Lucene search
+L

9 matches found

OSV
OSV
•added 2026/09/16 8:32 p.m.•15 views

CVE-2026-92753 PatrowlManager through 1.8.4 Authorization Bypass via Events API

PatrowlManager through 1.8.4 contains an authorization bypass vulnerability in the events and alerts API endpoints that lack ownership filtering. Authenticated attackers can read platform event history, delete arbitrary events, and modify alerts belonging to other users...

7.1CVSS6AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•10 views

CVE-2026-92753: Missing Authorization

PatrowlManager through 1.8.4 contains an authorization bypass vulnerability in the events and alerts API endpoints that lack ownership filtering. Authenticated attackers can read platform event history, delete arbitrary events, and modify alerts belonging to other users...

7.1CVSS6AI score0.00377EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/11/07 1:46 p.m.•19 views

CVE-2025-61945

Radiometrics VizAir is vulnerable to any remote attacker via access to the admin panel of the VizAir system without authentication. Once inside, the attacker can modify critical weather parameters such as wind shear alerts, inversion depth, and CAPE values, which are essential for accurate weathe...

10CVSS7AI score0.00769EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2005-2188

Malware in sbrugna...

4.6CVSS6.4AI score0.00639EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2022/08/12 12:00 a.m.•18 views

The vulnerability of the StorageGRID object storage software, related to errors in information processing, allows a perpetrator to gain unauthorized access to protected information or modify the content of notifications.

The vulnerability of the StorageGRID object storage software lies in errors during information processing. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information or modify the content of notifications...

6.5CVSS6.5AI score0.00733EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2005/07/11 4:00 a.m.•29 views

CVE-2005-2187

McAfee IntruShield Security Management System allows remote authenticated users to access the "Generate Reports" feature and modify alerts by setting the Access option to true, as demonstrated using the 1 fullAccess or 2 fullAccessRight parameter in reports-column-center.jsp, or 3 fullAccess...

4.6CVSS6.3AI score0.00639EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2005/07/10 4:00 a.m.•42 views

CVE-2005-2187

McAfee IntruShield Security Management System allows remote authenticated users to access the "Generate Reports" feature and modify alerts by setting the Access option to true, as demonstrated using the 1 fullAccess or 2 fullAccessRight parameter in reports-column-center.jsp, or 3 fullAccess...

6.3AI score0.00639EPSS
SaveExploits0References4
CVE
CVE
•added 2003/04/02 5:00 a.m.•69 views

CVE-2000-0502

Mcafee VirusScan 4.03 is affected by a local-access restriction flaw in the alert text file before it is sent to the Central Alert Server, allowing local users to modify alerts and impact the integrity of alert data. The root cause is improper access restriction of the alert file, enabling unauth...

2.1CVSS6.8AI score0.00403EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/04/02 12:00 a.m.•8 views

CVE-2000-0502: Undefined Security Weakness

Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Server, which allows local users to modify alerts in an arbitrary fashion...

2.1CVSS5.9AI score0.00403EPSS
SaveExploits0References1
Rows per page
Query Builder