Lucene search
K

9 matches found

NVD
NVD
added 2026/05/12 7:16 a.m.7 views

CVE-2026-0541

ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if a...

7.3CVSS0.00011EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/12 5:42 a.m.6 views

CVE-2026-0541

ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if a...

6.7CVSS5.8AI score0.00011EPSS
Exploits0References1
CVE
CVE
added 2026/04/25 8:46 a.m.7 views

CVE-2026-31674

The CVE-2026-31674 issue affects the Linux kernel netfilter ip6t_rt module, where processing IPv6 routing header (RT) match rules can overflow addrnr if it exceeds IP6T_RT_HOPS. The root cause is rt_mt6() using addrnr outside rtinfo->addrs[] bounds. A patch added validation of addrnr during ru...

7.1CVSS5.3AI score0.0002EPSS
Exploits0References8Affected Software1
CNVD
CNVD
added 2025/11/18 12:0 a.m.2 views

Google Chrome Code Problem Vulnerability (CNVD-2025-29239)

Google Chrome is Google's web browser. A security vulnerability exists in Google Chrome versions prior to 134.0.6998.35, which stems from an inadequate validation mechanism for the web application installation process. The vulnerability can be exploited by an attacker to conduct an interface...

4.3CVSS6.5AI score0.00057EPSS
Exploits0References1
CNVD
CNVD
added 2025/09/12 12:0 a.m.1 views

Cisco IOS XR Data Forgery Issue Vulnerability (CNVD-2025-21252)

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. Cisco IOS XR suffers from a data forgery vulnerability that arises from incomplete file validation during installation, which can be exploited by an attacker to cause unsigned...

6CVSS6.5AI score0.00013EPSS
Exploits0References1
CVE
CVE
added 2020/10/14 6:15 p.m.51 views

CVE-2020-3427

The CVE-2020-3427 entry covers the Windows Logon installer vulnerability: prior to version 4.1.2, the installer did not properly validate file installation paths, allowing a local attacker to coerce the installer into writing to arbitrary privileged directories. Potential impact includes manipula...

7.8CVSS6.8AI score0.00028EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2019/02/15 6:29 p.m.10 views

CVE-2019-0255

SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an ABAP Server system correctly. That behavior may lead to situation, where business user achieves access to the full SAP Menu, that is 'Easy Access Menu'. The...

8.1CVSS8.1AI score0.00324EPSS
Exploits0References3
Cvelist
Cvelist
added 2019/02/15 6:0 p.m.12 views

CVE-2019-0255

SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an ABAP Server system correctly. That behavior may lead to situation, where business user achieves access to the full SAP Menu, that is 'Easy Access Menu'. The...

8.2AI score0.00324EPSS
Exploits0References3
CVE
CVE
added 2019/02/15 6:0 p.m.51 views

CVE-2019-0255

The CVE-2019-0255 entry pertains to SAP NetWeaver AS ABAP Platform (Krnl64nuc 7.74, krnl64UC 7.73–7.75, Kernel 7.73–7.75). The vulnerability arises from failing to validate the installation type for an ABAP Server system, which could allow a user to access the full SAP Easy Access Menu and potent...

8.1CVSS8AI score0.00324EPSS
Exploits0References3Affected Software3
Rows per page
Query Builder