Lucene search
+L

26 matches found

RedhatCVE
RedhatCVE
•added 2026/01/07 9:19 a.m.•21 views

CVE-2024-2241

Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perform unintended actions via specific permissions...

6.3CVSS6.7AI score0.00401EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2023-33763

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.00179EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:54 a.m.•20 views

CVE-2023-2257

Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and macOS allows an attacker with access to the user interface to unlock a Hub Business space without being prompted to enter the password via an unimplemented "Force Login" securi...

7.8CVSS7AI score0.00179EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/07 1:15 p.m.•20 views

CVE-2024-2241

Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perform unintended actions via specific permissions...

6.3CVSS5.8AI score0.00401EPSS
SaveExploits0References1
Prion
Prion
•added 2024/03/07 1:15 p.m.•27 views

Improper access control

Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perform unintended actions via specific permissions...

7.2AI score0.00401EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/07 1:11 p.m.•12 views

CVE-2024-2241

Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perform unintended actions via specific permissions...

6.7AI score0.00401EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/07 1:11 p.m.•41 views

CVE-2024-2241

Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perform unintended actions via specific permissions...

6.6AI score0.00401EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/07 1:11 p.m.•96 views

CVE-2024-2241

Devolutions Workspace versions 2024.1.0 and earlier are affected by an improper access control vulnerability in the user interface. This flaw allows an authenticated user to perform unintended actions when utilizing specific permissions. No information regarding a patched version or specific work...

6.3CVSS6.6AI score0.00401EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/03/07 12:00 a.m.•17 views

PT-2024-19400 · Devolutions · Devolutions Workspace

Name of the Vulnerable Software and Affected Versions: Devolutions Workspace versions 2024.1.0 and earlier Description: The issue is related to improper access control in the user interface, allowing an authenticated user to perform unintended actions via specific permissions. Recommendations: Fo...

6.3CVSS6AI score0.00401EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/07 12:00 a.m.•4 views

CVE-2024-2241: Undefined Security Weakness

Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perform unintended actions via specific permissions...

6.3CVSS5.8AI score0.00401EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/03/07 12:00 a.m.•25 views

Devolutions Workspace Security Breach

Devolutions Workspace is a mobile and desktop application from Devolutions Canada. A security vulnerability exists in Devolutions Workspace version 2024.1.0 and earlier, which stems from improper access control and allows an authenticated user to perform unexpected actions with specific privilege...

6.3CVSS6.6AI score0.00401EPSS
SaveExploits0References2
OSV
OSV
•added 2023/12/07 4:15 p.m.•18 views

CVE-2023-6588

Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Workspace 2023.3.2.0 and earlier. This allows an attacker with access to the Workspace application to access credentials when offline...

6.5CVSS5.8AI score0.00589EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/07 4:15 p.m.•27 views

CVE-2023-6588

Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Workspace 2023.3.2.0 and earlier. This allows an attacker with access to the Workspace application to access credentials when offline...

6.5CVSS0.00589EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/07 4:15 p.m.•26 views

Code injection

Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Workspace 2023.3.2.0 and earlier. This allows an attacker with access to the Workspace application to access credentials when offline...

4CVSS7AI score0.00589EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/07 3:59 p.m.•60 views

CVE-2023-6588

CVE-2023-6588 affects Devolutions Workspace (versions 2023.3.2.0 and earlier) where offline mode is always enabled in the Devolutions Server data source. The underlying issue allows an attacker with access to the Workspace application to access credentials while offline. The NVD entry lists a CVS...

6.5CVSS6.4AI score0.00589EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/12/07 12:00 a.m.•21 views

PT-2023-32707 · Devolutions · Devolutions Workspace

Name of the Vulnerable Software and Affected Versions: Devolutions Workspace versions 2023.3.2.0 and earlier Description: The issue allows an attacker with access to the Workspace application to access credentials when offline, due to offline mode being always enabled, even if permission disallow...

6.5CVSS6.3AI score0.00589EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/07 12:00 a.m.•5 views

CVE-2023-6588: Undefined Security Weakness

Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Workspace 2023.3.2.0 and earlier. This allows an attacker with access to the Workspace application to access credentials when offline...

6.5CVSS6.7AI score0.00589EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/12/07 12:00 a.m.•26 views

Devolutions Workspace Security Breach

Devolutions Workspace is a mobile and desktop application from Devolutions Canada. A security vulnerability exists in Devolutions Workspace version 2023.3.2.0 and earlier, which stems from the fact that an attacker with privileged access to the Workspace application can access credentials while...

6.5CVSS6.5AI score0.00589EPSS
SaveExploits0References2
OSV
OSV
•added 2023/04/24 7:15 p.m.•19 views

CVE-2023-2257

Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and macOS allows an attacker with access to the user interface to unlock a Hub Business space without being prompted to enter the password via an unimplemented "Force Login" securi...

7.8CVSS7.1AI score0.00179EPSS
SaveExploits0References1
NVD
NVD
•added 2023/04/24 7:15 p.m.•30 views

CVE-2023-2257

Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and macOS allows an attacker with access to the user interface to unlock a Hub Business space without being prompted to enter the password via an unimplemented "Force Login" securi...

7.8CVSS7.6AI score0.00179EPSS
SaveExploits0References1
Rows per page
Query Builder