Lucene search
+L

54 matches found

NVD
NVD
•added 2022/02/02 6:15 p.m.•36 views

CVE-2021-42640

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference IDOR vulnerability that allows an unauthenticated attacker to reassign drivers for any printer...

9.1CVSS0.02043EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2022/02/02 5:18 p.m.•40 views

CVE-2021-42640

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference IDOR vulnerability that allows an unauthenticated attacker to reassign drivers for any printer...

9.4AI score0.02043EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/02 12:00 a.m.•8 views

CVE-2021-42640: Exposure of Resource to Wrong Sphere

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference IDOR vulnerability that allows an unauthenticated attacker to reassign drivers for any printer...

9.1CVSS8.1AI score0.02043EPSS
SaveExploits1References14
attackerkb
attackerkb
•added 2021/12/14 8:15 p.m.•7 views

CVE-2021-43830

OpenProject is a web-based project management software. OpenProject versions = 12.0.0 are vulnerable to a SQL injection in the budgets module. For authenticated users with the "Edit budgets" permission, the request to reassign work packages to another budget unsufficiently sanitizes user input in...

8.8CVSS7.1AI score0.00959EPSS
SaveExploits0References5Affected Software1
Prion
Prion
•added 2021/12/14 8:15 p.m.•27 views

Sql injection

OpenProject is a web-based project management software. OpenProject versions = 12.0.0 are vulnerable to a SQL injection in the budgets module. For authenticated users with the "Edit budgets" permission, the request to reassign work packages to another budget unsufficiently sanitizes user input in...

6.5CVSS8.8AI score0.00959EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
•added 2021/09/17 12:00 a.m.•19 views

Tremor 资源管理错误漏洞

Tremor is an open source event processing system for unstructured data. A resource management error vulnerability exists in Tremor Tremor-runtime, which arises when the product causes access to freed memory when using patch or merge on a state and assigning the result back to the state state. The...

9.8CVSS8.3AI score0.01349EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2019/08/05 12:00 a.m.•5 views

PT-2019-7571

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 60.0.25 Description The issue allows arbitrary file-chown operations via the reassign post terminate cruft function. Recommendations For versions prior to 60.0.25, update to version 60.0.25 or later to resolve the issu...

6.8CVSS0.01029EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/08/02 12:00 a.m.•4 views

PT-2019-8365

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 66.0.2 Description The issue concerns incorrect setting of user and group ownership when using the reassign post terminate cruft function. Recommendations For versions prior to 66.0.2, update to version 66.0.2 or later...

4.7CVSS0.00665EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2017/06/27 12:00 a.m.•6 views

PT-2017-8485

Name of the Vulnerable Software and Affected Versions HPE Helion Openstack Glance affected versions not specified Description The issue allows remote authenticated users to cause other users to boot into a modified image without notification of the change by reassigning deleted image ids...

8.5CVSS0.02742EPSS
SaveExploits0References14
attackerkb
attackerkb
•added 2014/02/18 11:55 a.m.•15 views

CVE-2014-2019

The iCloud subsystem in Apple iOS before 7.1 allows physically proximate attackers to bypass an intended password requirement, and turn off the Find My iPhone service or complete a Delete Account action and then associate this service with a different Apple ID account, by entering an arbitrary...

4.9CVSS5.7AI score0.00463EPSS
SaveExploits2References4
Mend
Mend
•added 2013/03/25 9:00 p.m.•3 views

CVE-2013-1834

notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated users to reassign notes via a modified 1 userid or 2 courseid field...

5.3CVSS0.0171EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/03/25 12:00 a.m.•5 views

CVE-2013-1834: Undefined Security Weakness

notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated users to reassign notes via a modified 1 userid or 2 courseid field...

4CVSS5.8AI score0.0171EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2013/03/11 4:00 a.m.•26 views

CVE-2013-1834

notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated users to reassign notes via a modified 1 userid or 2 courseid field...

4CVSS5.9AI score0.0171EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2013/03/11 12:00 a.m.•4 views

PT-2013-3419

Name of the Vulnerable Software and Affected Versions Moodle versions 1.9.x through 1.9.19 Moodle versions 2.x through 2.1.10 Moodle versions 2.2.x before 2.2.8 Moodle versions 2.3.x before 2.3.5 Moodle versions 2.4.x before 2.4.2 Description The issue allows remote authenticated users to reassig...

4CVSS0.0171EPSS
SaveExploits0References18
Rows per page
Query Builder