Lucene search
K

2315 matches found

OSV
OSV
added 2023/04/27 7:15 p.m.4 views

CVE-2023-2355

Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 3900...

7.8CVSS6.7AI score
Exploits0References1
NVD
NVD
added 2023/04/27 7:15 p.m.19 views

CVE-2023-2355

Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 3900...

7.8CVSS7AI score0.00152EPSS
Exploits0References1
Prion
Prion
added 2023/04/27 7:15 p.m.15 views

Privilege escalation

Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 3900...

3.5CVSS7.8AI score0.00152EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/27 6:45 p.m.12 views

CVE-2023-2355

Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 3900...

6.7CVSS7.8AI score0.00152EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/04/27 6:45 p.m.23 views

CVE-2023-2355

Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 3900...

6.7CVSS8AI score0.00152EPSS
Exploits0References1
CVE
CVE
added 2023/04/27 6:45 p.m.58 views

CVE-2023-2355

CVE-2023-2355 affects Acronis Snap Deploy on Windows prior to build 3900. The vulnerability is a DLL hijacking local privilege escalation that can grant high confidentiality/integrity/availability impact; root cause is DLL hijack in the deployment component. Mitigation: apply build 3900 or later ...

7.8CVSS6.7AI score0.00152EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/04/27 12:0 a.m.5 views

Acronis Snap Deploy 代码问题漏洞

Acronis Snap Deploy is a platform for bulk deployment of system images from Acronis Singapore. A security vulnerability exists in Acronis Snap Deploy versions prior to 3900. An attacker could exploit the vulnerability to elevate privileges...

7.8CVSS6.6AI score0.00152EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2023/04/20 10:37 p.m.514 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 A Demonstration to show the CVE-2021-41773 vul...

7.5CVSS8.2AI score0.99992EPSS
Exploits148
OSV
OSV
added 2023/04/19 8:15 a.m.2 views

CVE-2022-2507

In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage...

5.3CVSS5.8AI score0.00417EPSS
Exploits0References1
NVD
NVD
added 2023/04/19 8:15 a.m.20 views

CVE-2022-2507

In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage...

5.3CVSS5.3AI score0.00417EPSS
Exploits0References1
Prion
Prion
added 2023/04/19 8:15 a.m.15 views

Input validation

In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage...

5CVSS5.3AI score0.00417EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/04/19 12:0 a.m.3 views

Octopus Deploy 安全漏洞

Octopus Deploy is an automation tool for .NET, Java, and other application development and deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Deploy that stems from the ability to render user-supplied input to a web page...

5.3CVSS5.7AI score0.00417EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/04/19 12:0 a.m.8 views

CVE-2022-2507

In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage...

5.3AI score0.00417EPSS
Exploits0References1
CVE
CVE
added 2023/04/19 12:0 a.m.45 views

CVE-2022-2507

Technical details about CVE-2022-2507 are not publicly available in the provided documents; monitor official advisories and vendor updates for further information.

5.3CVSS5.3AI score0.00417EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/04/19 12:0 a.m.28 views

CVE-2022-2507

In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage...

5.6AI score0.00417EPSS
Exploits0References1
NVD
NVD
added 2023/04/11 3:15 a.m.18 views

CVE-2023-24527

SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities that require user identity enabling an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will...

5.3CVSS5.4AI score0.00452EPSS
Exploits0References2
OSV
OSV
added 2023/04/11 3:15 a.m.3 views

CVE-2023-24527

SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities that require user identity enabling an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will...

5.3CVSS6.1AI score0.00452EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/04/11 2:33 a.m.16 views

CVE-2023-24527 Improper Access Control in SAP NetWeaver AS Java for Deploy Service

SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities that require user identity enabling an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will...

5.3CVSS5.7AI score0.00452EPSS
Exploits0References2
CVE
CVE
added 2023/04/11 2:33 a.m.64 views

CVE-2023-24527

CVE-2023-24527 affects SAP NetWeaver AS Java for Deploy Service (v7.5). The issue is improper access control: an unauthenticated remote attacker can attach to an open interface and use an open naming/directory API to access a service. This access disclosure does not modify server settings or data...

5.3CVSS5.3AI score0.00452EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2023/04/11 12:0 a.m.6 views

SAP NetWeaver AS 访问控制错误漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides web services, but is also the basic platform for SAP software. An access control error vulnerability exists in SAP NetWeaver AS Java for Deploy Service version 7.5, which stems from not performing any access contr...

5.3CVSS5.6AI score0.00452EPSS
Exploits0References3
Rows per page
Query Builder