Lucene search
K

543 matches found

CNNVD
CNNVD
added 2025/01/23 12:0 a.m.2 views

HCL BigFix Patch Management 代码问题漏洞

HCL BigFix Patch Management is a comprehensive patch management solution from HCL Corporation, USA, designed to help organizations effectively manage and deploy security and non-security patches for operating systems and applications. A security vulnerability exists in HCL BigFix Patch Management...

2.5CVSS6.8AI score0.00116EPSS
Exploits0References2
Qualys Blog
Qualys Blog
added 2025/01/07 5:1 p.m.14 views

Secure, Efficient, Cost-Effective: How Qualys Patch Management Delivers ROI

As demonstrated by real user reviews from PeerSpot Organizations face increasing challenges in managing cyber threats and deploying the tools necessary to detect, protect, and mitigate vulnerabilities. Patch management, a critical component of cybersecurity, often falls victim to resource...

7.2AI score
Exploits0
NVD
NVD
added 2024/12/11 10:15 a.m.13 views

CVE-2024-12363

Insufficient permissions in the TeamViewer Patch & Asset Management component prior to version 24.12 on Windows allows a local authenticated user to delete arbitrary files. TeamViewer Patch & Asset Management is part of TeamViewer Remote Management...

7.1CVSS0.00142EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/11 9:32 a.m.7 views

CVE-2024-12363 Insufficient permissions in the TeamViewer Patch & Asset Management component

Insufficient permissions in the TeamViewer Patch & Asset Management component prior to version 24.12 on Windows allows a local authenticated user to delete arbitrary files. TeamViewer Patch & Asset Management is part of TeamViewer Remote Management...

7.1CVSS6.7AI score0.00142EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/11 9:32 a.m.11 views

CVE-2024-12363 Insufficient permissions in the TeamViewer Patch & Asset Management component

Insufficient permissions in the TeamViewer Patch & Asset Management component prior to version 24.12 on Windows allows a local authenticated user to delete arbitrary files. TeamViewer Patch & Asset Management is part of TeamViewer Remote Management...

7.1CVSS0.00142EPSS
Exploits0References1
CVE
CVE
added 2024/12/11 9:32 a.m.53 views

CVE-2024-12363

The CVE-2024-12363 issue affects TeamViewer Patch & Asset Management (part of TeamViewer Remote Management) in Windows prior to version 24.12. The vulnerability stems from insufficient permissions, allowing a local authenticated user to delete arbitrary files. Reported CVSSv3.1 base score is 7.1 ...

7.1CVSS6.8AI score0.00142EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/11 12:0 a.m.2 views

TeamViewer 安全漏洞

TeamViewer is software from TeamViewer, Inc. for remote access as well as remote control and remote maintenance of computers and other end devices. A security vulnerability exists in TeamViewer prior to version 24.12, which stems from insufficient permissions in the Patch and Asset Management...

7.1CVSS6.8AI score0.00142EPSS
Exploits0References1
CISA
CISA
added 2024/12/10 12:0 p.m.4 views

Ivanti Releases Security Updates for Multiple Products

Ivanti released security updates to address vulnerabilities in Ivanti Cloud Service Application, Ivanti Desktop and Server Management DSM, Ivanti Connect Secure and Police Secure, Ivanti Sentry, and Ivanti Patch SDK. CISA encourages users and administrators to review the following Ivanti security...

7.4AI score
Exploits0
Malwarebytes
Malwarebytes
added 2024/11/06 1:42 p.m.5 views

8 security tips for small businesses

Small businesses and startups are known to face some extra challenges when it comes to cybersecurity. Because they don’t have the size or budget to have a fully-fledged dedicated security team, it often comes down to one person that doesn’t have the time to do everything that is recommended or ev...

7.6AI score
Exploits0
Malwarebytes
Malwarebytes
added 2024/11/06 1:42 p.m.6 views

8 security tips for small businesses

Small businesses and startups are known to face some extra challenges when it comes to cybersecurity. Because they don’t have the size or budget to have a fully-fledged dedicated security team, it often comes down to one person that doesn’t have the time to do everything that is recommended or ev...

7.6AI score
Exploits0
Securelist
Securelist
added 2024/10/29 2:0 p.m.9 views

Risk reduction redefined: How compromise assessment helps strengthen cyberdefenses

Introduction Organizations often rely on a layered defense strategy, yet breaches still occur, slipping past multiple levels of protection unnoticed. This is where compromise assessment enters the game. The primary objective of these services is risk reduction. They help discover active...

7.8AI score
Exploits0
OSV
OSV
added 2024/09/10 9:15 p.m.1 views

CVE-2024-8322

Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker to access restricted functionality...

8.8CVSS7.3AI score0.01083EPSS
Exploits0References1
NVD
NVD
added 2024/09/10 9:15 p.m.25 views

CVE-2024-8322

Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker to access restricted functionality...

8.8CVSS0.01083EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/09/10 8:59 p.m.25 views

CVE-2024-8322

Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker to access restricted functionality...

4.3CVSS0.01083EPSS
Exploits0References1
CVE
CVE
added 2024/09/10 8:59 p.m.48 views

CVE-2024-8322

Ivanti Endpoint Manager (EPM) is affected by CVE-2024-8322 due to weak authentication in Patch Management prior to 2022 SU6 or the 2024 September update. The issue allows a remote authenticated attacker to access restricted functionality. Public references describe it as part of a set of EPM vuln...

8.8CVSS4.6AI score0.01083EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/10 8:59 p.m.14 views

CVE-2024-8322

Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker to access restricted functionality...

4.3CVSS6.9AI score0.01083EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/09/10 12:0 a.m.3 views

Ivanti EPM 安全漏洞

Ivanti EPM is a one-stop shop for managing user profiles and all client devices from Ivanti USA. A security vulnerability exists in Ivanti EPM that stems from a weak authentication issue contained in the patch management. An authenticated remote attacker could exploit the vulnerability to gain...

8.8CVSS9.1AI score0.01083EPSS
Exploits0References2
Wallarm Lab
Wallarm Lab
added 2024/08/30 3:52 p.m.11 views

Evolution of Attack Surface Management

The Early Days: Basic Asset Management While it was not called ASM, the concept of managing attack surface management began with basic asset management practices in the late 1990s and early 2000s. Organizations focused on keeping an inventory of their digital assets, such as servers, desktops, an...

7AI score
Exploits0
Malwarebytes
Malwarebytes
added 2024/08/22 2:12 p.m.23 views

Google patches actively exploited zero-day in Chrome. Update now!

Google has released an update for its Chrome browser which includes a patch for a vulnerability that Google says is already being exploited, known as a zero-day vulnerability. Google has fixed that zero-day with the release of versions 128.0.6613.84/.85 for Windows/macOS and 128.0.6613.84 for Lin...

9.6CVSS8.9AI score0.19272EPSS
Exploits2
OSV
OSV
added 2024/08/21 5:15 p.m.5 views

CVE-2024-5928

VIPRE Advanced Security PMAgent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute low-privileged code on the target...

7.8CVSS7.4AI score0.00379EPSS
Exploits0References2
Rows per page
Query Builder