Lucene search
+L

63802 matches found

NVD
NVD
added 2024/06/13 8:15 a.m.24 views

CVE-2024-26029

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain disclose information. Exploitation of this issue does no...

9.8CVSS0.00889EPSS
SaveExploits0References1
OSV
OSV
added 2024/06/13 8:15 a.m.12 views

CVE-2024-26029

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain disclose information. Exploitation of this issue does no...

9.8CVSS5.8AI score0.00889EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/13 7:53 a.m.33 views

CVE-2024-26029 Adobe Experience Manager | Improper Access Control (CWE-284)

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain disclose information. Exploitation of this issue does no...

7.5CVSS0.00889EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/06/13 12:00 a.m.12 views

PT-2024-22649 · Dell · Dell Scg

Name of the Vulnerable Software and Affected Versions: Dell SCG versions prior to 5.24.00.00 Description: The issue is related to an Improper Access Control vulnerability in the SCG exposed for an internal update REST API. This API is only accessible if enabled by an Admin user from the UI. A...

5.4CVSS7.3AI score0.00349EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/06/13 12:00 a.m.14 views

PT-2024-22652 · Dell · Dell Scg

Name of the Vulnerable Software and Affected Versions: Dell SCG versions prior to 5.24.00.00 Description: The issue is related to an Improper Access Control vulnerability in the SCG exposed for an internal update REST API. This API is only accessible if enabled by an Admin user from the UI. A...

4.3CVSS7.3AI score0.00424EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/06/13 12:00 a.m.26 views

PT-2024-22648 · Dell · Dell Scg

Name of the Vulnerable Software and Affected Versions: Dell SCG versions prior to 5.24.00.00 Description: The issue is related to an Improper Access Control vulnerability in the SCG exposed for an internal enable REST API. This could allow a remote low privileged attacker to execute certain...

5.4CVSS7.5AI score0.00349EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/06/13 12:00 a.m.14 views

PT-2024-22651 · Dell · Dell Scg

Name of the Vulnerable Software and Affected Versions: Dell SCG versions prior to 5.24.00.00 Description: The issue is related to an Improper Access Control vulnerability in the SCG exposed for internal email and collection settings REST APIs. A remote low privileged attacker could potentially...

5.4CVSS7.3AI score0.00349EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/06/13 12:00 a.m.8 views

PT-2024-22650 · Dell · Dell Scg

Name of the Vulnerable Software and Affected Versions: Dell SCG versions prior to 5.24.00.00 Description: The issue is related to an Improper Access Control vulnerability in the SCG exposed for an internal maintenance REST API. This could allow a remote low privileged attacker to execute certain...

5.4CVSS7.4AI score0.00349EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/06/13 12:00 a.m.8 views

Adobe Experience Manager 访问控制错误漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. An...

9.8CVSS6.6AI score0.00889EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2024/06/12 1:38 p.m.11 views

itmuniversity.ac.in Improper Access Control vulnerability OBB-3934868

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
Veracode
Veracode
added 2024/06/12 6:07 a.m.22 views

Improper Access Control

scikit-learn is vulnerable to Improper Access Control. The vulnerability is due to the unexpected storage of all tokens in the stopwords attribute, which can leak sensitive information such as passwords or keys when using the TfidfVectorizer class...

4.7CVSS6.3AI score0.00189EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2024/06/11 12:00 a.m.14 views

Lunary Improper Access Control Vulnerability

lunary is lunary open source a production toolkit for LLM . An improper access control vulnerability exists in lunary, which can be exploited by an attacker to update any organization user as the organization owner...

8.1CVSS6.9AI score0.00494EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/06/11 12:00 a.m.8 views

PT-2024-4220 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2023u7, 2021u13 and earlier Description: The issue is related to improper access control, which could result in arbitrary file system read. An attacker could exploit this to gain unauthorized access to sensitive files or...

7.8CVSS7.2AI score0.237EPSS
SaveExploits0References5
NVD
NVD
added 2024/06/10 10:15 p.m.44 views

CVE-2024-37289

An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7.8CVSS0.00629EPSS
SaveExploits0References2
OSV
OSV
added 2024/06/10 10:15 p.m.8 views

CVE-2024-37289

An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7.8CVSS6AI score0.00629EPSS
SaveExploits0References2
CVE
CVE
added 2024/06/10 9:22 p.m.77 views

CVE-2024-37289

Trend Micro Apex One contains an improper access control vulnerability (CVE-2024-37289) that could allow a local attacker to escalate privileges. The attacker must first obtain the ability to execute low-privileged code on the target system; impact is reported as high (C, I, A). Several connected...

7.8CVSS7.2AI score0.00629EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/10 9:22 p.m.15 views

CVE-2024-37289

An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7.8CVSS7.4AI score0.00629EPSS
SaveExploits0References2
OSV
OSV
added 2024/06/10 9:15 p.m.5 views

CVE-2024-33850

Pexip Infinity before 34.1 has Improper Access Control for persons in a waiting room. They can see the conference roster list, and perform certain actions that should not be allowed before they are admitted to the meeting...

4.3CVSS5.8AI score0.00213EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/10 12:00 a.m.13 views

CVE-2024-33850

Pexip Infinity before 34.1 has Improper Access Control for persons in a waiting room. They can see the conference roster list, and perform certain actions that should not be allowed before they are admitted to the meeting...

6.8AI score0.00213EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/10 12:00 a.m.23 views

CVE-2024-33850

Pexip Infinity before 34.1 has Improper Access Control for persons in a waiting room. They can see the conference roster list, and perform certain actions that should not be allowed before they are admitted to the meeting...

0.00213EPSS
SaveExploits0References1
Rows per page
Query Builder