 views

CVE-2021-20260

CVE-2021-20260 affects the Foreman project, specifically the Datacenter plugin, where the API exposes the password to an authenticated local attacker with the view_hosts permission. This yields potential impacts to confidentiality, integrity, and availability. The NVD entry rates it as high (CVSS...

7.8CVSS7.4AI score0.00202EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/26 12:0 a.m.8 views

PT-2022-9174 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman affected versions not specified Description: A flaw was found in the Foreman project, specifically in the Datacenter plugin, which exposes the password through the API to an authenticated local attacker with view hosts permission. Thi...

7.8CVSS7.3AI score0.00202EPSS
SaveExploits0References5
NVD
NVD
added 2022/08/18 8:15 p.m.15 views

CVE-2022-30296

Insufficiently protected credentials in the IntelR Datacenter Group Event iOS application, all versions, may allow an unauthenticated user to potentially enable information disclosure via network access...

7.5CVSS0.00664EPSS
SaveExploits0References1
NVD
NVD
added 2022/08/18 8:15 p.m.12 views

CVE-2022-25841

Uncontrolled search path elements in the IntelR Datacenter Group Event Android application, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS0.00208EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/18 8:15 p.m.31 views

Design/Logic Flaw

Insufficiently protected credentials in the IntelR Datacenter Group Event iOS application, all versions, may allow an unauthenticated user to potentially enable information disclosure via network access...

5CVSS7AI score0.00664EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/18 8:15 p.m.18 views

Design/Logic Flaw

Uncontrolled search path elements in the IntelR Datacenter Group Event Android application, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

4.3CVSS7.6AI score0.00208EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/08/18 7:59 p.m.41 views

CVE-2022-30296

Insufficiently protected credentials in the IntelR Datacenter Group Event iOS application, all versions, may allow an unauthenticated user to potentially enable information disclosure via network access...

7.2AI score0.00664EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/08/18 7:59 p.m.12 views

CVE-2022-30296

Insufficiently protected credentials in the IntelR Datacenter Group Event iOS application, all versions, may allow an unauthenticated user to potentially enable information disclosure via network access...

7.1AI score0.00664EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/18 7:59 p.m.87 views

CVE-2022-30296

The CVE-2022-30296 issue affects the Intel Datacenter Group Event iOS application (all versions) and is caused by insufficiently protected credentials, enabling potential information disclosure over the network by an unauthenticated user. The vulnerability is rated as CVSS v3.1 base score 7.5 (HI...

7.5CVSS7AI score0.00664EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/08/18 7:56 p.m.7 views

CVE-2022-25841

Uncontrolled search path elements in the IntelR Datacenter Group Event Android application, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

7AI score0.00208EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/18 7:56 p.m.62 views

CVE-2022-25841

The CVE-2022-25841 issue affects Intel’s Datacenter Group Event Android application (all versions). The root cause is uncontrolled search path elements in the app, which could enable an authenticated user to escalate privileges via local access. Multiple feeds corroborate this vulnerability acros...

7.8CVSS7.6AI score0.00208EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/18 7:56 p.m.34 views

CVE-2022-25841

Uncontrolled search path elements in the IntelR Datacenter Group Event Android application, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

7.9AI score0.00208EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/08/18 12:0 a.m.9 views

Intel Datacenter Group Event 代码问题漏洞

Intel Datacenter Group Event is a data center group event consulting software from Intel Corporation USA. A security vulnerability exists in all versions of the Intel Datacenter Group Event Android application. An attacker exploited the vulnerability to escalate privileges...

7.8CVSS7.4AI score0.00208EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/08/18 12:0 a.m.12 views

Intel Datacenter Group Event 安全漏洞

Intel Datacenter Group Event is a data center group event consulting software from Intel Corporation USA. A security vulnerability exists in the Intel Datacenter Group Event iOS application. An attacker could exploit the vulnerability to obtain sensitive information...

7.5CVSS7.3AI score0.00664EPSS
SaveExploits0References2
Rows per page
Query Builder