Lucene search
+L

26 matches found

Cvelist
Cvelist
added 2024/11/01 9:53 a.m.21 views

CVE-2024-10651 CHANGING Information Technology IDExpert - Arbitrary File Read through Path Traversal

IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrator privileges to exploit this vulnerability to read arbitrary system files...

4.9CVSS0.00604EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.5 views

CHANGING IDExpert 操作系统命令注入漏洞

CHANGING IDExpert is an authentication system based on zero trust and integrating various mechanisms such as FIDO, biometrics, MFA, etc. from China-based CHANGING. An operating system command injection vulnerability exists in CHANGING IDExpert versions 2.6.1 through 2.8.1.240620, which originates...

7.2CVSS8.1AI score0.00563EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.7 views

CHANGING IDExpert 安全漏洞

CHANGING IDExpert is an authentication system based on zero trust and integrating various mechanisms such as FIDO, biometrics, MFA, etc. from China-based CHANGING. A security vulnerability exists in CHANGING IDExpert versions 2.5 to 2.8, which originates from incorrectly validating specific...

4.9CVSS7AI score0.00604EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/11/01 12:0 a.m.5 views

PT-2024-16432 · Idexpert · Idexpert

Name of the Vulnerable Software and Affected Versions: IDExpert versions up to 2.8 Description: The issue concerns a lack of validation in the administrator interface of IDExpert, allowing remote attackers with administrative privileges to inject and execute OS commands on the server. This can be...

7.2CVSS8.2AI score0.00563EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2024/11/01 12:0 a.m.8 views

PT-2024-16430 · Changing Information Technology · Idexpert

Name of the Vulnerable Software and Affected Versions: IDExpert from CHANGING Information Technology affected versions not specified Description: The issue is related to the improper validation of a specific parameter in the administrator interface of IDExpert, allowing remote attackers with...

4.9CVSS7AI score0.00604EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/11/01 12:0 a.m.7 views

PT-2024-16431 · Changing Information Technology · Idexpert

Name of the Vulnerable Software and Affected Versions: IDExpert from CHANGING Information Technology affected versions not specified Description: The issue is related to improper validation of a parameter for a specific functionality in IDExpert, allowing unauthenticated remote attackers to injec...

6.1CVSS6.8AI score0.00305EPSS
SaveExploits0References7
Rows per page
Query Builder