Lucene search
+L

1908 matches found

CNNVD
CNNVD
•added 2020/11/30 12:00 a.m.•17 views

Huawei FusionCompute 权限许可和访问控制问题漏洞

FusionCompute is Huawei's self-developed computing virtualization software. An elevation of privilege vulnerability exists in FusionCompute 6.3.0, 6.3.1, 6.5.0, 6.5.1, 8.0.0. The vulnerability stems from improper privilege management. An attacker with normal privileges could exploit the...

7.8CVSS7.1AI score0.00219EPSS
SaveExploits0References2
Prion
Prion
•added 2020/11/19 10:15 p.m.•22 views

Privilege escalation

A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime Vijeo XD that could cause privilege escalation on the workstation when interacting directly with a driver installed by the runtime software of EcoStruxureª Operator Terminal Expert...

7.2CVSS7.7AI score0.00313EPSS
SaveExploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2020/11/05 9:51 a.m.•54 views

Security Bulletin: Vulnerabilities in Net-SNMP library affect IBM Spectrum Control (CVE-2020-15861, CVE-2020-15862)

Summary Net-SNMP could allow a local authenticated attacker to gain elevated privileges on the system Vulnerability Details CVEID: CVE-2020-15861 DESCRIPTION: Net-SNMP could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper handling of symlinks by...

7.8CVSS2AI score0.00459EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
•added 2020/11/04 12:00 a.m.•25 views

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2020-2370)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.02315EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
•added 2020/11/03 2:07 a.m.•29 views

Security Bulletin: Multiple vulnerabilities have been identified in IBM Tivoli Netcool/OMNIbus Gateway for SNMP (CVE-2020-15861, CVE-2020-15862)

Summary Netcool/OMNIbus SNMP Gateway is vulnerable to the weaknesses in Net-SNMP library. CVE-2020-15861, CVE-2020-15862 Vulnerability Details CVEID: CVE-2020-15861 DESCRIPTION: Net-SNMP could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper...

7.8CVSS2AI score0.00459EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2020/11/03 2:05 a.m.•33 views

Security Bulletin: Multiple vulnerabilities in Net-SNMP affects Netcool/OMNIbus SNMP Probe (CVE-2020-15861, CVE-2020-15862)

Summary Net-SNMP library is consumed by IBM Tivoli Netcool/OMNIbus SNMP Probe. Information about security vulnerabilities affecting Net-SNMP library has been published. Vulnerability Details CVEID: CVE-2020-15861 DESCRIPTION: Net-SNMP could allow a local authenticated attacker to gain elevated...

7.8CVSS1.7AI score0.00459EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2020/11/03 12:00 a.m.•34 views

EulerOS 2.0 SP2 : net-snmp (EulerOS-SA-2020-2370)

According to the versions of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link symlink following.CVE-2020-15861 - Net-SNMP through 5.7.3...

7.8CVSS7.1AI score0.02315EPSS
SaveExploits1References4
ICS
ICS
•added 2020/10/13 12:00 a.m.•72 views

MOXA NPort IAW5000A-I/O Series

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: MOXA Equipment: NPort IAW5000A-I/O Series Vulnerabilities: Session Fixation, Improper Privilege Management, Weak Password Requirements, Cleartext Transmission of Sensitive Information, Improper...

9.8CVSS8.6AI score0.01814EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2020/10/12 12:00 a.m.•21 views

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2020-2179)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00459EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/10/12 12:00 a.m.•20 views

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2020-2169)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00459EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2020/09/29 12:00 a.m.•33 views

EulerOS 2.0 SP8 : net-snmp (EulerOS-SA-2020-2155)

According to the versions of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary...

7.8CVSS7.1AI score0.00459EPSS
SaveExploits0References3
CNVD
CNVD
•added 2020/08/28 12:00 a.m.•15 views

IBM Security Guardium Insights Improper Privilege Vulnerability

IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. An Improper Privilege vulnerability exists in IBM Security Guardium Insights 2.0.1, which stems from the product performing...

7.2CVSS6.7AI score0.00815EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/08/21 12:00 a.m.•10 views

RangeeOS Component Improper Execution Privilege Vulnerability

RangeeOS is a Linux operating system designed and developed specifically for thin clients, including all necessary software modules. RangeeOS 8.0.4 suffers from a component execute with improper privileges vulnerability. The vulnerability stems from the fact that in the default configuration, all...

8.8CVSS7AI score0.00369EPSS
SaveExploits0References1
NVD
NVD
•added 2020/08/20 1:17 a.m.•31 views

CVE-2020-15862

Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...

7.8CVSS7.9AI score0.00382EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2020/08/19 12:00 a.m.•32 views

CVE-2020-15862

Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...

8.1AI score0.00382EPSS
SaveExploits0References7
CVE
CVE
•added 2020/08/19 12:00 a.m.•508 views

CVE-2020-15862

CVE-2020-15862 affects Net-SNMP with an improper privilege management flaw: SNMP WRITE access to the EXTEND MIB allows an authenticated local attacker to execute arbitrary commands as root. Practical impact is local privilege escalation; exploitation requires access to an authenticated SNMP sessi...

7.8CVSS7.9AI score0.00382EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2020/06/16 8:15 p.m.•13 views

CVE-2020-7509

A CWE-269: Improper privilege management write vulnerability exists in Easergy T300 Firmware version 1.5.2 and older which could allow an attacker to elevate their privileges and delete files...

7.2CVSS7.1AI score0.0119EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/03 7:15 a.m.•15 views

CVE-2018-17954

An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue affects: SUSE...

7.8CVSS5.8AI score0.00318EPSS
SaveExploits0References1
OwnCloud
OwnCloud
•added 2020/02/28 12:00 a.m.•34 views

Deleting received group share for whole group

Platform: ownCloud Server Versions: 10.2.0 Date: 2/28/2020 Risk: Low CVSS v3 Base Score: 3.5 CVSS v3 Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N CWE ID: 385 CWE Name: Improper Privilege Management...

3.5CVSS3AI score
SaveExploits0
GitLab Advisory Database
GitLab Advisory Database
•added 2020/01/28 12:00 a.m.•40 views

Improper Privilege Management

The parsecmd function in lib/gitlabshell.rb allows remote authenticated users to gain privileges and clone arbitrary repositories...

8.8CVSS5.9AI score0.02EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder