Lucene search
+L

932 matches found

Positive Technologies
Positive Technologies
•added 2024/03/05 12:00 a.m.•16 views

PT-2024-13262 · Unknown · Ailux Imx6 Bundle

Name of the Vulnerable Software and Affected Versions: AiLux imx6 bundle versions prior to imx6 1.0.7-2 Description: A vulnerability in the "measure" functionality of the web application allows a remote unauthenticated attacker to access confidential measure information. The issue is related to a...

5.3CVSS7.3AI score0.00487EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/05 12:00 a.m.•6 views

CVE-2023-45598: Direct Request

A CWE-425 “Direct Request 'Forced Browsing'” vulnerability in the “measure” functionality of the web application allows a remote unauthenticated attacker to access confidential measure information. This issue affects: AiLux imx6 bundle below version imx61.0.7-2...

5.3CVSS5.9AI score0.00487EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2024/03/04 5:26 p.m.•58 views

CVE-2024-23307

Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM md, raid, raid5 modules allows Forced Integer Overflow...

4.4CVSS7.2AI score0.00585EPSS
SaveExploits0References6
OSV
OSV
•added 2024/02/29 10:15 a.m.•14 views

CVE-2024-1619

Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The issue was that an attacker could potentially force an administrator to click on a malicious link to perform unauthorized actions...

8.8CVSS5.8AI score0.00379EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/27 7:04 p.m.•26 views

CVE-2021-46958

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between transaction aborts and fsyncs leading to use-after-free There is a race between a task aborting a transaction during a commit, a task doing an fsync and the transaction kthread, which leads to an...

7.8CVSS7.3AI score0.00245EPSS
SaveExploits0References4
CNVD
CNVD
•added 2024/02/22 12:00 a.m.•26 views

IBM PowerSC Forced Browsing Vulnerability

IBM PowerSC is an International Business Machines IBM security and compliance solution for IBM Power Systems servers. IBM PowerSC has a forced browsing vulnerability vulnerability that stems from not properly restricting access to URLs or resources, which can be exploited by an attacker to gain...

6.5CVSS6.8AI score0.00407EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/02/17 12:00 a.m.•49 views

SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2024:0469-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0469-1 advisory. The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were...

7.8CVSS6.5AI score0.28058EPSS
SaveExploits19References99
Tenable Nessus
Tenable Nessus
•added 2024/02/17 12:00 a.m.•38 views

SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2024:0514-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0514-1 advisory. The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following securit...

7.8CVSS6.5AI score0.28058EPSS
SaveExploits19References105
OSV
OSV
•added 2024/02/14 3:15 p.m.•16 views

CVE-2023-46186

IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using forced browsing due to improper access controls. IBM X-Force ID: 269929...

7.5CVSS5.8AI score0.00601EPSS
SaveExploits0References2
NVD
NVD
•added 2024/02/14 3:15 p.m.•26 views

CVE-2023-46186

IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using forced browsing due to improper access controls. IBM X-Force ID: 269929...

7.5CVSS5AI score0.00601EPSS
SaveExploits0References2
Prion
Prion
•added 2024/02/14 3:15 p.m.•25 views

Improper access control

IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using forced browsing due to improper access controls. IBM X-Force ID: 269929...

5CVSS6.2AI score0.00601EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/02/14 12:00 a.m.•18 views

IBM Jazz for Service Management Security Vulnerability

IBM Jazz for Service Management is an integrated service management product from International Business Machines IBM that provides visibility into the service management environment. A security vulnerability exists in IBM Jazz for Service Management that stems from improper access control and cou...

7.5CVSS6.5AI score0.00601EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/14 12:00 a.m.•9 views

CVE-2023-46186: Direct Request

IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using forced browsing due to improper access controls. IBM X-Force ID: 269929...

7.5CVSS5.8AI score0.00601EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/14 12:00 a.m.•21 views

PT-2024-13340 · Ibm · Ibm Jazz For Service Management

Name of the Vulnerable Software and Affected Versions: IBM Jazz for Service Management version 1.1.3.20 Description: The issue allows an unauthorized user to obtain sensitive file information using forced browsing due to improper access controls. Recommendations: For IBM Jazz for Service Manageme...

7.5CVSS6.5AI score0.00601EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2024/02/04 1:40 a.m.•335 views

Exploit for Forced Browsing in Fortra Goanywhere_Managed_File_Transfer

CVE-2024-0204: Authentication Bypass in GoAnywhere MFT Script...

9.8CVSS8.6AI score0.95086EPSS
SaveExploits11
CNNVD
CNNVD
•added 2024/02/02 12:00 a.m.•21 views

IBM PowerSC 安全漏洞

IBM PowerSC is an International Business Machines IBM security and compliance solution for IBM Power Systems servers. IBM PowerSC has a forced browsing vulnerability vulnerability that stems from not properly restricting access to URLs or resources, which can be exploited by an attacker to gain...

6.5CVSS6.9AI score0.00407EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2024/02/01 12:42 a.m.•13 views

SUSE CVE-2021-33631

Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux filesystem modules allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.0...

5.5CVSS7AI score0.00371EPSS
SaveExploits0References14
NVD
NVD
•added 2024/01/25 7:15 a.m.•36 views

CVE-2024-23307

Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM md, raid, raid5 modules allows Forced Integer Overflow...

7.8CVSS5.7AI score0.00585EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2024/01/25 7:15 a.m.•65 views

CVE-2024-23307

Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM md, raid, raid5 modules allows Forced Integer Overflow...

7.8CVSS6.7AI score0.00585EPSS
SaveExploits0References30
Prion
Prion
•added 2024/01/25 7:15 a.m.•46 views

Integer overflow

Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM md, raid, raid5 modules allows Forced Integer Overflow...

4.3CVSS7.1AI score0.00585EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder