Lucene search
+L

13160 matches found

OSV
OSV
added 2019/04/17 3:29 p.m.11 views

CVE-2018-4007

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality. The program is able to delete any protected file on the system. An attacker would need local access to the machine to successfully exploit the bug...

7.1CVSS5.8AI score0.00386EPSS
SaveExploits1References1
Prion
Prion
added 2019/04/17 3:29 p.m.24 views

Privilege escalation

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality. The program is able to delete any protected file on the system. An attacker would need local access to the machine to successfully exploit the bug...

6.6CVSS7AI score0.00386EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2019/04/17 2:15 p.m.37 views

CVE-2018-4007

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality. The program is able to delete any protected file on the system. An attacker would need local access to the machine to successfully exploit the bug...

9CVSS7AI score0.00386EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:00 a.m.13 views

The vulnerability of the Dovecot mail server, related to authentication errors, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Dovecot mail server is related to authentication errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

6.8CVSS6.5AI score0.02417EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:00 a.m.13 views

The vulnerability of Internet Explorer’s JavaScript script handlers allows attackers to gain unauthorized access to protected information.

The vulnerability of Internet Explorer JavaScript script handlers is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5CVSS7AI score0.06736EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:00 a.m.13 views

Microsoft Edge’s vulnerability, related to memory object handling errors, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of Microsoft Edge is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

5CVSS6.8AI score0.07115EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:00 a.m.15 views

The vulnerability of the SAP Disclosure Management software in generating financial reports stems from the lack of protective measures for the website structure, allowing unauthorized access to protected information by attackers.

The vulnerability of the SAP Disclosure Management software for generating financial reports is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.4CVSS5.9AI score0.00886EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:00 a.m.12 views

The vulnerability of the Windows Task Scheduler allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Windows Task Scheduler, a task scheduling tool for operating systems, is related to errors in handling user credentials. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

6.6CVSS6.6AI score0.02058EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:00 a.m.10 views

Vulnerability of Windows operating systems, related to errors in memory object handling, allows attackers to gain unauthorized access to protected information.

The vulnerability of Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

5.5CVSS6.7AI score0.02127EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/04/16 12:00 a.m.10 views

WPA Privilege Access Control Issue Vulnerability

WPA is a set of Wi-Fi access protection schemes from the Wi-Fi Alliance USA, including security protocols and security authentication procedures. There is a security vulnerability in the implementation of WPA. An attacker can exploit the vulnerability to authenticate and gain access to the networ...

8.1CVSS9.4AI score0.02215EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/04/16 12:00 a.m.7 views

WPA Authorization Issues Vulnerabilities

WPA is a set of Wi-Fi access protection schemes from the Wi-Fi Alliance USA, including security protocols and security authentication procedures. There is a security vulnerability in the implementation of WPA. An attacker can exploit the vulnerability to gain access to sensitive information...

8.1CVSS9.4AI score0.04989EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.12 views

The vulnerability of the SAP HANA Extended Application Services development tool, related to errors in XML document processing, allows attackers to gain access to protected information or cause service failures.

The vulnerability of the SAP HANA Extended Application Services development tool is related to errors in processing XML documents. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures by using a specially created XML file...

8.7CVSS6.5AI score0.02128EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.11 views

The vulnerability of the User Mode Driver component of the Intel Graphics Driver allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the User Mode Driver component of the Intel Graphics Driver relates to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

5.3CVSS6.8AI score0.00295EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.9 views

The vulnerability of the vRealize Log Insight log management tool, related to authentication errors, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the vRealize Log Insight log management tool is related to authentication errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.2CVSS7.1AI score0.01438EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.11 views

The vulnerability of the User Mode Driver component of the Intel Graphics Driver allows a hacker to gain access to protected information related to device configuration.

The vulnerability of the User Mode Driver component of the Intel Graphics Driver relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to protected configuration information about the device’s settings...

3.3CVSS5.8AI score0.00323EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.13 views

The vulnerability of the SAP HANA Extended Application Services development tool lies in the fact that the recording of user credentials in a trace file allows an attacker to access protected information.

The vulnerability of the SAP HANA Extended Application Services development tool lies in the process of recording user credentials in a trace file. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected information...

8.3CVSS7.2AI score0.01754EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.12 views

The vulnerability of Intel Software Guard Extensions SDK, related to reclaimed memory, allows a hacker to disclose protected information or cause service failures.

The vulnerability of Intel Software Guard Extensions SDK relates to the reallocation of memory. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause service failures...

5.3CVSS7AI score0.00348EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.11 views

The vulnerability of the PDFium rendering mechanism in Google Chrome browsers, related to memory usage after deallocation, allows attackers to compromise the integrity of the protected information.

The vulnerability of the PDFium rendering mechanism in the Google Chrome browser relates to the use of memory after deallocation. Exploiting this vulnerability allows an attacker to compromise the integrity of protected information by using a specially created PDF file...

8.8CVSS7.7AI score0.0173EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.14 views

The vulnerabilities of the Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), and Rendezvous Daemon Manager (rvdm) – platforms for high-speed data distribution by TIBCO Rendezvous – allow attackers to gain unauthorized access to protected information.

The vulnerabilities of the Rendezvous Routing Daemon rvrd, Rendezvous Secure Routing Daemon rvrsd, Rendezvous Secure Daemon rvsd, Rendezvous Cache rvcache, and Rendezvous Daemon Manager rvdm – a platform for high-speed data distribution by TIBCO Rendezvous – are related to the manipulation of...

8.8CVSS7.4AI score0.00668EPSS
SaveExploits0References4Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.14 views

The vulnerability of the PAN-OS operating system’s web interface, which allows a perpetrator to gain access to protected information

The vulnerability of the PAN-OS operating system’s web interface is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

5.3CVSS7.2AI score0.02469EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder