Lucene search
+L

13524 matches found

osv_cve
osv_cve
•added 2024/08/28 9:15 a.m.•19 views

CVE-2024-5546

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option...

8.8CVSS7.8AI score0.0304EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/28 8:44 a.m.•51 views

CVE-2024-5546 SQL Injection

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option...

8.3CVSS7.8AI score0.0304EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/28 8:44 a.m.•56 views

CVE-2024-5546 SQL Injection

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option...

8.3CVSS0.0304EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/28 12:00 a.m.•3 views

CVE-2024-5546: Improper Neutralization of Special Elements used in an SQL Command

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option...

8.8CVSS7.9AI score0.0304EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/08/28 12:00 a.m.•23 views

ZOHO ManageEngine Password Manager Pro has a security vulnerability

ZOHO ManageEngine Password Manager Pro is a password manager from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Password Manager Pro prior to version 12431 and ManageEngine PAM360 prior to version 7001, which stems from a failure to properly filter input via the global search...

8.8CVSS7.8AI score0.0304EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/08/28 12:00 a.m.•23 views

Xiaomi GetApps security vulnerability

Xiaomi GetApps is a global app store by Chinese company Xiaomi. It is used by developers to publish and distribute their apps to over 200 million users in 59 regions. A security vulnerability exists in Xiaomi GetApps that stems from a bypass of the authentication logic, which could allow an...

9.8CVSS6.3AI score0.00637EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/08/28 12:00 a.m.•19 views

Xiaomi GetApps security vulnerability

Xiaomi GetApps is a global app store by the Chinese company Xiaomi. A code execution vulnerability exists in Xiaomi GetApps, which can be exploited by an attacker to execute arbitrary code...

9.8CVSS8.7AI score0.00778EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/08/28 12:00 a.m.•41 views

Xiaomi GetApps security vulnerability

Xiaomi GetApps is a global app store by Chinese company Xiaomi. It is used by developers to publish and distribute their apps to over 200 million users in 59 regions. A security vulnerability exists in Xiaomi GetApps that stems from authentication logic that can be bypassed...

8.8CVSS5.8AI score0.00472EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2024/08/27 11:40 a.m.•30 views

CVE-2024-43910

In the Linux kernel, the following vulnerability has been resolved: bpf: add missing checkfuncargregoff to prevent out-of-bounds memory accesses Currently, it's possible to pass in a modified CONSTPTRTODYNPTR to a global function as an argument. The adverse effects of this is that BPF helpers can...

7.1CVSS7.2AI score0.00189EPSS
SaveExploits0References4
osv_clsa
osv_clsa
•added 2024/08/27 10:19 a.m.•24 views

CLSA-2024-1724753960 Fix CVE(s): CVE-2023-52760, CVE-2024-35835, CVE-2024-39484, CVE-2024-39487

CVE-url: https://ubuntu.com/security/CVE-2024-39487 - bonding: Fix out-of-bounds read in bondoptionarpiptargetsset CVE-url: https://ubuntu.com/security/CVE-2023-52760 - gfs2: Fix slab-use-after-free in gfs2qddealloc CVE-url: https://ubuntu.com/security/CVE-2024-39484 - mmc: davinci: Don't strip...

7.8CVSS6.5AI score0.00628EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2024/08/26 11:15 a.m.•29 views

CVE-2024-43910

In the Linux kernel, the following vulnerability has been resolved: bpf: add missing checkfuncargregoff to prevent out-of-bounds memory accesses Currently, it's possible to pass in a modified CONSTPTRTODYNPTR to a global function as an argument. The adverse effects of this is that BPF helpers can...

7.8CVSS6.9AI score0.00189EPSS
SaveExploits0References9
osv_ubuntu
osv_ubuntu
•added 2024/08/26 11:15 a.m.•41 views

UBUNTU-CVE-2024-43910

In the Linux kernel, the following vulnerability has been resolved: bpf: add missing checkfuncargregoff to prevent out-of-bounds memory accesses Currently, it's possible to pass in a modified CONSTPTRTODYNPTR to a global function as an argument. The adverse effects of this is that BPF helpers can...

7.8CVSS7.2AI score0.00189EPSS
SaveExploits0References10
osv_cve
osv_cve
•added 2024/08/26 10:11 a.m.•29 views

CVE-2024-43910 bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory accesses

In the Linux kernel, the following vulnerability has been resolved: bpf: add missing checkfuncargregoff to prevent out-of-bounds memory accesses Currently, it's possible to pass in a modified CONSTPTRTODYNPTR to a global function as an argument. The adverse effects of this is that BPF helpers can...

7.8CVSS7AI score0.00189EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2024/08/26 10:11 a.m.•47 views

CVE-2024-43910 bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory accesses

In the Linux kernel, the following vulnerability has been resolved: bpf: add missing checkfuncargregoff to prevent out-of-bounds memory accesses Currently, it's possible to pass in a modified CONSTPTRTODYNPTR to a global function as an argument. The adverse effects of this is that BPF helpers can...

7.8CVSS0.00189EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2024/08/26 10:11 a.m.•65 views

CVE-2024-43910

In the Linux kernel, the following vulnerability has been resolved: bpf: add missing checkfuncargregoff to prevent out-of-bounds memory accesses Currently, it's possible to pass in a modified CONSTPTRTODYNPTR to a global function as an argument. The adverse effects of this is that BPF helpers can...

7.8CVSS7.2AI score0.00189EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/08/26 12:00 a.m.•24 views

Citrix Workspace App for HTML5 GACS Bypass

The vulnerability of the Citrix Workspace App for HTML5 is related to incorrect default permissions. Exploiting this vulnerability could allow a malicious actor to bypass the configuration parameters of the GACS Global App Configuration service...

5.5CVSS8.8AI score0.00402EPSS
SaveExploits0References3Affected Software1
Schneier on Security
Schneier on Security
•added 2024/08/23 1:15 a.m.•23 views

Surveillance Watch

This is a fantastic project mapping the global surveillance industry...

7.3AI score
SaveExploits0
CNVD
CNVD
•added 2024/08/23 12:00 a.m.•66 views

IBM Global Configuration Management Access Control Error Vulnerability

IBM Global Configuration Management is a Web-based tool from International Business Machines IBM. It can be used to assemble configurations from other IBM Engineering Lifecycle Management ELM applications into a global configuration. An Access Control Error vulnerability exists in IBM Global...

6.5CVSS5.9AI score0.00282EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/22 1:33 a.m.•23 views

CVE-2022-48925 RDMA/cma: Do not change route.addr.src_addr outside state checks

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Do not change route.addr.srcaddr outside state checks If the state is not idle then resolvepreparesrc should immediately fail and no change to global state should happen. However, it unconditionally overwrites the srcad...

7.8CVSS7.1AI score0.00222EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2024/08/21 11:57 a.m.•22 views

kernel: gfs2: Fix potential glock use-after-free on unmount

A vulnerability was found in the Linux kernel within the gfs2 component, where potential use-after-free issues could occur on unmount. When DLM lockspaces are released with remaining locks, callbacks for asynchronous lock contention may access freed objects, causing unexpected behavior...

9.8CVSS6.8AI score0.00676EPSS
SaveExploits0References5
Rows per page
Query Builder