Lucene search
+L

12732 matches found

CNNVD
CNNVD
added 2023/08/05 12:00 a.m.8 views

Huawei HarmonyOS 数据伪造问题漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security restriction bypass vulnerability that stems from the use of insecure signatures in the osulogin module, which can be...

7.5CVSS6.7AI score0.00249EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/08/05 12:00 a.m.9 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security restriction bypass vulnerability exists in Huawei HarmonyOS, which can be exploited by an attacker to bypass authorization and gain access...

5.3CVSS6.8AI score0.00296EPSS
SaveExploits0References4
CNVD
CNVD
added 2023/08/03 12:00 a.m.57 views

Mozilla Firefox and Firefox ESR Security Bypass Vulnerability (CNVD-2023-61756)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox ESR is Firefox Enterprise Edition. A security bypass vulnerability exists in Mozilla Firefox and Firefox ESR, which can be exploited by attackers to bypass security restrictions...

5.5CVSS6.9AI score0.00206EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/08/03 12:00 a.m.14 views

The vulnerability of the Referrer Policy component of the SAP Enable Now software, which is used for creating and managing training materials. This vulnerability allows a hacker to circumvent existing security restrictions and expose protected information.

The vulnerability of the Referrer Policy component in SAP Enable Now, which is used for creating and managing training materials, is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and disclose...

5.3CVSS5.8AI score0.00483EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/08/03 12:00 a.m.14 views

The vulnerability of Google Chrome’s Autofill function allows attackers to circumvent navigation restrictions.

The vulnerability of Google Chrome’s Autofill function is related to improper authentication procedures. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

6.4CVSS5.8AI score0.00454EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
added 2023/08/03 12:00 a.m.10 views

Mozilla Firefox and Firefox ESR Security Bypass Vulnerability (CNVD-2023-61755)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox ESR is Firefox Enterprise Edition. A security bypass vulnerability exists in Mozilla Firefox and Firefox ESR, which can be exploited by an attacker to cause some cookies to be lost when sending a...

7.5CVSS6.8AI score0.00727EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/08/03 12:00 a.m.10 views

The vulnerability of SAP BusinessObjects Business Intelligence platform, related to insufficient restrictions on authentication attempts, allows attackers to circumvent existing security restrictions through brute-force attacks.

The vulnerability of SAP BusinessObjects Business Intelligence platform is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through brute-force attacks...

7.8CVSS7.2AI score0.00585EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2023/08/01 12:00 a.m.8 views

Mozilla Firefox 访问控制错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox ESR is Firefox Enterprise Edition. A security bypass vulnerability exists in Mozilla Firefox and Firefox ESR, which can be exploited by an attacker to bypass cross-domain restrictions and access...

5.3CVSS8.6AI score0.00594EPSS
SaveExploits0References15
CNNVD
CNNVD
added 2023/08/01 12:00 a.m.4 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox ESR is Firefox Enterprise Edition. A security bypass vulnerability exists in Mozilla Firefox and Firefox ESR, which can be exploited by attackers to trick users into granting privileges using...

8.8CVSS8.6AI score0.00632EPSS
SaveExploits1References15
CNNVD
CNNVD
added 2023/08/01 12:00 a.m.7 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox ESR is Firefox Enterprise Edition. A security bypass vulnerability exists in Mozilla Firefox and Firefox ESR, which can be exploited by an attacker to cause some cookies to be lost when sending a...

7.5CVSS8.5AI score0.00727EPSS
SaveExploits0References15
CNNVD
CNNVD
added 2023/08/01 12:00 a.m.9 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox ESR is Firefox Enterprise Edition. A security bypass vulnerability exists in Mozilla Firefox and Firefox ESR, which can be exploited by attackers to bypass security restrictions...

5.5CVSS8.6AI score0.00206EPSS
SaveExploits0References9
Kaspersky
Kaspersky
added 2023/08/01 12:00 a.m.58 views

KLA51574 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security vulnerability in Offscreen Canv...

9.8CVSS9.5AI score0.12484EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/07/31 12:00 a.m.14 views

The vulnerability of the Jenkins OpenShift Login plugin, related to improper session management, allows attackers to bypass security restrictions.

The vulnerability of the Jenkins OpenShift Login plugin is related to improper session management. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...

10CVSS7.6AI score0.00833EPSS
SaveExploits0References4Affected Software2
CNVD
CNVD
added 2023/07/30 12:00 a.m.41 views

Apple macOS Ventura security bypass vulnerability (CNVD-2023-61764)

Apple macOS Ventura is a desktop operating system from the American company Apple. A security bypass vulnerability exists in Apple macOS Ventura, which can be exploited by attackers to bypass sandbox restrictions...

8.6CVSS6.5AI score0.00825EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/07/28 12:00 a.m.9 views

Apple macOS Ventura 注入漏洞

Apple macOS Ventura is a desktop operating system from the American company Apple. A security bypass vulnerability exists in Apple macOS Ventura, which can be exploited by attackers to bypass certain privacy preferences...

7.5CVSS6.4AI score0.01094EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/07/28 12:00 a.m.12 views

The vulnerability of the GeoVision GV-ADR2701 video surveillance system allows a intruder to bypass security measures.

The vulnerability of the GeoVision GV-ADR2701 video surveillance system is related to errors during the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass security measures...

10CVSS7.7AI score0.00733EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2023/07/27 12:00 a.m.38 views

Wyse Management Suite Security Bypass Vulnerability

Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell, USA. The product includes centralized management of Wyse endpoints, asset tracking and automated device discovery. A security bypass vulnerability exists in prior versions of Wyse Management Suite...

4.9CVSS6.7AI score0.00452EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/26 2:15 p.m.6 views

CVE-2022-43712

POST requests to /web/mvc in GX Software XperienCentral version 10.36.0 and earlier were not blocked for uses that are not logged in. If an unauthorized user is able to bypass other security filters they are able to post unauthorized data to the server because of CVE-2022-22965...

6.5CVSS7.3AI score0.00473EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/07/26 2:15 p.m.16 views

CVE-2022-43712

POST requests to /web/mvc in GX Software XperienCentral version 10.36.0 and earlier were not blocked for uses that are not logged in. If an unauthorized user is able to bypass other security filters they are able to post unauthorized data to the server because of CVE-2022-22965...

9.8CVSS5.8AI score0.99677EPSS
SaveExploits105References3
IBM Security Bulletins
IBM Security Bulletins
added 2023/07/26 2:00 p.m.51 views

Security Bulletin: CVE-2023-0465 may affect IBM CICS TX Advanced 10.1

Summary CVE-2023-0465 may affect IBM CICS TX Advanced 10.1. IBM CICS TX Advanced 10.1 has addressed the applicable vulnerabilities. Vulnerability Details CVEID:CVE-2023-0465 DESCRIPTION: OpenSSL could allow a remote attacker to bypass security restrictions, caused by a flaw when using a non-defau...

5.3CVSS6.1AI score0.01583EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder