Lucene search
+L

197 matches found

CNVD
CNVD
added 2022/04/21 12:0 a.m.49 views

Wordpress permission check error vulnerability

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers, and a permission checking error vulnerability exists in Wordpress, which stems from the wp-admin/press-this.php script that...

4CVSS1.7AI score0.00704EPSS
SaveExploits0
CNVD
CNVD
added 2022/04/15 12:0 a.m.37 views

Google Android has an unspecified vulnerability (CNVD-2022-55157)

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android, which stems from a lack of permission checking in the setup of AndroidManifest.xml, which could allow pairing of Bluetooth devices without user consent. An attacker...

8.8CVSS3.9AI score0.00205EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/04/01 12:0 a.m.21 views

Google Android Information Disclosure Vulnerability (CNVD-2022-44592)

Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability caused by a lack of permission checking in the DomainVerificationService. An attacker could exploit this vulnerability to cause local information...

5.5CVSS1.8AI score0.00101EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/04/01 12:0 a.m.14 views

Google Android Information Disclosure Vulnerability (CNVD-2022-26780)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that stems from a lack of permission checking in voice mail. An attacker could use this vulnerability to obtain sensitive information...

5.5CVSS1.9AI score0.00305EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/04/01 12:0 a.m.13 views

Google Android Information Disclosure Vulnerability (CNVD-2022-28916)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that stems from a lack of permission checking in Telephony. An attacker could use this vulnerability to obtain sensitive information...

5.5CVSS1.7AI score0.00107EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/04/01 12:0 a.m.23 views

Google Android Information Disclosure Vulnerability (CNVD-2022-44591)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that stems from a lack of permission checking in Framework. An attacker could use this vulnerability to obtain sensitive information...

5.5CVSS1.8AI score0.00101EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/04/01 12:0 a.m.12 views

Google Android Information Disclosure Vulnerability (CNVD-2022-44594)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that stems from a lack of permission checking in Device Policy. An attacker could use this vulnerability to obtain sensitive information...

5.5CVSS1.8AI score0.00101EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/03/10 12:0 a.m.51 views

Nextcloud server authorization issue vulnerability (CNVD-2022-20692)

Nextcloud is an open source self-hosted file synchronization and sharing communication application platform from Nextcloud Germany. nextcloud server is a self-hosted system designed to provide cloud-style services. nextcloud server is vulnerable to an authorization issue that stems from a lack of...

4.3CVSS1.7AI score0.0085EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/11/02 12:0 a.m.34 views

SUSE: Security Advisory (SUSE-SU-2020:2879-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.1AI score0.00472EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/10/28 12:0 a.m.29 views

Nextcloud Deck Access Control Error Vulnerability (CNVD-2021-102877)

Nextcloud is an open source set of self-hosted file synchronization and sharing communication applications platform from Germany-based Nextcloud. Nextcloud Deck is vulnerable to an access control error in versions prior to 1.2.9, 1.4.5 and 1.5.3. The vulnerability stems from a lack of permission...

8.1CVSS2AI score0.01293EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/07 6:15 p.m.23 views

CVE-2021-20372

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking. IBM X-Force ID: 195518...

4.3CVSS0.01247EPSS
SaveExploits0References2
Prion
Prion
added 2021/10/07 6:15 p.m.19 views

Design/Logic Flaw

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking. IBM X-Force ID: 195518...

4CVSS4.4AI score0.01247EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/10/07 6:5 p.m.25 views

CVE-2021-20372

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking. IBM X-Force ID: 195518...

4.3CVSS4.6AI score0.01247EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/10/06 12:0 a.m.5 views

CVE-2021-20372

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking. IBM X-Force ID: 195518...

4.3CVSS5.5AI score0.01247EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/06 12:0 a.m.10 views

The vulnerability of the Libvirt virtualization management library, related to information disclosure, allows attackers to access confidential information or cause service failures.

The vulnerability of the Libvirt virtualization management library is related to incorrect permission checking. Exploiting this vulnerability allows a remote attacker to access confidential information or cause service failures...

5.4CVSS6.5AI score0.01108EPSS
SaveExploits1References8Affected Software3
CNVD
CNVD
added 2021/06/25 12:0 a.m.9 views

Google Android onReceive elevation of privilege vulnerability

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. An elevation of privilege vulnerability exists in Google Android onReceive. The vulnerability stems from a lack of permission checking in onReceive of NetInitiatedActivity.java. An attack...

7.8CVSS6.4AI score0.00108EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/06/25 12:0 a.m.9 views

Google Android Information Disclosure Vulnerability (CNVD-2021-45314)

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. Google Android suffers from an information disclosure vulnerability. The vulnerability stems from a lack of permission checking in updateNotification in BeamTransferManager.java. An...

5.5CVSS5.9AI score0.00201EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/06/25 12:0 a.m.13 views

Google Android MmsService.java Elevation of Privilege Vulnerability

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. An elevation of privilege vulnerability exists in Google Android MmsService.java. The vulnerability stems from a lack of permission checking in archiveStoredConversation in MmsService.jav...

7.8CVSS6.8AI score0.00107EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/06/17 12:0 a.m.15 views

Nextcloud Mail Access Control Error Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An access control error vulnerability exists in Nextcloud Mail that stems from a lack of permission checking in Nextcloud Mail.Nextcloud Mail version 1.9.5 an...

4.3CVSS6.5AI score0.00988EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.35 views

SUSE: Security Advisory (SUSE-SU-2020:2905-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.7AI score0.03292EPSS
SaveExploits0References2
Rows per page
Query Builder