Lucene search
+L

63931 matches found

RedhatCVE
RedhatCVE
added 2025/05/15 6:09 p.m.16 views

CVE-2025-4660

A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is accessible to the Everyone group and does not restrict remote connections, allowing any network-based attacker to connect without...

9.8CVSS7.9AI score0.01143EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/05/15 12:00 a.m.10 views

eSigna 安全漏洞

eSigna is a Windows-based analytical application for investors and traders from eSigna, Inc. A security vulnerability exists in eSigna versions 1.0 through 1.5 that stems from improper access control of the component eSignaViewer, which could lead to arbitrary file access...

2CVSS6.8AI score0.00318EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/05/15 12:00 a.m.14 views

Adobe ColdFusion 2021.x < 2021u20 / 2023.x < 2023u14 / 2025.x < 2025u2 Multiple Vulnerabilities (APSB25-52)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2021.x update 20, 2023.x update 14, or 2025.x update 2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-52 advisory. - ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are...

9.1CVSS6.5AI score0.55106EPSS
SaveExploits1References9
CNVD
CNVD
added 2025/05/14 12:00 a.m.51 views

Samsung PENUP Access Control Error Vulnerability

Samsung PENUP is a digital painting application from the South Korean company Samsung SAMSUNG. Samsung PENUP is vulnerable to an Access Control Error vulnerability that stems from improper access control, no details of the vulnerability are provided at this time...

6.2CVSS6.2AI score0.00141EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/05/13 9:16 p.m.7 views

CVE-2025-43564

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization...

9.1CVSS5.9AI score0.15287EPSS
SaveExploits1References2
NVD
NVD
added 2025/05/13 9:16 p.m.34 views

CVE-2025-43564

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization...

9.1CVSS0.15287EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/13 9:16 p.m.9 views

CVE-2025-43564

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization...

9.1CVSS5.9AI score0.15287EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/13 9:16 p.m.6 views

CVE-2025-43563

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization...

9.1CVSS5.9AI score0.15287EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/05/13 9:16 p.m.6 views

CVE-2025-43563

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization...

9.1CVSS5.9AI score0.15287EPSS
SaveExploits0References2
NVD
NVD
added 2025/05/13 9:16 p.m.31 views

CVE-2025-43563

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization...

9.1CVSS0.15287EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/13 9:16 p.m.10 views

CVE-2025-20100

Improper access control in the memory controller configurations for some IntelR XeonR 6 processor with E-cores may allow a privileged user to potentially enable escalation of privilege via local access...

8.7CVSS0.00143EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/13 9:16 p.m.9 views

CVE-2024-45333

Improper access control for some IntelR Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticated user to potentially enable denial of service via local access...

7.3CVSS0.00147EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/13 9:16 p.m.10 views

CVE-2024-39758

Improper access control for some IntelR Arc™ & IrisR Xe graphics software before version 31.0.101.4032 may allow an authenticated user to potentially enable denial of service via local access...

5.9CVSS0.00141EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/13 9:03 p.m.10 views

CVE-2024-45371

Improper access control for some IntelR Arc™ & IrisR Xe graphics software before version 32.0.101.6077 may allow an authenticated user to potentially enable denial of service via local access...

6.7CVSS6.4AI score0.00141EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/13 9:03 p.m.16 views

CVE-2024-45333

Improper access control for some IntelR Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticated user to potentially enable denial of service via local access...

7.3CVSS0.00147EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/13 9:03 p.m.38 views

CVE-2024-43101

CVE-2024-43101: Intel Data Center GPU Flex Series for Windows driver before 31.0.101.4255 has improper access control; an authenticated local attacker may cause denial of service. Affected products include Intel Data Center GPU Flex Series on Windows; remediation per connected sources is to upgra...

5.8CVSS6.7AI score0.00128EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/13 9:02 p.m.20 views

CVE-2025-22844

Improper access control for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

5.3CVSS0.00222EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/13 9:02 p.m.58 views

CVE-2025-20100

The CVE-2025-20100 issue affects Intel® Xeon® 6 processors with Efficient-cores (E-cores). The vulnerability is due to improper access control in memory controller configurations, which could allow a local, privileged user to escalate privileges. Intel’s advisory (Intel-SA-01278) states a firmwar...

8.7CVSS7.2AI score0.00143EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/13 9:01 p.m.41 views

CVE-2025-20052

CVE-2025-20052: Improper access control in Intel® Graphics software may allow an authenticated user to cause denial of service via local access. Affected products include Intel® Graphics Drivers for Arc™ and Iris® Xe (Arc/Pro variants, Data Center GPU Flex, and related generations) and processors...

7.3CVSS7AI score0.00143EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/13 8:49 p.m.68 views

CVE-2025-43564 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization...

9.1CVSS0.15287EPSS
SaveExploits1References1
Rows per page
Query Builder