Lucene search
+L

12800 matches found

BDU FSTEC
BDU FSTEC
added 2022/02/07 12:00 a.m.10 views

The vulnerability of the Open Enclave SDK, a software development tool, arises from the insecure management of privileges. This allows attackers to bypass system security restrictions and enhance their privileges.

The vulnerability of the Open Enclave SDK software development tools is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to bypass system security restrictions and enhance their privileges...

6.8CVSS7.7AI score0.00903EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2022/02/05 12:00 a.m.8 views

PT-2022-1935 · Microsoft · Intune Company Portal

Name of the Vulnerable Software and Affected Versions: Microsoft Intune Company Portal for iOS affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass security restrictions. Recommendations: At the moment, there is no...

5.5CVSS4.6AI score0.00721EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2022/02/04 12:00 a.m.9 views

The vulnerability of the standard command-line utility package util-linux lies in incorrect permissions and access privileges, allowing a hacker to circumvent established security restrictions.

The vulnerability of the standard command-line utility package util-linux is related to incorrect permissions and access privileges. Exploiting this vulnerability could allow an attacker to circumvent established security restrictions...

3.3CVSS6.4AI score0.00634EPSS
SaveExploits3References6Affected Software3
Veracode
Veracode
added 2022/02/03 11:03 a.m.22 views

Improper Input Validation

org.apache.pulsar, pulsar is vulnerable to improper input validation. The vulnerability exists due to improper access restrictions in internalResetCursorOnPosition function in PersistentTopicsBase.javafile which allows an attacker to bypass security and read the ledger...

6.5CVSS5.3AI score0.01726EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2022/02/01 12:00 a.m.41 views

ASB-A-197399948

In updatePackageMappingsData of UsageStatsService.java, there is a possible way to bypass security and privacy settings of app usage due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS7.9AI score0.00133EPSS
SaveExploits0References2
NCSC
NCSC
added 2022/02/01 12:00 a.m.7 views

Vulnerabilities fixed in IBM Spectrum Protect Plus

IBM has fixed vulnerabilities in Spectrum Protect Plus. The vulnerabilities, which include those in the Node.js and PostgreSQL components of the product, allow a malicious party to perform attacks that result in the following categories of damage: Cross-Site Scripting XSS. Manipulation of data...

8.2CVSS7.3AI score0.21514EPSS
SaveExploits5
Kaspersky
Kaspersky
added 2022/01/31 12:00 a.m.52 views

KLA12439 Multiple vulnerabilities in Samba

Multiple vulnerabilities were found in Samba. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Out of bounds heap read write vulnerability can be exploited remotely to execute arbitrary code. 2...

9CVSS9.2AI score0.73864EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.22 views

Mageia: Security Advisory (MGASA-2014-0169)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.5AI score0.0761EPSS
SaveExploits4References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.22 views

Mageia: Security Advisory (MGASA-2014-0261)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.5AI score0.10912EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.25 views

Mageia: Security Advisory (MGASA-2017-0211)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.6AI score0.08552EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.20 views

Mageia: Security Advisory (MGASA-2014-0291)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.23024EPSS
SaveExploits4References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.26 views

Mageia: Security Advisory (MGASA-2019-0189)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.01633EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/01/26 12:00 a.m.5 views

Apple多款产品安全特征问题漏洞

Apple tvOS and others are products of Apple Inc.Apple tvOS is an operating system for smart TVs.Apple watchOS is an operating system for smart watches.Apple iPadOS is an operating system for iPad tablets. A vulnerability exists in various Apple products due to a security signature issue, which...

6.5CVSS6.7AI score0.01623EPSS
SaveExploits0References21
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.10 views

The vulnerability of NETGEAR’s Wi-Fi router software, including models CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from deficiencies in authentication mechanisms. This allows attackers to circumvent security restrictions.

The vulnerability of Wi-Fi router microprogramming software from NETGEAR, including models CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to circumvent security...

9.6CVSS7.7AI score0.00458EPSS
SaveExploits0References3Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.9 views

The vulnerability of NETGEAR’s Wi-Fi router software, including models CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from deficiencies in authentication mechanisms. This allows attackers to circumvent security restrictions.

The vulnerability of Wi-Fi router microprogramming software from NETGEAR, including models CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to circumvent security...

9.6CVSS7.7AI score0.00539EPSS
SaveExploits0References3Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.9 views

The vulnerability of NETGEAR CBR40, CBR750, RBW30, RBK752, RBR750, RBS750, RBK852, RBR850, RBS850, and RBS40V Wi-Fi router microprogramming systems lies in their authentication mechanisms’ deficiencies, which allow attackers to circumvent security restrictions.

The vulnerability of NETGEAR CBR40, CBR750, RBW30, RBK752, RBR750, RBS750, RBK852, RBR850, RBS850, and RBS40V Wi-Fi routers’ microprogramming software is related to deficiencies in authentication mechanisms. Exploiting this vulnerability can allow a malicious actor to circumvent security...

9.6CVSS7.8AI score0.01418EPSS
SaveExploits0References3Affected Software10
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.9 views

The vulnerability of NETGEAR’s Wi-Fi router software, including models CBR750, CBR40, RBR852, RBR850, and RBS850, stems from deficiencies in authentication mechanisms. This allows attackers to circumvent security restrictions.

The vulnerability of NETGEAR Wi-Fi router software, including models CBR750, CBR40, RBR852, RBR850, and RBS850, is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions from a remote location...

9.6CVSS7.8AI score0.01143EPSS
SaveExploits0References3Affected Software5
OSV
OSV
added 2022/01/21 6:15 p.m.14 views

CVE-2020-4879

IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could allow a remote attacker to bypass security restrictions, caused by improper validation of authentication cookies. IBM X-Force ID: 190847...

9.8CVSS7.7AI score0.01481EPSS
SaveExploits0References2
NVD
NVD
added 2022/01/21 6:15 p.m.21 views

CVE-2020-4879

IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could allow a remote attacker to bypass security restrictions, caused by improper validation of authentication cookies. IBM X-Force ID: 190847...

9.8CVSS0.01481EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/01/21 5:20 p.m.26 views

CVE-2020-4879

IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could allow a remote attacker to bypass security restrictions, caused by improper validation of authentication cookies. IBM X-Force ID: 190847...

7.3CVSS9.1AI score0.01481EPSS
SaveExploits0References2
Rows per page
Query Builder