Lucene search
+L

829 matches found

Debian CVE
Debian CVE
added 2024/11/26 1:33 p.m.47 views

CVE-2024-11703

On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authentication. This vulnerability affects Firefox 133...

5.7CVSS5.7AI score0.00208EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/11/26 12:0 a.m.5 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which can be exploited by an attacker to view saved passwords without performing the required device PIN authentication...

5.7CVSS6.5AI score0.00208EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/11/26 12:0 a.m.5 views

PT-2024-8879

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 133 Description: The issue is related to the bypass of device PIN authentication, potentially allowing unauthorized access to protected information. On Android devices, Firefox may have inadvertently allowed viewing...

9.8CVSS8.8AI score0.1307EPSS
SaveExploits1References320
OSV
OSV
added 2024/11/18 4:15 p.m.8 views

CVE-2020-3525

A vulnerability in the Admin portal of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to recover service account passwords that are saved on an affected system. The vulnerability is due to the incorrect inclusion of saved passwords when loading configuration page...

4.3CVSS5.8AI score0.00541EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/11/18 3:54 p.m.11 views

CVE-2020-3525 Cisco Identity Services Engine Password Disclosure to an Unauthorized Actor Vulnerability

A vulnerability in the Admin portal of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to recover service account passwords that are saved on an affected system. The vulnerability is due to the incorrect inclusion of saved passwords when loading configuration page...

4.3CVSS4.6AI score0.00541EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/11/18 3:54 p.m.13 views

CVE-2020-3525 Cisco Identity Services Engine Password Disclosure to an Unauthorized Actor Vulnerability

A vulnerability in the Admin portal of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to recover service account passwords that are saved on an affected system. The vulnerability is due to the incorrect inclusion of saved passwords when loading configuration page...

4.3CVSS0.00541EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/10/14 12:40 a.m.7 views

WordPress Elementor Addon Elements plugin <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections vulnerability

Authenticated Contributor+ Sensitive Information Exposure via tablesavedsections vulnerability discovered by Ankit Patel in WordPress Plugin Elementor Addon Elements versions = 1.13.8...

4.3CVSS7AI score0.00378EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/10/04 12:15 a.m.42 views

CVE-2024-44204

A logic issue was addressed with improved validation. This issue is fixed in iOS 18.0.1 and iPadOS 18.0.1. A user's saved passwords may be read aloud by VoiceOver...

5.5CVSS0.0486EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/04 12:15 a.m.6 views

CVE-2024-44204

A logic issue was addressed with improved validation. This issue is fixed in iOS 18.0.1 and iPadOS 18.0.1. A user's saved passwords may be read aloud by VoiceOver...

5.5CVSS5.7AI score0.0486EPSS
SaveExploits0References2
CVE
CVE
added 2024/10/03 11:29 p.m.102 views

CVE-2024-44204

CVE-2024-44204 affects Apple iOS/iPadOS Passwords: a logic issue addressed by improved validation that could allow a user’s saved passwords to be read aloud by VoiceOver. Affected products include iPhone XS and later, iPad Pro models, iPad Air, iPad mini, and iPad versions compatible with iOS 18....

5.5CVSS5.8AI score0.0486EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
added 2024/10/03 12:0 a.m.12 views

PT-2024-31037 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.0.1 iPadOS versions prior to 18.0.1 Description: A logic issue was addressed with improved validation, allowing a user's saved passwords to be read aloud by VoiceOver. This issue is related to the VoiceOver feature in...

5.5CVSS6AI score0.0486EPSS
SaveExploits0References49
NVD
NVD
added 2024/09/07 5:15 p.m.30 views

CVE-2024-42021

An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials...

7.5CVSS0.00299EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/07 5:15 p.m.4 views

CVE-2024-42021

An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials...

6.5CVSS5.8AI score0.00299EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/07 5:15 p.m.5 views

CVE-2024-40710

A series of related high-severity vulnerabilities, the most notable enabling remote code execution RCE as the service account and extraction of sensitive information savedcredentials and passwords. Exploiting these vulnerabilities requires a user who has been assigned a low-privileged role within...

8.8CVSS6.3AI score0.0112EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/07 4:11 p.m.29 views

CVE-2024-42021

An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials...

7.5CVSS0.00299EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/07 4:11 p.m.67 views

CVE-2024-42021

CVE-2024-42021 affects Veeam ONE (12.1.x) and earlier 12 builds, where an improper access control allows an attacker with valid access tokens to access saved credentials. The issue is documented in Veeam ONE vulnerability details and is noted as fixed in Veeam ONE 12.2 (build 12.2.0.4093). Affect...

7.5CVSS6.8AI score0.00299EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/07 4:11 p.m.14 views

CVE-2024-42021

An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials...

7.5CVSS6.8AI score0.00299EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/09/07 12:0 a.m.6 views

Veeam ONE 安全漏洞

Veeam ONE is a suite of IT monitoring and reporting tools from Veeam USA. The product supports features such as backup monitoring, operational status monitoring of virtual and physical environments. A security vulnerability exists in Veeam ONE version 12.1.0.3208 and previous versions 12, which...

7.5CVSS7.5AI score0.00299EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/09/04 12:0 a.m.9 views

PT-2024-6314 · Veeam · Veeam One

Name of the Vulnerable Software and Affected Versions: Veeam ONE affected versions not specified Description: An improper access control issue allows an attacker with valid access tokens to access saved credentials. The vulnerability is related to deficiencies in access control in the Veeam ONE I...

7.5CVSS7.6AI score0.00299EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
added 2024/09/03 12:0 a.m.5 views

The vulnerability of the netfilter component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to a memory leak that occurs during updates of state-saved objects. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.0021EPSS
SaveExploits0References14Affected Software2
Rows per page
Query Builder