Lucene search
+L

8999 matches found

NVD
NVD
•added 2023/12/06 9:15 a.m.•36 views

CVE-2023-6514

The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions. Successful exploitation of this vulnerability may allow attackers to access restricted...

8.8CVSS0.0031EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/06 9:15 a.m.•30 views

Authentication flaw

The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions. Successful exploitation of this vulnerability may allow attackers to access restricted...

5.8CVSS7.4AI score0.0031EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/06 8:26 a.m.•81 views

CVE-2023-6514

CVE-2023-6514 is a documented identity authentication bypass affecting Huawei Smart Screen Bluetooth modules. Connected sources confirm the vulnerability can allow attackers to access restricted functions without authentication. There is no public exploit description in the provided documents. Th...

8.8CVSS8.7AI score0.0031EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/06 8:26 a.m.•47 views

CVE-2023-6514

The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions. Successful exploitation of this vulnerability may allow attackers to access restricted...

8.8CVSS9.1AI score0.0031EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/12/06 12:00 a.m.•15 views

PT-2023-30972 · Unknown · Time Slots Booking Calendar

Name of the Vulnerable Software and Affected Versions: Time Slots Booking Calendar version 4.0 Description: The issue concerns Multiple Stored Cross-Site Scripting XSS problems. These issues can be exploited via several parameters, including name, plugin sms api key, plugin sms country code,...

5.4CVSS5.3AI score0.00465EPSS
SaveExploits2References4
Huawei
Huawei
•added 2023/12/06 12:00 a.m.•123 views

Security Advisory - Identity Bypass Vulnerability in Some Huawei Smart Screen Products

The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions.Vulnerability ID:HWPSIRT-2023-82635 This vulnerability has been assigned a CVE ID:...

8.8CVSS6.9AI score0.0031EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/06 12:00 a.m.•2 views

CVE-2023-6514: Improper Authentication

The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions. Successful exploitation of this vulnerability may allow attackers to access restricted...

8.8CVSS7.8AI score0.0031EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/12/06 12:00 a.m.•22 views

The vulnerability of the Trend Micro Mobile Security software for mobile devices lies in its improper path name limitation for the restricted access directory, which allows a hacker to delete any files they want.

The vulnerability of the Trend Micro Mobile Security software relates to an incorrect restriction on the path to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files...

9.4CVSS7.9AI score0.66809EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/12/05 12:00 a.m.•14 views

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an improperly restricted operation within a memory buffer range in UTILS...

7.8CVSS7AI score0.00118EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/12/05 12:00 a.m.•9 views

PT-2023-33072 · Lxd · Lxd

Name of the Vulnerable Software and Affected Versions: LXD affected versions not specified Description: A security issue allows users with restricted access to a project to gain root access on the system by creating a disk device with shift=true and creating a setuid root executable. This is...

7.2AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/12/05 12:00 a.m.•19 views

PT-2023-32687 · Huawei · Huawei Smart Screen

Name of the Vulnerable Software and Affected Versions: Huawei Smart Screen products affected versions not specified Description: The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass issue. This may allow attackers to access restricted functions...

8.8CVSS8.7AI score0.0031EPSS
SaveExploits0References5
NVD
NVD
•added 2023/12/04 9:15 a.m.•31 views

CVE-2023-44304

Dell DM5500 contains a privilege escalation vulnerability in the appliance. A remote attacker with low privileges could potentially exploit this vulnerability to escape the restricted shell and gain root access to the appliance...

8.8CVSS0.00968EPSS
SaveExploits0References1
OSV
OSV
•added 2023/12/04 9:15 a.m.•15 views

CVE-2023-44304

Dell DM5500 contains a privilege escalation vulnerability in the appliance. A remote attacker with low privileges could potentially exploit this vulnerability to escape the restricted shell and gain root access to the appliance...

8.8CVSS7.4AI score0.00968EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/04 9:15 a.m.•29 views

Privilege escalation

Dell DM5500 contains a privilege escalation vulnerability in the appliance. A remote attacker with low privileges could potentially exploit this vulnerability to escape the restricted shell and gain root access to the appliance...

6.5CVSS7.7AI score0.00968EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/12/04 8:19 a.m.•19 views

CVE-2023-44304

Dell DM5500 contains a privilege escalation vulnerability in the appliance. A remote attacker with low privileges could potentially exploit this vulnerability to escape the restricted shell and gain root access to the appliance...

8.8CVSS7.4AI score0.00968EPSS
SaveExploits0References1
OSV
OSV
•added 2023/12/04 1:15 a.m.•8 views

CVE-2023-38003

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 could allow a user with DATAACCESS privileges to execute routines that they should not have access to. IBM X-Force ID: 260214...

7.2CVSS5.9AI score0.01086EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/12/04 12:00 a.m.•17 views

PT-2023-29201 · Dell · Dell Dm5500

Name of the Vulnerable Software and Affected Versions: Dell DM5500 affected versions not specified Description: A privilege escalation vulnerability exists in the Dell DM5500 appliance, specifically in the PPOE Component. This vulnerability could be exploited by a remote attacker with low...

8.8CVSS8.8AI score0.00968EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/04 12:00 a.m.•4 views

CVE-2023-44304: Improper Neutralization of Special Elements used in an OS Command

Dell DM5500 contains a privilege escalation vulnerability in the appliance. A remote attacker with low privileges could potentially exploit this vulnerability to escape the restricted shell and gain root access to the appliance...

8.8CVSS7.9AI score0.00968EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/12/04 12:00 a.m.•13 views

IBM Db2 Security Vulnerabilities

IBM Db2 is a relational database management system from International Business Machines IBM. The system executes on UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM Db2 that originates from allowing users with DATAACCESS privileges to execute routines...

7.2CVSS6.8AI score0.01086EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/12/04 12:00 a.m.•24 views

Dell DM5500 操作系统命令注入漏洞

The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from an elevation of privilege vulnerability that can be exploited by an attacker to escape a restricted shell and...

8.8CVSS7.2AI score0.00968EPSS
SaveExploits0References1
Rows per page
Query Builder