Lucene search
+L

1930 matches found

CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•25 views

Hewlett Packard Enterprise Cray Parallel Application Launch Service Security Vulnerability

Hewlett Packard Enterprise Cray Parallel Application Launch Service is a parallel application launch service from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise Cray Parallel Application Launch Service that originates from a susceptibility to...

9.8CVSS6.9AI score0.00493EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/06/13 12:00 a.m.•34 views

PT-2024-19427 · Hewlett Packard · Hpe Cray Pals

Name of the Vulnerable Software and Affected Versions: HPE Cray Parallel Application Launch Service PALS affected versions not specified Description: The issue is related to an authentication bypass in HPE Cray Parallel Application Launch Service PALS. No information is provided about the estimat...

9.8CVSS7.2AI score0.00493EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/13 12:00 a.m.•4 views

CVE-2024-22441: Improper Authentication

HPE Cray Parallel Application Launch Service PALS is subject to an authentication bypass...

9.8CVSS5.7AI score0.00493EPSS
SaveExploits0References1
OSV
OSV
•added 2024/06/12 4:15 p.m.•14 views

CVE-2024-5759

An improper privilege management vulnerability exists in Tenable Security Center where an authenticated, remote attacker could view unauthorized objects and launch scans without having the required privileges...

6.3CVSS5.8AI score0.00305EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/12 4:15 p.m.•51 views

CVE-2024-5759

An improper privilege management vulnerability exists in Tenable Security Center where an authenticated, remote attacker could view unauthorized objects and launch scans without having the required privileges...

6.3CVSS0.00305EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/12 4:00 p.m.•87 views

CVE-2024-5759

CVE-2024-5759 affects Tenable Security Center. It is an improper privilege management vulnerability where an authenticated, remote attacker could view unauthorized objects and initiate scans without the required privileges. The issue is addressed in Security Center 6.4.0 (upgrade to 6.4.0 or late...

6.3CVSS6.3AI score0.00305EPSS
SaveExploits0References1Affected Software1
Citrix
Citrix
•added 2024/06/12 12:00 a.m.•19 views

Enhanced SSO Feature does not work. Applications fail to launch on Windows 11 devices.

After setting up Enhanced SSO according to https://docs.citrix.com/en-us/citrix-workspace-app-for-windows/domain-passthrough-for-single-sign-on , it doesn't work. When trying to launch an application, nothing happens. When using traditional SSO using the old SSONVR.exe mechanism, there is no issu...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/06/12 12:00 a.m.•18 views

PT-2024-37126 · Tenable · Tenable Security Center

Name of the Vulnerable Software and Affected Versions: Tenable Security Center affected versions not specified Description: An improper privilege management issue exists, allowing an authenticated, remote attacker to view unauthorized objects and launch scans without the required privileges...

6.3CVSS6.7AI score0.00305EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/11 12:00 a.m.•4 views

CVE-2024-34405: Improper Control of Generation of Code

Improper deep link validation in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to launch an arbitrary URL within the app...

9.1CVSS8.2AI score0.00472EPSS
SaveExploits0References1
HPE Security Bulletins
HPE Security Bulletins
•added 2024/06/06 12:00 a.m.•15 views

HPESBCR04653 rev.1 - HPE Cray Parallel Application Launch Service (PALS), Authentication Bypass

Potential Security Impact: Remote: Gain Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Cray System Management Software - PALS 1.0.0-1.2.13, 1.3.0-1.3.2 are vulnerable CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-22441 |...

9.8CVSS6.1AI score0.00493EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2024/06/03 1:36 p.m.•56 views

Security Bulletin: Multiple vulnerabilities in eclipse jetty affect IBM Business Automation Workflow

Summary IBM Business Automation Workflow packages a vulnerable version of the eclipse jetty library. Vulnerability Details CVEID:CVE-2020-27216 DESCRIPTION: Eclipse Jetty could allow a local authenticated attacker to gain elevated privileges on the system, caused by a race condition in the creati...

7.8CVSS7.7AI score0.53861EPSS
SaveExploits3Affected Software2
SUSE CVE
SUSE CVE
•added 2024/05/29 9:54 a.m.•13 views

SUSE CVE-2024-36472

In GNOME Shell through 45.7, a portal helper can be launched automatically without user confirmation based on network responses provided by an adversary e.g., an adversary who controls the local Wi-Fi network, and subsequently loads untrusted JavaScript code, which may lead to resource consumptio...

6.5CVSS6.7AI score0.00343EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2024/05/29 8:50 a.m.•104 views

CVE-2024-36472

A vulnerability was found in GNOME Shell. A portal helper can be launched automatically without user confirmation based on the network responses provided by an adversary...

7.5CVSS6.3AI score0.00343EPSS
SaveExploits0References4
OSV
OSV
•added 2024/05/28 4:15 p.m.•6 views

DEBIAN-CVE-2024-36472

In GNOME Shell through 45.7, a portal helper can be launched automatically without user confirmation based on network responses provided by an adversary e.g., an adversary who controls the local Wi-Fi network, and subsequently loads untrusted JavaScript code, which may lead to resource consumptio...

6.5CVSS6.5AI score0.00343EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2024/05/28 4:15 p.m.•545 views

CVE-2024-36472

In GNOME Shell through 45.7, a portal helper can be launched automatically without user confirmation based on network responses provided by an adversary e.g., an adversary who controls the local Wi-Fi network, and subsequently loads untrusted JavaScript code, which may lead to resource consumptio...

6.5CVSS6.7AI score0.00343EPSS
SaveExploits0References2
OSV
OSV
•added 2024/05/28 4:05 p.m.•38 views

CVE-2024-36472

In GNOME Shell through 45.7, a portal helper can be launched automatically without user confirmation based on network responses provided by an adversary e.g., an adversary who controls the local Wi-Fi network, and subsequently loads untrusted JavaScript code, which may lead to resource consumptio...

6.5CVSS6.6AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/05/28 12:00 a.m.•13 views

PT-2024-4190

Name of the Vulnerable Software and Affected Versions GNOME Shell versions prior to 45.8 Description The issue allows a portal helper to be launched automatically without user confirmation based on network responses provided by an adversary, such as one controlling the local Wi-Fi network. This c...

6.5CVSS6.2AI score0.00343EPSS
SaveExploits0References45
OSV
OSV
•added 2024/05/24 11:07 a.m.•11 views

OESA-2024-1632 nautilus security update

It's easier to manage your files for the GNOME desktop. Ability to browse directories on local and remote systems. preview folders and launch related programs. It is also handle icons on the GNOME desktop. Security Fixes: GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename...

5.5CVSS6.8AI score0.00329EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2024/05/23 3:55 p.m.•8 views

SUSE CVE-2021-47389

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: fix missing sevdecommission in sevreceivestart DECOMMISSION the current SEV context if binding an ASID fails after RECEIVESTART. Per AMD's SEV API, RECEIVESTART generates a new guest context and thus needs to be paired...

5.6CVSS6.6AI score0.00213EPSS
SaveExploits0References8
Citrix
Citrix
•added 2024/05/22 12:00 a.m.•21 views

Launch failures after upgrading to CWA 2402

Users on Citrix Workspace App for Windows 2402 and have Real-Time Media Engine RTME installed on endpoint devices older than 2.9.700 may encounter session launch failures...

7.3AI score
SaveExploits0
Rows per page
Query Builder