Lucene search
+L

1851 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 5:18 p.m.2 views

CVE-2020-0810

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system.An attacker could then run a specially...

7.8CVSS7.4AI score0.01002EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:30 p.m.8 views

CVE-2020-23282

SQL injection in Logon Page in MV's mConnect application, v02.001.00, allows an attacker to use a non existing user with a generic password to connect to the application and get access to unauthorized information...

7.5CVSS8.1AI score0.01282EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/22 3:40 p.m.23 views

CVE-2020-5855

When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorized users who have physical access to an authorized user's machine can get shell access under unprivileged user...

4.6CVSS6.7AI score0.00329EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/22 11:15 a.m.6 views

CVE-2025-3836

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report...

8.3CVSS5.8AI score0.0459EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/22 11:15 a.m.16 views

CVE-2025-3836

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report...

8.3CVSS0.0459EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/22 10:38 a.m.8 views

CVE-2025-3836 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report...

8.3CVSS8.6AI score0.0459EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/22 10:38 a.m.69 views

CVE-2025-3836

CVE-2025-3836 affects Zohocorp ManageEngine ADAudit Plus versions 8.5.10 and earlier, with an authenticated SQL injection in the logon events aggregate report. The root cause is an injection vulnerability exploitable by an authenticated user when accessing the logon events aggregate report. The i...

8.3CVSS8.6AI score0.0459EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/21 7:35 p.m.9 views

CVE-2009-2435

The Sametime server in IBM Lotus Instant Messaging and Web Conferencing 6.5.1 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to enumerate valid usernames...

5CVSS6.9AI score0.01064EPSS
SaveExploits0References1
Citrix
Citrix
added 2025/05/12 12:0 a.m.16 views

Fresh User layers hang/freeze on first logon

When logging on with a fresh profile/ user layer, the UL is created but logon process comes to a halt at a black screen force log off and log back fix the issue, the session is established and user desktop is shown...

7.1AI score
SaveExploits0
Citrix
Citrix
added 2025/05/01 12:0 a.m.12 views

Citrix FAS Cloud: Session logon hangs after password change when launching application

User has the password expired or "set at next logon" flag is set. However, user is able to login to workspace due to the cached credentials being used. When user launches an app they are prompted to change their AD password. Once this is complete, message to confirm password change is successful,...

7.3AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/04/30 9:54 p.m.8 views

Malicious code in telepycore (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c3dcd0a2a8162a703ef9d7b90566e4c55116a7f4f4d3b8759ca0d2640acd4ee4 Package can only be used requires additional triggering to install a remote executable, ensure it starts on logon and name mimic network service. Though...

7.1AI score
SaveExploits0References7
OSV
OSV
added 2025/04/30 9:54 p.m.4 views

MAL-2025-191889 Malicious code in telepycore (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c3dcd0a2a8162a703ef9d7b90566e4c55116a7f4f4d3b8759ca0d2640acd4ee4 Package can only be used requires additional triggering to install a remote executable, ensure it starts on logon and name mimic network service. Though...

7AI score
SaveExploits0References7
Citrix
Citrix
added 2025/04/30 12:0 a.m.13 views

LVDA 2402 | Ubuntu VDAs taking a long time (2-3min) to login

Customer is experiencing unusual slow logon when launching a published desktop hosted on Ubuntu It typically takes about 2 to 3 minutes to login...

7AI score
SaveExploits0
Citrix
Citrix
added 2025/04/16 12:0 a.m.13 views

CWA smartcard logon error 'Can’t read smart card' on client with SIM card

There is a client with 2 smart cards . A physical smart card and an integrated eSIM . When CWA Windows tries to autenticate with smartcard the user gets an error that says "Can't read smart card. Please contact your IT administrator" . If we remove the SIM card from the client , the authenticatio...

6.9AI score
SaveExploits0
OSV
OSV
added 2025/04/15 9:15 p.m.5 views

CVE-2025-30690

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

7.2CVSS5.8AI score0.002EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/04/15 9:15 p.m.12 views

CVE-2025-30690

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

7.2CVSS7.1AI score0.002EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/04/15 9:15 p.m.3 views

CVE-2025-21578

Vulnerability in Oracle Secure Backup component: General. Supported versions that are affected are 12.1.0.1, 12.1.0.2, 12.1.0.3, 18.1.0.0, 18.1.0.1 and 18.1.0.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Secure Backup executes t...

6.7CVSS7.1AI score0.00194EPSS
SaveExploits0References2Affected Software1
Microsoft KB
Microsoft KB
added 2025/04/11 12:0 a.m.11 views

April 11, 2025—KB5058922 (OS Build 17763.7240) Out-of-band

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2025/04/11 12:0 a.m.6 views

April 11, 2025—KB5058921 (OS Build 14393.7973) Out-of-band

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2025/04/11 12:0 a.m.16 views

April 11, 2025—KB5058920 (OS Build 20348.3561) Out-of-band

None None...

6.1AI score
SaveExploits0
Rows per page
Query Builder