Lucene search
+L

2876 matches found

Cvelist
Cvelist
added 2024/06/06 6:30 p.m.21 views

CVE-2024-5132

...

SaveExploits0
CVE
CVE
added 2024/06/06 6:30 p.m.83 views

CVE-2024-5132

CVE-2024-5132 entry is rejected/not used and does not represent an active vulnerability entry.

7AI score
SaveExploits0
Oracle linux
Oracle linux
added 2024/06/06 12:0 a.m.371 views

cockpit security update

310.4-1.0.1 - Update documentation links Orabug: 34706402 - Drop subscription-manager-cockpit requirement for ol Orabug: 34681110 - Remove duplicate reference to server in cockpit Orabug: 33862832 - Update documentation links Orabug: 32795691 - Make documentation links point to Oracle Linux...

7.3CVSS6.9AI score0.01181EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2024/06/05 12:0 a.m.17 views

openSUSE Security Advisory (SUSE-SU-2024:1830-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.2CVSS7AI score0.00756EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.18 views

RHEL 5 : subscription-manager (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - subscription-manager: sensitive world readable files in /var/lib/rhsm/ CVE-2016-4455 Note that Nessus has not teste...

3.3CVSS6.8AI score0.00425EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/05/31 12:0 a.m.19 views

Ubuntu Pro Subscription Detection

The remote Ubuntu host has an active Ubuntu Pro subscription. %NASLMINLEVEL 80900 include"compat.inc"; if description scriptid198218; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/07/05"; scriptnameenglish:"Ubuntu Pro Subscription Detection";...

7AI score
SaveExploits0References1
CNVD
CNVD
added 2024/05/31 12:0 a.m.3 views

JetBrains TeamCity Subscription Page Cross-Site Scripting Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from a cross-site...

6.1CVSS6.2AI score0.00269EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/05/30 12:0 a.m.19 views

SUSE SLED15: gio-branding-upstream / glib2-devel / glib2-devel-32bit / etc (SUSE-SU-2024:1830-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1830-1 advisory. - CVE-2024-34397: Fixed signal subscription unicast spoofing vulnerability bsc1224044. Tenable has...

5.2CVSS6.7AI score0.00756EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2024/05/30 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2024:1833-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.2CVSS7AI score0.00756EPSS
SaveExploits1References4
OSV
OSV
added 2024/05/29 12:8 p.m.7 views

SUSE-SU-2024:1830-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2024-34397: Fixed signal subscription unicast spoofing vulnerability bsc1224044...

5.2CVSS5.4AI score0.00756EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/05/29 12:0 a.m.7 views

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from a cross-site...

6.1CVSS6.1AI score0.00269EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/20 5:49 p.m.34 views

GHSA-7V7M-PCW5-H3CG Pusher Service Channel Authentication Bypass

The service offered by Pusher provides "private" channels with an authentication mechanism that restricts subscription access. The decision on allowing subscriptions to private channels is delegated to customers, who implement an authentication endpoint. End-users request a token from this endpoi...

6.5CVSS7.2AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:0 a.m.8 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in their susceptibility to corruption of unreliable data in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the ability to restore unreliable data in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially creat...

9CVSS6AI score0.8399EPSS
SaveExploits0References3
Veracode
Veracode
added 2024/05/16 6:19 a.m.24 views

Insecure Direct Object Reference (IDOR)

org.bonitasoft.engine, bonita-server is vulnerable to Insecure Direct Object Reference IDOR. The vulnerability is due to the absence of dynamic permissions, which previously existed only in the Subscription edition and were not customizable in the Community edition...

6.5CVSS6.8AI score0.00318EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/05/15 6:30 p.m.19 views

GHSA-76V2-48W6-CRXR Bonitasoft Runtime Community edition's contains an insecure direct object references vulnerability

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.5CVSS6.5AI score0.00318EPSS
SaveExploits0References5
NVD
NVD
added 2024/05/15 5:15 p.m.39 views

CVE-2024-28087

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.5CVSS6.6AI score0.00318EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/15 12:0 a.m.14 views

CVE-2024-28087

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.9AI score0.00318EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/15 12:0 a.m.39 views

CVE-2024-28087

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.8AI score0.00318EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2024/05/14 7:0 a.m.50 views

Description of the security update for SharePoint Server Subscription Edition: May 14, 2024 (KB5002599)

None None...

7.5CVSS6.8AI score0.8399EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2024/05/14 12:0 a.m.40 views

Security Updates for Microsoft SharePoint Server Subscription Edition (May 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitra...

7.5CVSS6.5AI score0.8399EPSS
SaveExploits1References3
Rows per page
Query Builder