Lucene search
+L

6726 matches found

attackerkb
attackerkb
•added 2023/12/06 7:15 a.m.•10 views

CVE-2023-2861

A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder...

7.1CVSS6.8AI score0.00376EPSS
SaveExploits0References6
osv_debian
osv_debian
•added 2023/12/06 7:15 a.m.•12 views

DEBIAN-CVE-2023-2861

A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder...

7.1CVSS6.8AI score0.00376EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2023/12/06 7:15 a.m.•31 views

AZL-32127 CVE-2023-2861 affecting package qemu for versions less than 6.2.0-23

A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder...

7.1CVSS6.8AI score0.00376EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2023/12/06 6:19 a.m.•56 views

CVE-2023-2861

A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder...

7.1CVSS6.7AI score0.00376EPSS
SaveExploits0
The Hacker News
The Hacker News
•added 2023/12/05 6:59 a.m.•99 views

Microsoft Warns of Kremlin-Backed APT28 Exploiting Critical Outlook Vulnerability

Microsoft on Monday said it detected Kremlin-backed nation-state activity exploiting a now-patched critical security flaw in its Outlook email service to gain unauthorized access to victims' accounts within Exchange servers. The tech giant attributed the intrusions to a threat actor it called...

9.8CVSS7AI score0.99815EPSS
SaveExploits68
osv_cve
osv_cve
•added 2023/12/02 5:15 a.m.•11 views

CVE-2023-39257

Dell Rugged Control Center, version prior to 4.7, contains an Improper Access Control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder when product installation repair is performed, leading to privilege...

7.8CVSS5.8AI score
SaveExploits0References1
NVD
NVD
•added 2023/12/02 5:15 a.m.•33 views

CVE-2023-39256

Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder during product installation and upgrade, leading to privilege escalation o...

7.8CVSS0.00201EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/12/02 4:18 a.m.•43 views

CVE-2023-39256

Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder during product installation and upgrade, leading to privilege escalation o...

7.3CVSS7.9AI score0.00201EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/12/02 12:00 a.m.•28 views

Dell Rugged Control Center security vulnerabilities

Dell Rugged Control Center is an application from Dell USA. It allows a range of settings to be configured on the ruggedized device, such as application settings, keyboard backlight settings, night mode settings, stealth mode settings, window settings, antenna switch settings and GPS settings. An...

7.8CVSS6.9AI score0.00201EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/12/02 12:00 a.m.•25 views

Dell Rugged Control Center security vulnerabilities

Dell Rugged Control Center is an application from Dell USA. It allows a range of settings to be configured on the ruggedized device, such as application settings, keyboard backlight settings, night mode settings, stealth mode settings, window settings, antenna switch settings and GPS settings. An...

7.8CVSS6.9AI score0.00201EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/02 12:00 a.m.•2 views

CVE-2023-39256: Improper Access Control

Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder during product installation and upgrade, leading to privilege escalation o...

7.8CVSS7.3AI score0.00201EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/02 12:00 a.m.•29 views

PT-2023-26851 · Dell · Dell Rugged Control Center

Name of the Vulnerable Software and Affected Versions: Dell Rugged Control Center versions prior to 4.7 Description: The issue is related to improper access control. A local malicious standard user could potentially exploit this to modify content in an unsecured folder during product installation...

7.8CVSS7.5AI score0.00201EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/12/02 12:00 a.m.•24 views

PT-2023-26852 · Dell · Dell Rugged Control Center

Name of the Vulnerable Software and Affected Versions: Dell Rugged Control Center versions prior to 4.7 Description: The issue is related to improper access control. A local malicious standard user could potentially exploit this to modify content in an unsecured folder when product installation...

7.8CVSS7.5AI score0.00201EPSS
SaveExploits0References4
osv_mgasa
osv_mgasa
•added 2023/12/01 11:54 a.m.•34 views

MGASA-2023-0332 Updated roundcubemail packages fix XSS security vulnerabilities

Updated roundcubemail package fixes security vulnerabilities: Fix cross-site scripting XSS vulnerability in setting Content-Type/ Content-Disposition for attachment preview/download CVE-2023-47272 Fix cross-site scripting XSS vulnerability in handling of SVG in HTML messages. CVE-2023-5631 Some...

6.1CVSS6.4AI score0.76901EPSS
SaveExploits2References4
osv_cve
osv_cve
•added 2023/12/01 2:15 a.m.•18 views

CVE-2023-43089

Dell Rugged Control Center, version prior to 4.7, contains insufficient protection for the Policy folder. A local malicious standard user could potentially exploit this vulnerability to modify the content of the policy file, leading to unauthorized access to resources...

3.3CVSS5.8AI score0.00182EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/01 2:15 a.m.•43 views

CVE-2023-43089

Dell Rugged Control Center, version prior to 4.7, contains insufficient protection for the Policy folder. A local malicious standard user could potentially exploit this vulnerability to modify the content of the policy file, leading to unauthorized access to resources...

4.4CVSS0.00182EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/12/01 2:06 a.m.•40 views

CVE-2023-43089

Dell Rugged Control Center, version prior to 4.7, contains insufficient protection for the Policy folder. A local malicious standard user could potentially exploit this vulnerability to modify the content of the policy file, leading to unauthorized access to resources...

4.4CVSS5.7AI score0.00182EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/01 2:06 a.m.•53 views

CVE-2023-43089

Dell Rugged Control Center prior to 4.7 is affected by insufficient protection of the Policy folder, allowing a local standard user to modify the policy file and potentially access resources. Affected product: Dell Rugged Control Center (Windows). Root cause: inadequate protection of the Policy f...

4.4CVSS4AI score0.00182EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/01 12:00 a.m.•9 views

CVE-2023-43089: Improper Access Control

Dell Rugged Control Center, version prior to 4.7, contains insufficient protection for the Policy folder. A local malicious standard user could potentially exploit this vulnerability to modify the content of the policy file, leading to unauthorized access to resources...

4.4CVSS5.6AI score0.00182EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/12/01 12:00 a.m.•30 views

Dell Rugged Control Center Security Vulnerability

Dell Rugged Control Center is an application from Dell USA. It allows a range of settings to be configured on a ruggedized device, such as application settings, keyboard backlighting settings, night mode settings, stealth mode settings, window settings, antenna switch settings, and GPS settings. ...

4.4CVSS6.6AI score0.00182EPSS
SaveExploits0References1
Rows per page
Query Builder