Lucene search
+L

99 matches found

OSV
OSV
added 2024/11/13 11:15 p.m.18 views

CVE-2024-40404

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established...

9.8CVSS5.8AI score0.00445EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/13 11:15 p.m.31 views

CVE-2024-40404

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established...

9.8CVSS0.00445EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/13 11:15 p.m.7 views

CVE-2024-40407

A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors...

7.5CVSS5.8AI score0.0038EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/13 12:0 a.m.25 views

CVE-2024-40407

A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors...

7AI score0.0038EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/13 12:0 a.m.7 views

PT-2024-28830 · Cybele · Thinfinity Workspace

Name of the Vulnerable Software and Affected Versions: Cybele Software Thinfinity Workspace versions prior to 7.0.2.113 Description: The issue is related to an access control problem in the API endpoint where Web Sockets connections are established. Recommendations: For versions prior to 7.0.2.11...

9.8CVSS7.1AI score0.00445EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.7 views

Cybele Software Thinfinity Workspace 安全漏洞

Cybele Software Thinfinity Workspace is an integrated solution for virtualizing applications, desktops, data and accessing any host from a unified portal from Cybele Software, USA. A security vulnerability exists in Cybele Software Thinfinity Workspace prior to v7.0.2.113 that stems from improper...

7.3CVSS6.8AI score0.00271EPSS
SaveExploits0References2
CVE
CVE
added 2024/11/13 12:0 a.m.73 views

CVE-2024-40407

CVE-2024-40407 affects Cybele Software Thinfinity Workspace prior to v7.0.2.113. The issue is a full path disclosure that allows an attacker to obtain the root path of the application via unspecified vectors. Affected product: Thinfinity Workspace. Root cause: disclosure of sensitive filesystem p...

7.5CVSS6.8AI score0.0038EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.9 views

Cybele Software Thinfinity Workspace 安全漏洞

Cybele Software Thinfinity Workspace is an integrated solution for virtualizing applications, desktops, data and accessing any host from a unified portal from Cybele Software, USA. A security vulnerability exists in Cybele Software Thinfinity Workspace versions prior to v7.0.3.109 that stems from...

8.1CVSS6.6AI score0.00441EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.8 views

Cybele Software Thinfinity Workspace 安全漏洞

Cybele Software Thinfinity Workspace is an integrated solution for virtualizing applications, desktops, data and accessing any host from a unified portal from Cybele Software, USA. A security vulnerability exists in Cybele Software Thinfinity Workspace prior to v7.0.2.113, which stems from a full...

7.5CVSS6.5AI score0.0038EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/11/13 12:0 a.m.8 views

PT-2024-28832 · Cybele · Thinfinity Workspace

Name of the Vulnerable Software and Affected Versions: Cybele Software Thinfinity Workspace versions prior to 7.0.2.113 Description: A full path disclosure issue allows attackers to obtain the root path of the application via unspecified vectors. This could potentially be exploited to gain...

7.5CVSS6.9AI score0.0038EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/11/13 12:0 a.m.12 views

CVE-2024-40410

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key used for encryption...

7.6AI score0.00135EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.9 views

Cybele Software Thinfinity Workspace 安全漏洞

Cybele Software Thinfinity Workspace is an integrated solution for virtualizing applications, desktops, data and accessing any host from a unified portal from Cybele Software, USA. A security vulnerability exists in Cybele Software Thinfinity Workspace prior to v7.0.2.113 that stems from an acces...

9.8CVSS6.7AI score0.00445EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/11/13 12:0 a.m.22 views

CVE-2024-40404

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established...

7.5AI score0.00445EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/13 12:0 a.m.96 views

CVE-2024-40404

CVE-2024-40404 affects Cybele Software Thinfinity Workspace prior to version 7.0.2.113. The issue is an access control flaw in the API endpoint used to establish WebSocket connections. The Red Hat, NVD, CNNVD, CVE.org and PTSecurity entries corroborate that versions before 7.0.2.113 are vulnerabl...

9.8CVSS7.4AI score0.00445EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/13 12:0 a.m.19 views

CVE-2024-40405

Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request...

0.00441EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/13 12:0 a.m.14 views

CVE-2024-40408

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...

7.6AI score0.00271EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.6 views

Cybele Software Thinfinity Workspace 安全漏洞

Cybele Software Thinfinity Workspace is an integrated solution for virtualizing applications, desktops, data and accessing any host from a unified portal from Cybele Software, USA. A security vulnerability exists in Cybele Software Thinfinity Workspace versions prior to v7.0.2.113 that stems from...

4.8CVSS6.7AI score0.00135EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/13 12:0 a.m.36 views

CVE-2024-40404

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established...

0.00445EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/13 12:0 a.m.60 views

CVE-2024-40405

CVE-2024-40405 affects Cybele Software Thinfinity Workspace (before v7.0.3.109). The issue is described as incorrect access control that lets an attacker access a secondary broker via a crafted request. The vulnerability is documented with CVSS v3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (base scor...

8.1CVSS7.1AI score0.00441EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/13 12:0 a.m.16 views

CVE-2024-40405

Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request...

7.3AI score0.00441EPSS
SaveExploits0References1
Rows per page
Query Builder