Lucene search
+L

10 matches found

Snyk
Snyk
•added 2026/06/18 3:32 p.m.•12 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to missing scope enforcement in older protocol handlers. An attacker can gain unauthorized access to high-privilege operations by specifying an outdated protocol version in the MCP-Protocol-Version header or by...

8.6CVSS7.9AI score0.00145EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/06/09 12:36 p.m.•49 views

CVE-2026-52906 9p: fix access mode flags being ORed instead of replaced

In the Linux kernel, the following vulnerability has been resolved: 9p: fix access mode flags being ORed instead of replaced Since commit 1f3e4142c0eb "9p: convert to the new mount API", v9fsapplyoptions applies parsed mount flags with |= onto flags already set by v9fssessioninit. For 9P2000.L,...

7.7CVSS0.00177EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/03/26 12:00 a.m.•106 views

VMware Tools Authentication Bypass Vulnerability (VMSA-2025-0005) - Windows

VMware Tools is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:tools";...

7.8CVSS7.3AI score0.00346EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/25 2:15 p.m.•53 views

CVE-2025-22230

VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control. A malicious actor with non-administrative privileges on a guest VM may gain ability to perform certain high privilege operations within that VM...

7.8CVSS0.00346EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/25 2:06 p.m.•23 views

CVE-2025-22230 Authentication bypass vulnerability

VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control. A malicious actor with non-administrative privileges on a guest VM may gain ability to perform certain high privilege operations within that VM...

7.8CVSS7.6AI score0.00346EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/25 2:06 p.m.•387 views

CVE-2025-22230

CVE-2025-22230 – VMware Tools for Windows is affected by an authentication bypass due to improper access control. A non-administrative user on a guest VM may abuse this to perform high-privilege operations within the VM. Affected versions include VMware Tools 11.x and 12.x before 12.5.1; remediat...

7.8CVSS7.6AI score0.00346EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/25 12:00 a.m.•25 views

PT-2025-12803

Name of the Vulnerable Software and Affected Versions VMware Tools for Windows versions 11.x.x through 12.x.x Description VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control. A malicious actor with non-administrative privileges on a guest VM may...

7.8CVSS9.7AI score0.00346EPSS
SaveExploits0References89
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/25 12:00 a.m.•4 views

CVE-2025-22230: Authentication Bypass Using an Alternate Path or Channel

VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control. A malicious actor with non-administrative privileges on a guest VM may gain ability to perform certain high privilege operations within that VM...

7.8CVSS8.2AI score0.00346EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/02/22 12:00 a.m.•17 views

Logic Flaw Vulnerability in Qixing Tianqing Hanma USG Firewall

Tianqing Hanma USG Firewall is developed based on Qixing ISE unified engine, there is no OEM from third-party functions, and the functions can be split in any combination, which has very little impact on system performance. Adopting multi-core hardware architecture and integrated software design,...

7.4AI score
SaveExploits0
Cvelist
Cvelist
•added 2017/09/15 5:00 p.m.•35 views

CVE-2017-10845

Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perform unintended operations through a backdoor account...

9.6AI score0.02846EPSS
SaveExploits0References2
Rows per page
Query Builder