Lucene search
+L

990 matches found

RedhatCVE
RedhatCVE
•added 2025/02/05 10:56 p.m.•18 views

CVE-2022-1397

API Privilege Escalation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Full system takeover...

9CVSS6.7AI score0.01166EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 4:53 p.m.•31 views

CVE-2020-25244

A vulnerability has been identified in LOGO! Soft Comfort All versions V8.4. The software insecurely loads libraries which makes it vulnerable to DLL hijacking. Successful exploitation by a local attacker could lead to a takeover of the system where the software is installed...

8.4CVSS6.3AI score0.00248EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/05 3:47 p.m.•17 views

CVE-2020-14649

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Orac...

7.5CVSS6.4AI score0.00554EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/05 2:32 p.m.•15 views

CVE-2020-2702

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

7.5CVSS6.4AI score0.00416EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/05 2:28 p.m.•18 views

CVE-2020-2913

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

7CVSS6.2AI score0.00385EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/05 2:22 p.m.•19 views

CVE-2020-2565

Vulnerability in the Oracle Solaris product of Oracle Systems component: Consolidation Infrastructure. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracl...

7.5CVSS6.5AI score0.00402EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/05 2:17 p.m.•23 views

CVE-2020-2851

Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise...

7.8CVSS7.1AI score0.0056EPSS
SaveExploits3
RedhatCVE
RedhatCVE
•added 2025/02/05 2:17 p.m.•19 views

CVE-2020-2914

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

7CVSS6.2AI score0.00385EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/05 4:12 a.m.•23 views

CVE-2024-54154

In JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in plugin sandbox...

9.8CVSS6.9AI score0.00742EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/04 8:15 p.m.•59 views

CVE-2025-24968

reNgine is an automated reconnaissance framework for web applications. An unrestricted project deletion vulnerability allows attackers with specific roles, such as penetrationtester or auditor to delete all projects in the system. This can lead to a complete system takeover by redirecting the...

8.8CVSS0.00626EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/02/04 7:28 p.m.•37 views

CVE-2025-24968 Business Logic And Unrestricted Project Deletion Lead To Take Over the System in reNgine

reNgine is an automated reconnaissance framework for web applications. An unrestricted project deletion vulnerability allows attackers with specific roles, such as penetrationtester or auditor to delete all projects in the system. This can lead to a complete system takeover by redirecting the...

8.8CVSS8.7AI score0.00626EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/02/04 7:28 p.m.•50 views

CVE-2025-24968 Business Logic And Unrestricted Project Deletion Lead To Take Over the System in reNgine

reNgine is an automated reconnaissance framework for web applications. An unrestricted project deletion vulnerability allows attackers with specific roles, such as penetrationtester or auditor to delete all projects in the system. This can lead to a complete system takeover by redirecting the...

8.8CVSS0.00626EPSS
SaveExploits1References1
CVE
CVE
•added 2025/02/04 7:28 p.m.•128 views

CVE-2025-24968

CVE-2025-24968 — reNgine is affected by an unrestricted project deletion vulnerability. According to PT Security and Red Hat entries, attackers with specific roles (e.g., penetration tester , auditor ) can delete all projects, potentially enabling a complete system takeover via redirection to the...

8.8CVSS6.8AI score0.00626EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2025/02/04 7:28 p.m.•2 views

CVE-2025-24968

reNgine is an automated reconnaissance framework for web applications. An unrestricted project deletion vulnerability allows attackers with specific roles, such as "penetrationtester" or "auditor" to delete all projects in the system. This can lead to a complete system takeover by redirecting the...

8.8CVSS0.00626EPSS
SaveExploits1References3
OSV
OSV
•added 2025/02/04 7:28 p.m.•22 views

CVE-2025-24968 Business Logic And Unrestricted Project Deletion Lead To Take Over the System in reNgine

reNgine is an automated reconnaissance framework for web applications. An unrestricted project deletion vulnerability allows attackers with specific roles, such as penetrationtester or auditor to delete all projects in the system. This can lead to a complete system takeover by redirecting the...

8.8CVSS6.7AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/04 12:00 a.m.•3 views

CVE-2025-24968: Improper Access Control

reNgine is an automated reconnaissance framework for web applications. An unrestricted project deletion vulnerability allows attackers with specific roles, such as penetrationtester or auditor to delete all projects in the system. This can lead to a complete system takeover by redirecting the...

8.8CVSS5.6AI score0.00626EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•19 views

PT-2025-1257 · Oracle · Oracle Agile Plm Framework

Name of the Vulnerable Software and Affected Versions: Oracle Agile PLM Framework version 9.3.6 Description: The issue is related to insufficient input validation in the Agile Integration Services component, allowing a low-privileged attacker with network access via HTTP to compromise the Oracle...

9.9CVSS9.4AI score0.00641EPSS
SaveExploits0References20
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•4 views

PT-2025-4248

Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools versions prior to 9.2.9.0 Description The issue is related to the lack of authentication for a critical function in the Monitoring and Diagnostics SEC component. This easily exploitable vulnerability allows an...

10CVSS0.00793EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/01/06 12:00 a.m.•15 views

PT-2025-13418 · Dell · Dell Unity

Name of the Vulnerable Software and Affected Versions: Dell Unity versions 5.4 and prior Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as an 'OS Command Injection' vulnerability. This vulnerability can be exploited by an...

9.8CVSS7AI score0.02022EPSS
SaveExploits0References26
CNVD
CNVD
•added 2024/12/13 12:00 a.m.•27 views

JetBrains YouTrack Path Traversal Vulnerability

JetBrains YouTrack is a project management tool, developed by JetBrains, supporting cloud hosting and local deployment, providing task management, team collaboration, time tracking and other features for software development, human resources and other scenarios. JetBrains YouTrack suffers from a...

9.8CVSS6.6AI score0.00742EPSS
SaveExploits0References1
Rows per page
Query Builder