Lucene search
+L

3782 matches found

Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.8 views

PT-2023-15647 · Unknown · Audio Service

Name of the Vulnerable Software and Affected Versions: Audio service affected versions not specified Description: The issue is related to a possible missing permission check in the audio service. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS7.5AI score0.0009EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.7 views

PT-2023-15744 · Unknown · Audio Service

Name of the Vulnerable Software and Affected Versions: Audio service affected versions not specified Description: The issue is related to a possible missing permission check in the audio service. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS7.1AI score0.0009EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.7 views

PT-2023-15370 · Unknown · Soter Service

Name of the Vulnerable Software and Affected Versions: soter service affected versions not specified Description: The issue is related to a possible missing permission check in the soter service. This could lead to local denial of service with no additional execution privileges. Recommendations: ...

5.5CVSS5.2AI score0.00087EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.9 views

PT-2023-15752 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible missing permission check in the dialer service. This could lead to a local denial of service with no additional...

5.5CVSS5.3AI score0.00087EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.9 views

PT-2023-15640 · Unknown · Audio Service

Name of the Vulnerable Software and Affected Versions: Audio service affected versions not specified Description: The issue is related to a possible missing permission check in the audio service. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS7.5AI score0.0009EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.7 views

PT-2023-15639 · Unknown · Audio Service

Name of the Vulnerable Software and Affected Versions: Audio service affected versions not specified Description: The issue is related to a possible missing permission check in the audio service, which could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS7.6AI score0.0009EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.7 views

PT-2023-15626 · Unknown · Soter Service

Name of the Vulnerable Software and Affected Versions: Soter service affected versions not specified Description: The issue is related to a possible missing permission check in the soter service. This could lead to a local denial of service with no additional execution privileges. Recommendations...

5.5CVSS5.2AI score0.00092EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.6 views

PT-2023-15747 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible missing permission check in the dialer service. This could lead to local information disclosure with no additional...

5.5CVSS6.7AI score0.00089EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.9 views

PT-2023-15746

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a possible missing permission check in the dialer service. This could lead to local information disclosure with no additional...

5.5CVSS5.8AI score0.00089EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.6 views

PT-2023-15638 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a possible missing permission check in the telephony service. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS6.6AI score0.00089EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.7 views

PT-2023-15755 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible missing permission check in the dialer service. This could lead to a local denial of service with no additional...

5.5CVSS5.3AI score0.00087EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.5 views

PT-2023-15645 · Unknown · Audio Service

Name of the Vulnerable Software and Affected Versions: Audio service affected versions not specified Description: The issue is related to a possible missing permission check in the audio service. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS7.5AI score0.0009EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.5 views

PT-2023-15761 · Unknown · Srtd Service

Name of the Vulnerable Software and Affected Versions: srtd service affected versions not specified Description: The issue is related to a possible missing permission check in the srtd service. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS7.5AI score0.00114EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.6 views

PT-2023-15642 · Unknown · Audio Service

Name of the Vulnerable Software and Affected Versions: Audio service affected versions not specified Description: The issue is related to a possible missing permission check in the audio service, which could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS7.5AI score0.0009EPSS
SaveExploits0References2
OSV
OSV
added 2023/05/01 12:0 a.m.35 views

ASB-A-259938771

In applySyncTransaction of WindowOrganizer.java, a missing permission check could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.1AI score0.00082EPSS
SaveExploits0References2
OSV
OSV
added 2023/05/01 12:0 a.m.28 views

ASB-A-259385017

In retrieveAppEntry of NotificationAccessDetails.java, there is a missing permission check. This could lead to local escalation of privilege across user boundaries with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.7AI score0.00086EPSS
SaveExploits0References2
OSV
OSV
added 2023/04/26 7:47 p.m.23 views

GHSA-JH3W-6JP2-VQQM Missing permission check of canView in GridFieldPrintButton

The GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorised to access. Upgrade to silverstripe/framework 4.12.5 or above to address the issue. Reported by Stephan Bauer from relaxt...

4.3CVSS4.3AI score0.00486EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2023/04/26 7:47 p.m.35 views

Missing permission check of canView in GridFieldPrintButton

The GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorised to access. Upgrade to silverstripe/framework 4.12.5 or above to address the issue. Reported by Stephan Bauer from relaxt...

4.3CVSS5.9AI score0.00486EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2023/04/26 1:57 p.m.26 views

CVE-2023-22728 Silverstripe Framework has missing permission check of canView in GridFieldPrintButton

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorise...

4.3CVSS4.8AI score0.00486EPSS
SaveExploits0References2
Friends Of PHP
Friends Of PHP
added 2023/04/25 11:24 p.m.26 views

CVE-2023-22728 - Missing permission check in GridFieldPrintButton

More info at https://www.silverstripe.org/download/security-releases/cve-2023-22728...

4.3CVSS7.2AI score0.00486EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder