Lucene search
+L

7 matches found

Cvelist
Cvelist
added 2026/09/01 3:19 p.m.34 views

CVE-2026-84206 Snipe-IT before 8.7.0 Authorization Bypass via Bulk Restore

Snipe-IT before 8.7.0 gates the bulk asset restore endpoint on the assets.edit permission instead of assets.delete, allowing users without delete rights to restore soft-deleted assets. Attackers with edit permissions can post asset identifiers to the bulk restore endpoint to undo administrator...

5.3CVSS0.00222EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/01 3:19 p.m.10 views

CVE-2026-84206 Snipe-IT before 8.7.0 Authorization Bypass via Bulk Restore

Snipe-IT before 8.7.0 gates the bulk asset restore endpoint on the assets.edit permission instead of assets.delete, allowing users without delete rights to restore soft-deleted assets. Attackers with edit permissions can post asset identifiers to the bulk restore endpoint to undo administrator...

5.3CVSS5.9AI score
SaveExploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2019-19045

Malware in sbrugna...

8.8CVSS8.6AI score0.00862EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 8:58 a.m.17 views

CVE-2019-9679

Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build tim...

8.8CVSS7AI score0.00862EPSS
SaveExploits0References1
NVD
NVD
added 2019/09/18 7:15 p.m.19 views

CVE-2019-9679

Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build tim...

8.8CVSS8.8AI score0.00862EPSS
SaveExploits0References1
Prion
Prion
added 2019/09/18 7:15 p.m.27 views

Design/Logic Flaw

Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build tim...

6.5CVSS8.7AI score0.00862EPSS
SaveExploits0References1Affected Software9
Cvelist
Cvelist
added 2019/09/18 6:32 p.m.26 views

CVE-2019-9679

Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build tim...

8.8AI score0.00862EPSS
SaveExploits0References1
Rows per page
Query Builder