Lucene search
+L

1037 matches found

ICS
ICS
added 2024/09/12 6:0 a.m.24 views

Rockwell Automation Pavilion8

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : Pavilion8 Vulnerabilities : Improper Privilege Management, Path Traversal 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

9.8CVSS10AI score0.00956EPSS
SaveExploits0References10
OSV
OSV
added 2024/09/11 3:15 p.m.6 views

CVE-2024-8306

CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with the binaries...

7.8CVSS5.8AI score0.00209EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/10 9:15 a.m.24 views

CVE-2024-39574

Dell PowerScale InsightIQ, version 5.1, contain an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service...

6.7CVSS0.0014EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/10 9:1 a.m.49 views

CVE-2024-39574

CVE-2024-39574 affects Dell PowerScale InsightIQ 5.1. The vulnerability is described as an improper privilege management issue that could allow a high-privilege attacker with local access to cause a Denial of Service. Exploitation details are not provided in the sources; the CVE record itself lis...

6.7CVSS6.5AI score0.0014EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/09/10 12:0 a.m.6 views

PT-2024-5983 · Schneider Electric · Vijeo Designer

Name of the Vulnerable Software and Affected Versions: Vijeo Designer affected versions not specified Description: The issue is related to improper privilege management, which could lead to unauthorized access, loss of confidentiality, integrity, and availability of the workstation. This occurs...

7.8CVSS7.1AI score0.00209EPSS
SaveExploits0References8
Packet Storm
Packet Storm
added 2024/09/06 12:0 a.m.394 views

C-MOR Video Surveillance 5.2401 / 6.00PL01 Privilege Escalation

Advisory ID: SYSS-2024-027 Product: C-MOR Video Surveillance Manufacturer: za-internet GmbH Affected Versions: 5.2401, 6.00PL01 Tested Versions: 5.2401, 6.00PL01 Vulnerability Type: Improper Privilege Management CWE-269 Risk Level: High Solution Status: Open Manufacturer Notification: 2024-04-05...

8.8CVSS7.1AI score0.0092EPSS
SaveExploits2
Cvelist
Cvelist
added 2024/09/03 1:15 p.m.30 views

CVE-2024-4259 Sensetive Data Exposure in SAMPAS's AKOS

Missing Authorization vulnerability in SAMPAŞ Holding AKOS AkosCepVatandasService, SAMPAŞ Holding AKOS TahsilatService allows Collect Data as Provided by Users. This issue affects AKOS AkosCepVatandasService: before V2.0; AKOS TahsilatService: before V1.0.7...

6.9CVSS0.00505EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/09/03 1:15 p.m.31 views

CVE-2024-4259 Sensetive Data Exposure in SAMPAS's AKOS

Missing Authorization vulnerability in SAMPAŞ Holding AKOS AkosCepVatandasService, SAMPAŞ Holding AKOS TahsilatService allows Collect Data as Provided by Users. This issue affects AKOS AkosCepVatandasService: before V2.0; AKOS TahsilatService: before V1.0.7...

6.9CVSS5.8AI score0.00505EPSS
SaveExploits0References2
CVE
CVE
added 2024/09/03 1:15 p.m.58 views

CVE-2024-4259

CVE-2024-4259 describes a Missing Authorization vulnerability in SAMPAŞ Holding AKOS components: AkosCepVatandasService (before V2.0) and TahsilatService (before V1.0.7). The issue allows Collect Data as Provided by Users. CVSS data indicates a network-based, low complexity but high-severity impa...

9.8CVSS5.8AI score0.00505EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/09/03 12:0 a.m.8 views

SAMPA AKOS 安全漏洞

SAMPA AKOS is an application from SAMPA, Inc. A security vulnerability exists in SAMPA AKOS version 20240902 and prior versions that stems from improper privilege management...

9.8CVSS6.9AI score0.00505EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2024/08/30 6:44 p.m.574 views

Exploit for Improper Input Validation in Portabilis I-Educar

CVE-2024-45058 PoC for CVE-2024-45058 Broken Access Control, a...

8.1CVSS8.1AI score0.01365EPSS
SaveExploits2
NVD
NVD
added 2024/08/29 11:15 a.m.24 views

CVE-2024-4428

Missing Authentication for Critical Function, Missing Authorization vulnerability in Menulux Information Technologies Managment Portal allows Collect Data as Provided by Users. This issue affects Managment Portal: through 21.05.2024...

9.8CVSS0.00487EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/08/29 7:49 a.m.40 views

CVE-2024-4428 Sensetive Data Exposure in Menulux Managment Portal

Missing Authentication for Critical Function, Missing Authorization vulnerability in Menulux Information Technologies Managment Portal allows Collect Data as Provided by Users. This issue affects Managment Portal: through 21.05.2024...

6.9CVSS0.00487EPSS
SaveExploits0References2
CVE
CVE
added 2024/08/29 7:49 a.m.72 views

CVE-2024-4428

CVE-2024-4428 affects Menulux Information Technologies Managment Portal. The issue is a Missing Authentication for Critical Function / Missing Authorization vulnerability in the portal, enabling collection of data provided by users due to improper access control. Affected status and remediation d...

9.8CVSS5.8AI score0.00487EPSS
SaveExploits0References2Affected Software1
ICS
ICS
added 2024/08/29 6:0 a.m.28 views

Rockwell Automation ThinManager ThinServer

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/Low attack complexity Vendor : Rockwell Automation Equipment : ThinManager ThinServer Vulnerabilities : Improper Privilege Management, Incorrect Permission Assignment for Critical Resource, Improper Input Validation 2...

9.8CVSS8.3AI score0.01477EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2024/08/29 12:0 a.m.8 views

PT-2024-31103 · Menulux Information Technologies · Menulux Information Technologies Managment Portal

Name of the Vulnerable Software and Affected Versions: Menulux Information Technologies Managment Portal versions through 21.05.2024 Description: The issue is related to Improper Privilege Management, allowing the collection of data as provided by users. Recommendations: For Menulux Information...

9.8CVSS6.1AI score0.00487EPSS
SaveExploits0References6
NVD
NVD
added 2024/08/28 7:15 a.m.36 views

CVE-2024-4555

Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before 5.0.4.1 and before 5.1...

7.7CVSS0.00258EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/08/19 7:20 p.m.11 views

CVE-2024-43311 WordPress Login As Users plugin <= 1.4.2 - Broken Authentication vulnerability

Improper Privilege Management vulnerability in Geek Code Lab Login As Users allows Privilege Escalation.This issue affects Login As Users: from n/a through 1.4.2...

9.8CVSS9.8AI score0.00473EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/08/19 6:15 p.m.4 views

CVE-2024-43245

Improper Privilege Management vulnerability in eyecix JobSearch allows Privilege Escalation.This issue affects JobSearch: from n/a through 2.3.4...

9.8CVSS5.1AI score0.00473EPSS
SaveExploits0References2
NVD
NVD
added 2024/08/19 5:15 p.m.28 views

CVE-2024-43240

Improper Authentication vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through = 12.7...

9.8CVSS0.00549EPSS
SaveExploits0References1
Rows per page
Query Builder