Lucene search
+L

733 matches found

OSV
OSV
added 2023/11/03 7:15 a.m.6 views

CVE-2023-41356

NCSIST ManageEngine Mobile Device ManagerMDM APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files...

6.5CVSS5.9AI score0.00855EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/03 7:15 a.m.20 views

CVE-2023-41356

NCSIST ManageEngine Mobile Device ManagerMDM APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files...

6.5CVSS6.7AI score0.00855EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/03 6:18 a.m.36 views

CVE-2023-41356 WisdomGarden Tronclass ilearn - Path Traversal

NCSIST ManageEngine Mobile Device ManagerMDM APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files...

6.5CVSS6.9AI score0.00855EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/11/03 6:18 a.m.11 views

CVE-2023-41356 WisdomGarden Tronclass ilearn - Path Traversal

NCSIST ManageEngine Mobile Device ManagerMDM APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files...

6.5CVSS6.7AI score0.00855EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/03 6:18 a.m.74 views

CVE-2023-41356

CVE-2023-41356 concerns the ManageEngine Mobile Device Manager (MDM) APP and describes a path traversal vulnerability in a special function. An unauthenticated remote attacker can bypass authentication and read arbitrary system files. The NVD entry lists a CVSSv3.1 base score of 6.5 (Medium) with...

6.5CVSS6.7AI score0.00855EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/03 6:03 a.m.27 views

CVE-2023-41344 NCSIST ManageEngine MDM - Path Traversal

NCSIST ManageEngine Mobile Device ManagerMDM APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files...

7.5CVSS7.9AI score0.0098EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/03 12:00 a.m.13 views

Ivanti Avalanche security breach

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche, which stems from a lack of authentication local lifting...

7.8CVSS6.7AI score0.0046EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/03 12:00 a.m.11 views

Ivanti Avalanche security breach

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche that stems from an incorrect default privilege allowing local...

7.8CVSS6.8AI score0.00605EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/03 12:00 a.m.12 views

Ivanti Avalanche security breach

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets, and barcode scanners. A security vulnerability exists in Ivanti Avalanche that stems from a lack of authentication local privilege...

7.8CVSS6.9AI score0.0046EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/03 12:00 a.m.11 views

Ivanti Avalanche security breach

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets, and barcode scanners. A security vulnerability exists in Ivanti Avalanche, which is caused by an Unrestricted File Upload Local Privileg...

7.8CVSS6.8AI score0.00695EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/03 12:00 a.m.6 views

NCSIST ManageEngine Mobile Device Manager Security Vulnerability

NCSIST ManageEngine Mobile Device Manager NCSIST ManageEngine MDM is a mobile device manager organized by China's National Institute of Zhongshan Science and Technology NCSIST. A security vulnerability exists in NCSIST ManageEngine Mobile Device Manager that stems from a path traversal...

7.5CVSS7AI score0.0098EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/11/02 12:00 a.m.7 views

PT-2023-27924 · Zoho · Manageengine Mobile Device Manager

Name of the Vulnerable Software and Affected Versions: ManageEngine Mobile Device ManagerMDM APP affected versions not specified Description: The issue is related to a path traversal vulnerability in a special function of the ManageEngine Mobile Device ManagerMDM APP. This vulnerability can be...

6.5CVSS7.4AI score0.00855EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/11/02 12:00 a.m.5 views

PT-2023-27917 · Zoho · Manageengine Mobile Device Manager

Name of the Vulnerable Software and Affected Versions: NCSIST ManageEngine Mobile Device ManagerMDM APP affected versions not specified Description: The issue is related to a path traversal vulnerability in a special function of the NCSIST ManageEngine Mobile Device ManagerMDM APP. This...

7.5CVSS7.6AI score0.0098EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2023/10/04 12:00 a.m.25 views

Apple iTunes Incorrect Permission Assignment Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Apple iTunes. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Apple Mobile Device...

7.8CVSS7AI score0.00561EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/09/28 12:00 a.m.17 views

The vulnerability of the dumpHeap method in the Avalanche mobile device management system allows a hacker to escalate their privileges.

The vulnerability of the dumpHeap method in the Avalanche mobile device management system is related to errors during the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

10CVSS7.4AI score0.02445EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
added 2023/09/27 12:00 a.m.8 views

LG Mobile Security Breach

LG mobile is a series of mobile device products from South Korea's Luckin LG. A security vulnerability exists in LG Mobile. An attacker could use this vulnerability to change the file access mode to globally readable and globally writable...

7.8CVSS6.7AI score0.00098EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/09/26 12:00 a.m.14 views

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple iOS 17 and iPadOS 17 contain security vulnerabilities. A security vulnerability exists in Apple iOS 17 and iPadOS 17. An...

7.8CVSS6.7AI score0.00341EPSS
SaveExploits0References9
Citrix
Citrix
added 2023/08/22 12:00 a.m.14 views

How to bypass EPA check on mobile device using nfactor Authentication

This article describe how to bypass EPA check on Mobile device using nFactor Authentication.Mobile devices will not run the EPA scan if you configure Pre-authentication for EPA scan. Mobile device can always hit policy and it will fail...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/08/17 12:00 a.m.11 views

The vulnerability of Windows Mobile Device Management for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of Windows Mobile Device Management for Windows operating systems relates to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.7AI score0.01304EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/08/08 6:15 p.m.5 views

CVE-2023-38186

Windows Mobile Device Management Elevation of Privilege Vulnerability...

9.8CVSS7.4AI score0.01304EPSS
SaveExploits0References2Affected Software5
Rows per page
Query Builder