Lucene search
+L

979 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 3:50 p.m.14 views

CVE-2020-15372

A vulnerability in the command-line interface in Brocade Fabric OS before Brocade Fabric OS v8.2.2a1, 8.2.2c, v7.4.2g, v8.2.0CBN3, v8.2.1e, v8.1.2k, v9.0.0, could allow a local authenticated attacker to modify shell variables, which may lead to an escalation of privileges or bypassing the logging...

5.5CVSS6.8AI score0.00338EPSS
SaveExploits0
NVD
NVD
added 2025/05/13 3:15 p.m.23 views

CVE-2025-22460

Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privileges...

7.8CVSS0.00325EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/29 2:38 a.m.44 views

Security Bulletin: IBM Security Guardium is affected by multiple kernel vulnerabilities

Summary IBM Security Guardium has addressed these vulnerabilities in an update Vulnerability Details CVEID:CVE-2024-26669 DESCRIPTION: Linux Kernel could allow a local authenticated attacker to obtain sensitive information, caused by a chain template offload flaw in net/sched. By sending a...

7.8CVSS9.3AI score0.02224EPSS
SaveExploits1Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/26 6:56 a.m.13 views

CVE-2025-32730

Use of hard-coded cryptographic key vulnerability in i-PRO Configuration Tool affects the network system for i-PRO Co., Ltd. surveillance cameras and recorders. This vulnerability allows a local authenticated attacker to use the authentication information from the last connected surveillance...

6.8CVSS6.5AI score0.00172EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/24 7:15 a.m.21 views

CVE-2025-32730

Use of hard-coded cryptographic key vulnerability in i-PRO Configuration Tool affects the network system for i-PRO Co., Ltd. surveillance cameras and recorders. This vulnerability allows a local authenticated attacker to use the authentication information from the last connected surveillance...

6.8CVSS0.00172EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/04/24 6:38 a.m.35 views

CVE-2025-32730

Use of hard-coded cryptographic key vulnerability in i-PRO Configuration Tool affects the network system for i-PRO Co., Ltd. surveillance cameras and recorders. This vulnerability allows a local authenticated attacker to use the authentication information from the last connected surveillance...

6.8CVSS0.00172EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/04/24 12:00 a.m.22 views

JVN#84627857: i-PRO Configuration Tool vulnerable to use of hard-coded cryptographic key

i-PRO Configuration Tool provided by i-PRO Co., Ltd. contains a vulnerability below. Use of hard-coded cryptographic key CWE-321 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N Base Score: 6.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Base Score: 5.5 CVE-2025-32730 Impact...

6.8CVSS6.7AI score0.00172EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/15 3:22 a.m.46 views

Security Bulletin: IBM Security Guardium is affected by kernel vulnerabilities

Summary IBM Security Guardium has addressed these vulnerabilities in an update Vulnerability Details CVEID:CVE-2024-26837 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a race condition between generation of the list of MDB events to replay with the creation of new grou...

7.8CVSS8.6AI score0.00646EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/15 3:12 a.m.49 views

Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Storage Copy Data Management.

Summary IBM Storage Copy Data Management can be affected by vulnerabilities in Linux Kernel. Vulnerabilities include a local authenticated attacker could exploit these vulnerabilities to cause a denial of service condition as described by the CVEs in the "Vulnerability Details" section...

7.8CVSS7.8AI score0.00292EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/17 1:05 p.m.12 views

CVE-2021-22126

A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 to 8.3.2, version 8.2.7 to 8.2.6 may allow a local, authenticated attacker to connect to the managed Access Point Meru AP and FortiAP-U as root using the default hard-coded...

6.7CVSS6.5AI score0.00161EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/11 3:15 p.m.26 views

CVE-2025-22454

Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges...

7.8CVSS0.00299EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/11 3:15 p.m.9 views

CVE-2025-22454

Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges...

7.8CVSS5.8AI score0.00299EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/11 2:11 p.m.32 views

CVE-2025-22454

Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges...

7.8CVSS0.00299EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/11 2:11 p.m.10 views

CVE-2025-22454

Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges...

7.8CVSS7.5AI score0.00299EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/26 1:41 a.m.10 views

CVE-2025-0889 Privilege Management for Windows – Elevation of Privilege

Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain circumstances where an EPM policy allows for automatic privilege elevation of a user process...

7.2CVSS6.4AI score0.00201EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/13 4:00 p.m.19 views

CVE-2024-13813

Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to delete arbitrary files...

7.1CVSS6.5AI score0.00212EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/12 12:00 a.m.16 views

Intel QuickAssist Technology 缓冲区错误漏洞

Intel QuickAssist Technology is an Intel technology that improves server utilization. The technology improves server efficiency by sharing the stress of compute-intensive tasks to equalize server pressure. A buffer error vulnerability exists in Intel QuickAssist Technology versions prior to 2.2.0...

7.8CVSS7.5AI score0.00242EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/12 12:00 a.m.10 views

Intel High Level Synthesis Compiler 代码问题漏洞

Intel High Level Synthesis Compiler is a High Level Synthesis HLS tool from Intel Corporation. A code issue vulnerability exists in Intel High Level Synthesis Compiler prior to version 24.2, which stems from the presence of an uncontrolled search path that could allow an authenticated user to...

6.7CVSS6.7AI score0.00199EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/11 4:15 p.m.28 views

CVE-2024-13813

Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to delete arbitrary files...

7.1CVSS0.00212EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/11 4:15 p.m.33 views

CVE-2024-13843

Cleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin privileges to read sensitive data...

6CVSS0.00358EPSS
SaveExploits0References1
Rows per page
Query Builder