Lucene search
+L

10 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•7 views

CVE-2026-76553: External Control of File Name or Path

The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a path taken from stored, user-supplied data before recursively deleting the directory it resolves to, allowing users to whom an administrator has delegated a WP Import Export Lite WordPress plugin before 3.9.33 capability...

6.5CVSS5.9AI score0.00452EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/02 2:43 p.m.•20 views

EUVD-2026-70062

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in the Kibana Fleet feature can lead to the unauthorized deletion of resources via Path Traversal CAPEC-126. A low-privileged user could cause a subsequent action taken by a higher-privileged user in the Fleet...

6.3CVSS5.9AI score0.0036EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/22 12:00 a.m.•2 views

CVE-2026-14985: Improper Limitation of a Pathname to a Restricted Directory

The Analog Way Picturall Quad Compact Mark II version 3.5.8, contains a local privilege escalation vulnerability in the core firmware. This is due to improper privilege delegation and insufficient input validation in a maintenance script...

7.8CVSS5.8AI score0.00174EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/22 12:00 a.m.•30 views

PT-2026-63421

Name of the Vulnerable Software and Affected Versions Analog Way Picturall Quad Compact Mark II version 3.5.8 Description A local privilege escalation flaw exists in the core firmware due to improper privilege delegation and insufficient input validation within a maintenance script. The create...

7.8CVSS6.1AI score0.00174EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2019/09/16 12:00 a.m.•45 views

EulerOS 2.0 SP5 : openldap (EulerOS-SA-2019-1914)

According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for...

4.9CVSS6.3AI score0.03423EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2018/11/06 12:00 a.m.•62 views

Samba >= 3.0.25, <= 4.5.2 Privilege Delegation Vulnerability

Samba is prone to a privilege delegation vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

6.5CVSS6.9AI score0.09199EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2017/05/22 10:25 a.m.•14 views

samba: Unconditional privilege delegation to Kerberos servers in trusted realms

It was found that Samba always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users...

6.5CVSS7.1AI score0.09199EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2017/03/23 5:18 a.m.•18 views

samba: Unconditional privilege delegation to Kerberos servers in trusted realms

It was found that Samba always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users...

6.5CVSS7.1AI score0.09199EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2017/03/21 8:44 a.m.•17 views

samba: Unconditional privilege delegation to Kerberos servers in trusted realms

It was found that Samba always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users...

6.5CVSS7.1AI score0.09199EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2017/03/21 8:34 a.m.•28 views

samba: Unconditional privilege delegation to Kerberos servers in trusted realms

It was found that Samba always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users...

6.5CVSS7.1AI score0.09199EPSS
SaveExploits0References5
Rows per page
Query Builder