Lucene search
K

1219 matches found

ATTACKERKB
ATTACKERKB
added 2022/07/07 12:15 p.m.2 views

CVE-2022-33996

Incorrect permission management in Devolutions Server before 2022.2 allows a new user with a preexisting username to inherit the permissions of that previous user...

8.8CVSS5.9AI score0.00924EPSS
Exploits0References3
NVD
NVD
added 2022/07/07 12:15 p.m.16 views

CVE-2022-33996

Incorrect permission management in Devolutions Server before 2022.2 allows a new user with a preexisting username to inherit the permissions of that previous user...

8.8CVSS0.00924EPSS
Exploits0References2
Prion
Prion
added 2022/07/07 12:15 p.m.12 views

Code injection

Incorrect permission management in Devolutions Server before 2022.2 allows a new user with a preexisting username to inherit the permissions of that previous user...

6.5CVSS8.5AI score0.00924EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2022/07/07 11:19 a.m.65 views

CVE-2022-33996

CVE-2022-33996 affects Devolutions Server older than 2022.2. The issue is incorrect permission management where a new user with a preexisting username inherits the permissions of the previous user. Documented impact includes potential confidentiality, integrity, and availability concerns, with CV...

8.8CVSS8.5AI score0.00924EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/07/07 12:0 a.m.3 views

Devolutions Server 安全漏洞

Devolutions Server is an application from Devolutions Canada. It provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server versions prior to 2022.2 that stems from incorrect privilege management. An attacker could exploit the...

8.8CVSS8AI score0.00924EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/07/06 7:15 p.m.2 views

CVE-2022-2316

HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows attackers to alter the rendering of the page or redirect a user to another site...

5.4CVSS6.1AI score0.00487EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2022/07/06 7:15 p.m.4 views

CVE-2022-2316

HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows attackers to alter the rendering of the page or redirect a user to another site...

5.4CVSS6.1AI score0.00487EPSS
Exploits0References1
NVD
NVD
added 2022/07/06 7:15 p.m.17 views

CVE-2022-2316

HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows attackers to alter the rendering of the page or redirect a user to another site...

5.4CVSS0.00487EPSS
Exploits0References1
Prion
Prion
added 2022/07/06 7:15 p.m.15 views

Design/Logic Flaw

HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows attackers to alter the rendering of the page or redirect a user to another site...

3.5CVSS5.5AI score0.00487EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/07/06 6:56 p.m.58 views

CVE-2022-2316

CVE-2022-2316 : The connected sources confirm an HTML injection vulnerability in Devolutions Server prior to 2022.2 affecting the handling of secure messages. The root cause is injection of HTML tags into a secure message (including its header, per CNNVD) that can alter how the page renders or ca...

5.4CVSS5.5AI score0.00487EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/07/06 6:56 p.m.24 views

CVE-2022-2316

HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows attackers to alter the rendering of the page or redirect a user to another site...

5.8AI score0.00487EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/07/06 12:0 a.m.4 views

Devolutions Server 跨站脚本漏洞

Devolutions Server is an application from Devolutions Canada. It provides a full-featured shared account and password management solution. A security vulnerability exists in versions of Devolutions Server prior to 2022.2, which stems from the fact that some HTML tags can be injected into the head...

5.4CVSS5.8AI score0.00487EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/06/27 7:15 p.m.2 views

CVE-2022-2221

Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users. This issue affects: Devolutions Remote Desktop Manager versions prior to 2022.1.8...

6.5CVSS6.6AI score0.00998EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2022/06/27 7:15 p.m.16 views

CVE-2022-2221

Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users. This issue affects: Devolutions Remote Desktop Manager versions prior to 2022.1.8...

6.5CVSS0.00998EPSS
Exploits0References1
Prion
Prion
added 2022/06/27 7:15 p.m.17 views

Information disclosure

Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users. This issue affects: Devolutions Remote Desktop Manager versions prior to 2022.1.8...

4CVSS6.3AI score0.00998EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/06/27 6:38 p.m.77 views

CVE-2022-2221

CVE-2022-2221 concerns an Information Exposure vulnerability in the Devolutions Remote Desktop Manager product. The issue affects versions prior to 2022.1.8 and resides in the My Account Settings area, where authenticated users could access credentials of other users. The connected documents conf...

6.5CVSS6.3AI score0.00998EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/06/27 6:38 p.m.18 views

CVE-2022-2221

Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users. This issue affects: Devolutions Remote Desktop Manager versions prior to 2022.1.8...

6.6AI score0.00998EPSS
Exploits0References1
OSV
OSV
added 2022/06/21 3:15 p.m.1 views

CVE-2022-33995

A path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2 allows attackers to create or overwrite files in an arbitrary location...

7.5CVSS5.9AI score0.0164EPSS
Exploits0References1
NVD
NVD
added 2022/06/21 3:15 p.m.13 views

CVE-2022-33995

A path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2 allows attackers to create or overwrite files in an arbitrary location...

7.5CVSS0.0164EPSS
Exploits0References1
Prion
Prion
added 2022/06/21 3:15 p.m.9 views

Path traversal

A path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2 allows attackers to create or overwrite files in an arbitrary location...

5CVSS7.6AI score0.0164EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder