Lucene search
K

6 matches found

Positive Technologies
Positive Technologies
added 2023/11/20 12:0 a.m.5 views

PT-2023-23194 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.2 Description: The issue allows a local attacker to obtain confidential information or rewrite sensitive files due to incorrect default permissions. Recommendations: For OpenHarmony versions prior to 3.2.2,...

7.3CVSS6.6AI score0.00184EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.2 views

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a hacker to read or rewrite any arbitrary files.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves deficiencies in path name checking for the directory. Exploiting this vulnerability allows a malicious actor to read or re-record arbitrary files using specially created HTTPS requests...

8.1CVSS7.5AI score0.01908EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.4 views

The vulnerability of the SSH server on the Cisco IOS XR operating system allows a hacker to read and rewrite any files they choose.

The vulnerability of the SSH server on the Cisco IOS XR operating system is related to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability allows a remote attacker to read and rewrite any files as desired...

8.5CVSS7.5AI score0.0153EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/25 12:0 a.m.5 views

The vulnerability of the Spring Framework software, caused by privilege management errors, allows a hacker to read and rewrite any files they desire.

The vulnerability of the Spring Framework software is caused by privilege management errors. Exploiting this vulnerability allows an attacker to read and rewrite any files at will...

7.8CVSS6.8AI score0.00396EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.4 views

The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system allows a hacker to re-write files in the basic file system.

The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to re-write files in the...

6.6CVSS6.3AI score0.0181EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2018/07/27 12:0 a.m.3 views

F5 BIG-IP Denial of Service Vulnerability (CNVD-2018-21232)

F5 BIG-IP is an all-in-one network device from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A security vulnerability exists in the F5 BIG-IP. A remote attacker can exploit this vulnerability to cause a denial of service wh...

5.3CVSS5.4AI score0.01194EPSS
Exploits0References1
Rows per page
Query Builder