Lucene search
+L

7930 matches found

CNNVD
CNNVD
added 2024/02/14 12:00 a.m.12 views

Intel Thunderbolt DCH drivers security vulnerability

Intel Thunderbolt DCH drivers is a driver for Windows from Intel Corporation USA. A security vulnerability exists in versions prior to Intel Thunderbolt DCH drivers 88, which stems from an improperly restricted buffer that could allow privileged users to escalate privileges via local access...

6.1CVSS6.9AI score0.00172EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/02/14 12:00 a.m.11 views

Intel Optimization for TensorFlow Security Vulnerability

Intel Optimization for Tensorflow is a set of tools and libraries optimized for the TensorFlow framework from Intel Corporation. A security vulnerability exists in Intel Optimization for TensorFlow prior to version 2.13.0, which stems from an improperly restricted buffer and could lead to privile...

6.7CVSS6.7AI score0.00189EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/13 4:15 a.m.7 views

CVE-2024-22024

An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure 9.x, 22.x, Ivanti Policy Secure 9.x, 22.x and ZTA gateways which allows an attacker to access certain restricted resources without authentication...

8.3CVSS5.8AI score0.94721EPSS
SaveExploits1References1
OSV
OSV
added 2024/02/13 3:15 a.m.6 views

CVE-2024-24739

SAP Bank Account Management BAM allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application...

6.3CVSS5.8AI score0.00311EPSS
SaveExploits0References2
NVD
NVD
added 2024/02/13 3:15 a.m.27 views

CVE-2024-24739

SAP Bank Account Management BAM allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application...

6.3CVSS6.5AI score0.00311EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/13 3:15 a.m.20 views

Design/Logic Flaw

SAP Bank Account Management BAM allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application...

6.5CVSS7.3AI score0.00311EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/02/13 12:00 a.m.6 views

SAP Bank Account Management Security Vulnerability

SAP Bank Account Management is a bank account management system from SAP, Germany. A security vulnerability exists in SAP Bank Account Management BAM that originates from allowing authenticated users with restricted access to use functionality, which could result in an escalation of privileges...

6.3CVSS6.8AI score0.00311EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/13 12:00 a.m.9 views

Ivanti Connect Secure and Ivanti Policy Secure Code Issue Vulnerabilities

Ivanti Connect Secure and Ivanti Policy Secure are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a Network Access Control NAC solution. Ivanti Connect Secure and Ivanti Policy Secure have a code issue...

8.3CVSS7.3AI score0.94721EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/02/13 12:00 a.m.6 views

PT-2024-2742 · Intel · Intel Vroc

Name of the Vulnerable Software and Affected Versions: Intel VROC software versions prior to 8.0.8.1001 Description: The issue is related to improper access control in Intel VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This i...

7.8CVSS7.3AI score0.00167EPSS
SaveExploits0References8
OSV
OSV
added 2024/02/12 9:15 p.m.3 views

DEBIAN-CVE-2024-1459

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories...

5.3CVSS6AI score0.01714EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/12 9:15 p.m.40 views

CVE-2024-1459

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories...

5.3CVSS5.5AI score0.01714EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2024/02/12 9:15 p.m.31 views

CVE-2024-1459

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories...

5.3CVSS6.7AI score0.01714EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/12 9:15 p.m.33 views

Path traversal

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories...

5CVSS7.2AI score0.01714EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2024/02/12 8:30 p.m.70 views

CVE-2024-1459

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories...

5.3CVSS5.5AI score0.01714EPSS
SaveExploits0
OSV
OSV
added 2024/02/12 8:30 p.m.17 views

CVE-2024-1459 Undertow: directory traversal vulnerability

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories...

5.3CVSS6.5AI score
SaveExploits0References14
NVD
NVD
added 2024/02/12 7:15 p.m.28 views

CVE-2024-22228

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svccifssupport utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands with root privileges...

7.8CVSS8AI score0.00644EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/12 7:15 p.m.8 views

CVE-2024-22224

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svcnas utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands with root privileges...

7.8CVSS6AI score0.00883EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/12 7:15 p.m.9 views

CVE-2024-0170

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svccava utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands with root privileges...

7.8CVSS7.3AI score0.00837EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/12 7:15 p.m.26 views

Command injection

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svcnas utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands with root privileges...

4.3CVSS8.1AI score0.00883EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2024/02/12 7:15 p.m.19 views

Command injection

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svccava utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands with root privileges...

4.3CVSS8.1AI score0.00837EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder