Lucene search
+L

17593 matches found

OSV
OSV
added 2023/11/23 6:15 p.m.28 views

CVE-2023-5972

A null pointer dereference flaw was found in the nftinner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system...

7.8CVSS7.5AI score
SaveExploits0References4
Prion
Prion
added 2023/11/23 6:15 p.m.20 views

Null pointer dereference

A null pointer dereference flaw was found in the nftinner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system...

4.3CVSS7AI score0.00276EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2023/11/23 6:15 p.m.11 views

UBUNTU-CVE-2023-5972

A null pointer dereference flaw was found in the nftinner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system...

7.8CVSS6.5AI score0.00276EPSS
SaveExploits0References9
CVE
CVE
added 2023/11/23 5:21 p.m.165 views

CVE-2023-5972

CVE-2023-5972 concerns a null pointer dereference in the netfilter nft_inner.c path of the Linux kernel. A local attacker could crash the system or escalate privileges via improper handling of nft_inner_num/nft_inner_expr_name attributes in inner tunnel netlink attributes, as described in the CVE...

7.8CVSS6.9AI score0.00276EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
added 2023/11/23 5:21 p.m.100 views

CVE-2023-5972

A null pointer dereference flaw was found in the nftinner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system...

7.8CVSS6.2AI score0.00276EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2023/11/23 3:51 p.m.50 views

CVE-2023-5972

A null pointer dereference flaw was found in the nftinner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system...

5.5CVSS7.2AI score0.00276EPSS
SaveExploits0References5
NVD
NVD
added 2023/11/23 7:15 a.m.24 views

CVE-2023-44290

Dell Command | Monitor versions prior to 10.10.0, contain an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability while repairing/changing installation, leading to privilege escalation...

7.8CVSS0.00196EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/23 7:15 a.m.20 views

CVE-2023-44289

Dell Command | Configure versions prior to 4.11.0, contain an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability while repairing/changing installation, leading to privilege escalation...

7.8CVSS0.00196EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/23 7:15 a.m.17 views

Improper access control

Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local malicious user could potentially modify files inside installation folder during application upgrade, leading to privilege escalation...

4.3CVSS7.1AI score0.00219EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/23 6:41 a.m.5 views

CVE-2023-44289

Dell Command | Configure versions prior to 4.11.0, contain an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability while repairing/changing installation, leading to privilege escalation...

7.3CVSS7.6AI score0.00196EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/23 6:27 a.m.30 views

CVE-2023-43086

Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local malicious user could potentially modify files inside installation folder during application upgrade, leading to privilege escalation...

7.3CVSS7.8AI score0.00219EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/23 12:00 a.m.11 views

PT-2023-29191 · Dell · Dell Command Configure

Name of the Vulnerable Software and Affected Versions: Dell Command | Configure versions prior to 4.11.0 Description: The issue is related to improper access control, which could be exploited by a local malicious standard user during the repair or change of installation, potentially leading to...

7.8CVSS7.5AI score0.00196EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/22 7:15 p.m.25 views

CVE-2023-25682

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 247034...

6.2CVSS0.00228EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/22 7:15 p.m.27 views

Design/Logic Flaw

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 247034...

1.7CVSS5.8AI score0.00228EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/11/22 12:15 p.m.28 views

CVE-2023-3104

Lack of authentication vulnerability. An unauthenticated local user is able to see through the cameras using the web server due to the lack of any form of authentication...

7.5CVSS0.00549EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/22 12:15 p.m.21 views

Authentication flaw

Lack of authentication vulnerability. An unauthenticated local user is able to see through the cameras using the web server due to the lack of any form of authentication...

5CVSS7.4AI score0.00549EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/22 11:54 a.m.67 views

CVE-2023-3104

The CVE-2023-3104 issue relates to Unitree Robotics A1 cameras, described as a lack of authentication that allows an unauthenticated local user to view through the cameras via the web server. The connected records corroborate a basic authentication bypass affecting the device’s web interface, wit...

7.5CVSS6.6AI score0.00549EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/22 12:00 a.m.15 views

PT-2023-23118 · Unitreerobotics +1 · A1 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a lack of authentication, allowing an unauthenticated local user to access cameras through the web server without any form of authentication. Recommendations...

7.5CVSS6.9AI score0.00549EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2023/11/21 4:31 p.m.33 views

Security Bulletin: IBM Sterling B2B Integrator is vulnerable to information disclosure (CVE-2023-25682)

Summary An information disclosure security vulnerabilty has been addressed in IBM Sterling B2B Integrator. Vulnerability Details CVEID: CVE-2023-25682 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition stores potentially sensitive information in log files that could be read by a local user...

6.2CVSS6.2AI score0.00228EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
added 2023/11/21 3:47 p.m.13 views

kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route

There are 3 CVEs for the use-after-free flaw found in net/sched/clsfw.c in classifiers clsfw, clsu32, and clsroute in the Linux Kernel: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. A local user could use any of these flaws to crash the system or potentially escalate their privileges on the system...

7.8CVSS6.7AI score0.00588EPSS
SaveExploits0References8
Rows per page
Query Builder