Lucene search
+L

167 matches found

OSV
OSV
•added 2024/04/22 12:15 p.m.•18 views

CVE-2024-22809

Incorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to access the G code's shared folder and view sensitive information...

6.5CVSS5.8AI score0.00254EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/22 12:00 a.m.•3 views

CVE-2024-22809: Improper Handling of Syntactically Invalid Structure

Incorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to access the G code's shared folder and view sensitive information...

6.5CVSS5.8AI score0.00254EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/04/22 12:00 a.m.•44 views

CVE-2024-22809

Incorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to access the G code's shared folder and view sensitive information...

6.7AI score0.00254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/22 12:00 a.m.•26 views

CVE-2024-22809

Incorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to access the G code's shared folder and view sensitive information...

6.8AI score0.00254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/04/22 12:00 a.m.•18 views

PT-2024-19570

Name of the Vulnerable Software and Affected Versions Tormach xsTECH CNC Router, PathPilot Controller version 2.9.6 Description The issue is related to incorrect access control, allowing attackers to access the G code's shared folder and view sensitive information. Recommendations For version...

6.5CVSS7.1AI score0.00254EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2024/03/11 12:00 a.m.•69 views

Debian dla-3759 : qemu - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3759 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3759-1 [email protected]...

7.5CVSS7AI score0.01606EPSS
SaveExploits0References8
OSV
OSV
•added 2023/12/06 7:15 a.m.•24 views

AZL-32127 CVE-2023-2861 affecting package qemu for versions less than 6.2.0-23

A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder...

7.1CVSS6.8AI score0.00376EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/12/06 7:15 a.m.•8 views

CVE-2023-2861

A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder...

7.1CVSS6.8AI score0.00376EPSS
SaveExploits0References6
OSV
OSV
•added 2023/12/06 7:15 a.m.•14 views

AZL-35167 CVE-2023-2861 affecting package qemu for versions less than 8.2.0-1

A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder...

7.1CVSS6.8AI score0.00376EPSS
SaveExploits0References1
OSV
OSV
•added 2023/12/06 7:15 a.m.•6 views

DEBIAN-CVE-2023-2861

A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder...

7.1CVSS6.8AI score0.00376EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2023/12/06 6:19 a.m.•51 views

CVE-2023-2861

A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder...

7.1CVSS6.7AI score0.00376EPSS
SaveExploits0
NVD
NVD
•added 2023/11/14 1:15 a.m.•39 views

CVE-2023-31403

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation...

9.6CVSS0.00436EPSS
SaveExploits0References2
OSV
OSV
•added 2023/11/14 1:15 a.m.•18 views

CVE-2023-31403

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation...

8CVSS5.8AI score0.00436EPSS
SaveExploits0References2
Prion
Prion
•added 2023/11/14 1:15 a.m.•30 views

Authorization

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation...

5.2CVSS7.3AI score0.00436EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/11/14 12:59 a.m.•21 views

CVE-2023-31403 Improper Access Control vulnerability in SAP Business One product installation

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation...

9.6CVSS8.8AI score0.00436EPSS
SaveExploits0References2
CVE
CVE
•added 2023/11/14 12:59 a.m.•91 views

CVE-2023-31403

CVE-2023-31403 – SAP Business One 10.0 improper access control involves insufficient authentication/authorization checks on the SMB shared folder, allowing an attacker to read/write to that folder and potentially execute files via the installation process. Affected software is SAP Business One (1...

9.6CVSS8AI score0.00436EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/11/14 12:59 a.m.•48 views

CVE-2023-31403 Improper Access Control vulnerability in SAP Business One product installation

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation...

9.6CVSS9.6AI score0.00436EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•6 views

CVE-2023-31403: Incorrect Authorization

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation...

9.6CVSS7.5AI score0.00436EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/11/13 12:00 a.m.•12 views

PT-2023-23298 · Sap · Sap Business One

Name of the Vulnerable Software and Affected Versions: SAP Business One version 10.0 Description: The SAP Business One installation does not perform proper authentication and authorization checks for SMB shared folders. This allows any malicious user to read and write to the SMB shared folder...

9.6CVSS7.2AI score0.00436EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/10 12:00 a.m.•2 views

CVE-2023-39961: Improper Access Control

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 24.0.4 and prior to versions 25.0.9, 26.0.4, and 27.0.1, when a folder with images or an image was shared without download permissions, the user could add the image inline into a text file and...

4.3CVSS5.5AI score0.00585EPSS
SaveExploits0References2
Rows per page
Query Builder