Lucene search
+L

9313 matches found

Cvelist
Cvelist
•added 2022/10/31 8:09 p.m.•35 views

CVE-2022-39018 Broken access controls on PDFtron data in M-Files Hubshare

Broken access controls on PDFtron data in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to access restricted PDF files via a known URL...

8.2CVSS8.3AI score0.00433EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/10/31 12:00 a.m.•20 views

M-Files Hubshare 授权问题漏洞

M-Files Hubshare is a collaboration solution from M-Files, Inc. designed to seamlessly share files, documents and collaborative content. A security vulnerability exists in versions of M-Files Hubshare prior to 3.3.11.3, which stems from imperfect access control of its PDFtron data allowing an...

8.2CVSS7.3AI score0.00433EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/10/31 12:00 a.m.•18 views

PT-2022-24674 · Pdftron Systems +1 · Pdftron +1

Name of the Vulnerable Software and Affected Versions: M-Files Hubshare versions prior to 3.3.11.3 Description: The issue concerns broken access controls on PDFtron data, allowing unauthenticated attackers to access restricted PDF files via a known URL. Recommendations: For versions prior to...

8.2CVSS7.5AI score0.00433EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/10/28 12:00 a.m.•22 views

PT-2022-16853 · Haas · Haas Controller

Name of the Vulnerable Software and Affected Versions: Haas Controller version 100.20.000.1110 Description: The issue is related to insufficient granularity of access control when using the "Ethernet Q Commands" service. This allows any user to write macros into registers outside of the authorize...

9.8CVSS8.4AI score0.00666EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/10/28 12:00 a.m.•23 views

The vulnerability of the “Export logs” function (Settings\Logging\Export logs) of the Fortinet FortiClient security device allows a hacker to increase their privileges.

The vulnerability of the “Export logs” function Settings\Logging\Export logs of the Fortinet FortiClient security device for Linux is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability could allow a attacker to increase their privilege...

7.8CVSS7.2AI score0.00521EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2022/10/27 12:00 a.m.•18 views

Apple iOS和iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and iPadOS contain a security vulnerability. An attacker could exploit this vulnerability to view...

4.6CVSS6.7AI score0.0037EPSS
SaveExploits0References8
OSV
OSV
•added 2022/10/25 9:15 p.m.•16 views

CVE-2022-33179

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, and 7.4.2j could allow a local authenticated user to break out of restricted shells with “set context” and escalate privileges...

8.8CVSS7.1AI score0.00191EPSS
SaveExploits0References2
NVD
NVD
•added 2022/10/25 9:15 p.m.•41 views

CVE-2022-33179

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, and 7.4.2j could allow a local authenticated user to break out of restricted shells with “set context” and escalate privileges...

8.8CVSS0.00191EPSS
SaveExploits0References2
CVE
CVE
•added 2022/10/25 12:00 a.m.•100 views

CVE-2022-33179

CVE-2022-33179 affects Brocade Fabric OS CLI before versions v9.1.0, v9.0.1e, v8.2.3c, and v7.4.2j. The issue allows a local authenticated user to escape restricted shells using the command “set context” and perform privilege escalation. Affected product: Brocade Fabric OS CLI. Root cause: improp...

8.8CVSS8.4AI score0.00191EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/25 12:00 a.m.•3 views

CVE-2022-33179: Undefined Security Weakness

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, and 7.4.2j could allow a local authenticated user to break out of restricted shells with “set context” and escalate privileges...

8.8CVSS6.7AI score0.00191EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/10/25 12:00 a.m.•50 views

CVE-2022-33179

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, and 7.4.2j could allow a local authenticated user to break out of restricted shells with “set context” and escalate privileges...

8.7AI score0.00191EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/10/24 12:00 a.m.•7 views

PT-2022-21592 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.7.1 iPadOS versions prior to 15.7.1 iPadOS versions prior to 16 macOS Ventura versions prior to 13 Description: A lock screen issue was addressed with improved state management, which may have allowed a user to view...

4.6CVSS5.1AI score0.0037EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2022/10/24 12:00 a.m.•16 views

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS, which originates from the fact that users may be able to view restricted content from the lock screen...

5.5CVSS6.8AI score0.00303EPSS
SaveExploits0References9
OSV
OSV
•added 2022/10/21 6:15 p.m.•20 views

CVE-2020-5355

The Dell Isilon OneFS versions 8.2.2 and earlier SSHD process improperly allows Transmission Control Protocol TCP and stream forwarding. This provides the remotesupport user and users with restricted shells more access than is intended...

4.3CVSS5.8AI score0.00421EPSS
SaveExploits0References1
NVD
NVD
•added 2022/10/21 6:15 p.m.•42 views

CVE-2020-5355

The Dell Isilon OneFS versions 8.2.2 and earlier SSHD process improperly allows Transmission Control Protocol TCP and stream forwarding. This provides the remotesupport user and users with restricted shells more access than is intended...

4.3CVSS0.00421EPSS
SaveExploits0References1
Prion
Prion
•added 2022/10/21 6:15 p.m.•35 views

Authentication flaw

The Dell Isilon OneFS versions 8.2.2 and earlier SSHD process improperly allows Transmission Control Protocol TCP and stream forwarding. This provides the remotesupport user and users with restricted shells more access than is intended...

4CVSS4.8AI score0.00421EPSS
SaveExploits0References1Affected Software1
Malwarebytes
Malwarebytes
•added 2022/10/21 1:00 p.m.•31 views

Gas, a positive social network for teens (no, really)

A new social network is currently in the news, billed as a positive space for teens to enjoy themselves. Im all for positive spaces online, but what is it, and will teens really be happier there than say Instagram, or even just hanging out in WhatsApp groups? Pump the gas Launched in August of th...

6.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/10/21 12:00 a.m.•6 views

PT-2022-9046

Name of the Vulnerable Software and Affected Versions Dell Isilon OneFS versions 8.2.2 and earlier Description The SSHD process in Dell Isilon OneFS improperly allows Transmission Control Protocol TCP and stream forwarding. This provides the remotesupport user and users with restricted shells mor...

4.3CVSS5.7AI score0.00421EPSS
SaveExploits0References4
Veracode
Veracode
•added 2022/10/20 7:55 p.m.•49 views

Information Disclosure

git is vulnerable to information disclosure. A local attacker is able to convinces a victim to clone a repository with a symbolic link pointing at a restricted component on the victim's machine, which allows the attacker to gain access to confidential information...

5.5CVSS6.6AI score0.01304EPSS
SaveExploits1References24Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/10/20 12:00 a.m.•27 views

The vulnerability of the Moxa MXView network control software lies in its lack of functionality for checking the path name of the restricted access directory. This allows a violator to execute arbitrary code.

The vulnerability of the Moxa MXView network control software is related to deficiencies in checking the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS5.9AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder