Lucene search
K

4539 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 7:27 a.m.4 views

CVE-2019-3985

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the ssid parameter...

8.8CVSS8.2AI score0.00731EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:54 a.m.6 views

CVE-2010-4545

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service resource consumption and sync outage by syncing a large volume of data...

4CVSS6.4AI score0.00406EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:18 a.m.6 views

CVE-2018-15890

An issue was discovered in EthereumJ 1.8.2. There is Unsafe Deserialization in ois.readObject in mine/Ethash.java and decoder.readObject in crypto/ECKey.java. When a node syncs and mines a new block, arbitrary OS commands can be run on the server...

10CVSS7.2AI score0.00738EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:1 a.m.4 views

CVE-2012-1391

Unspecified vulnerability in the mOffice - Outlook sync com.innov8tion.isharesync application 3.1 for Android has unknown impact and attack vectors...

10CVSS7AI score0.00433EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:48 p.m.3 views

CVE-2005-4771

Trusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button that bypasses the domain-authentication prompt, which allows local users to sync a handheld PDA device despite a policy setting that sync is unauthorized...

4.6CVSS6.6AI score0.00085EPSS
Exploits0References1
NVD
NVD
added 2025/05/21 5:15 p.m.13 views

CVE-2025-48009

Missing Authorization vulnerability in Drupal Single Content Sync allows Functionality Misuse.This issue affects Single Content Sync: from 0.0.0 before 1.4.12...

3.1CVSS0.00127EPSS
Exploits0References1
OSV
OSV
added 2025/05/21 5:15 p.m.2 views

CVE-2025-48009

Missing Authorization vulnerability in Drupal Single Content Sync allows Functionality Misuse.This issue affects Single Content Sync: from 0.0.0 before 1.4.12...

3.1CVSS5.8AI score
Exploits0References1
Cvelist
Cvelist
added 2025/05/21 4:22 p.m.10 views

CVE-2025-48009 Single Content Sync - Moderately critical - Access bypass - SA-CONTRIB-2025-060

Missing Authorization vulnerability in Drupal Single Content Sync allows Functionality Misuse.This issue affects Single Content Sync: from 0.0.0 before 1.4.12...

0.00127EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/21 4:22 p.m.5 views

CVE-2025-48009 Single Content Sync - Moderately critical - Access bypass - SA-CONTRIB-2025-060

Missing Authorization vulnerability in Drupal Single Content Sync allows Functionality Misuse.This issue affects Single Content Sync: from 0.0.0 before 1.4.12...

4AI score0.00127EPSS
Exploits0References1
CVE
CVE
added 2025/05/21 4:22 p.m.48 views

CVE-2025-48009

CVE-2025-48009 affects Drupal Single Content Sync (versions 0.0.0 through 1.4.11). The issue is a Missing Authorization vulnerability that enables functionality misuse (access bypass) due to insufficient authorization checks. Evidence from multiple sources (CVE record, CVE listing, and vendor adv...

3.1CVSS4AI score0.00127EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/05/21 12:0 a.m.1 views

Drupal Single Content Sync 安全漏洞

Drupal Single Content Sync is a module plugin in the Drupal content management system for the Drupal community. A security vulnerability exists in the Drupal plugin Single Content Sync prior to version 1.4.12, which stems from a lack of authorization and could lead to feature abuse...

3.1CVSS6.6AI score0.00127EPSS
Exploits0References2
Citrix
Citrix
added 2025/05/21 12:0 a.m.8 views

NetScaler HA sync on AWS fails when using Policy Based Routing (PBR)

HA sync between Primary NetScaler node and Secondary NetScaler node will fail when Policy Based Routing is configured, when NetScaler is hosted on Amazon Web Services AWS...

7.2AI score
Exploits0
Positive Technologies
Positive Technologies
added 2025/05/21 12:0 a.m.2 views

PT-2025-22387 · Drupal · Drupal Single Content Sync

Name of the Vulnerable Software and Affected Versions: Drupal Single Content Sync versions 0.0.0 through 1.4.11 Description: The issue is related to a Missing Authorization vulnerability in Drupal Single Content Sync, which allows functionality misuse. Recommendations: For versions 0.0.0 through...

3.1CVSS6.4AI score0.00127EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/05/19 12:0 a.m.2 views

PT-2025-27691

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel's USB-audio MIDI code has been identified. The issue arises when the driver is freed without the disconnect call, leaving a timer in an active state...

6CVSS6.4AI score0.00073EPSS
Exploits0
Debian CVE
Debian CVE
added 2025/05/16 2:13 p.m.8 views

CVE-2025-47792

Nextcloud Desktop is the desktop sync client for Nextcloud. In versions of Nextcloud Desktop prior to 3.15, 3rdparty applications already installed on a user machine can create link shares for almost all data via the socket API. These shares can then be easily sent off to an external service...

6.1CVSS5.3AI score0.00038EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/15 5:14 p.m.7 views

CVE-2025-29973

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally...

7CVSS6.8AI score0.00205EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/05/14 12:0 a.m.3 views

Drupal Single Content Sync module < 1.4.12 - Authenticated Broken Access Control vulnerability

Authenticated Broken Access Control vulnerability discovered by Dezső Biczó mxr576 in WordPress Module Single Content Sync versions 1.4.12...

3.1CVSS7AI score0.00127EPSS
Exploits0References1Affected Software1
Drupal
Drupal
added 2025/05/14 12:0 a.m.9 views

Single Content Sync - Moderately critical - Access bypass - SA-CONTRIB-2025-060

This module enables you to seamlessly migrate and deploy content across environments, eliminating manual steps. It simplifies the process by exporting content to a YML file or a ZIP archive, which can be imported into another environment effortlessly. While the export feature rightfully bypasses...

3.1CVSS6.6AI score0.00127EPSS
Exploits0References2
NVD
NVD
added 2025/05/13 5:15 p.m.6 views

CVE-2025-29973

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally...

7CVSS0.00205EPSS
Exploits0References1
OSV
OSV
added 2025/05/13 5:15 p.m.3 views

CVE-2025-29973

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00205EPSS
Exploits0References1
Rows per page
Query Builder