Lucene search
+L

1149 matches found

NVD
NVD
added 2020/08/03 8:15 p.m.21 views

CVE-2020-5773

Improper Access Control in Teltonika firmware TRB2R00.02.04.01 allows a low privileged user to perform unauthorized write operations...

8.8CVSS8.5AI score0.00994EPSS
SaveExploits1References1
Prion
Prion
added 2020/08/03 8:15 p.m.21 views

Improper access control

Improper Access Control in Teltonika firmware TRB2R00.02.04.01 allows a low privileged user to perform unauthorized write operations...

6.5CVSS8.4AI score0.00994EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/08/03 7:55 p.m.29 views

CVE-2020-5773

Improper Access Control in Teltonika firmware TRB2R00.02.04.01 allows a low privileged user to perform unauthorized write operations...

8.5AI score0.00994EPSS
SaveExploits1References1
Veracode
Veracode
added 2020/07/18 3:18 a.m.42 views

Authorization Bypass

openjdk is vulnerable to authorizatino bypass. XML validation manipulation due to incomplete application of the use-grammar-pool-only feature allows an attacker to perform unauthorized update, insert and delete operations...

5.3CVSS3.9AI score0.0435EPSS
SaveExploits0References24Affected Software6
CNVD
CNVD
added 2020/06/22 12:00 a.m.8 views

Unspecified Vulnerability in Mattermost Server (CNVD-2020-41491)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.8.0. The vulnerability can be exploited by an attacker to perform unauthorized operations when Town Square is set to read-onl...

4.3CVSS6.8AI score0.00645EPSS
SaveExploits0References1
OSV
OSV
added 2020/06/15 3:15 p.m.9 views

CVE-2020-1813

HUAWEI P30 smart phone with versions earlier than 10.1.0.135C00E135R2P11 have an improper authentication vulnerability. Due to improper authentication of specific interface, in specific scenario attackers could access specific interface without authentication. Successful exploit could allow the...

6.8CVSS6.7AI score0.00236EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/15 3:15 p.m.22 views

CVE-2020-1813

HUAWEI P30 smart phone with versions earlier than 10.1.0.135C00E135R2P11 have an improper authentication vulnerability. Due to improper authentication of specific interface, in specific scenario attackers could access specific interface without authentication. Successful exploit could allow the...

6.8CVSS0.00236EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/06/15 2:22 p.m.35 views

CVE-2020-1813

HUAWEI P30 smart phone with versions earlier than 10.1.0.135C00E135R2P11 have an improper authentication vulnerability. Due to improper authentication of specific interface, in specific scenario attackers could access specific interface without authentication. Successful exploit could allow the...

6.7AI score0.00236EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/06/09 12:00 a.m.2 views

Unauthorized Access Vulnerability in Books-Management-System

Books-Management-System is a book management system. An unauthorized access vulnerability exists in Books-Management-System, which can be exploited by an attacker to perform unauthorized operations...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2020/05/27 12:00 a.m.9 views

IBM Spectrum Scale Unauthorized Operation Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

6.5CVSS6.7AI score0.00759EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/05/27 12:00 a.m.8 views

IBM Spectrum Scale Unauthorized Operation Vulnerability (CNVD-2020-34638)

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

4.9CVSS6.7AI score0.00852EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/05/19 12:00 a.m.8 views

IBM InfoSphere Information Server Cross-Site Request Forgery Vulnerability (CNVD-2020-31093)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A cross-site request forgery vulnerability exists in IBM InfoSphere Information Server. An attacker could...

6.5CVSS6.5AI score0.00482EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/17 12:00 a.m.8 views

Unspecified Vulnerability in IBM Maximo Asset Management

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A security...

5.5CVSS6.7AI score0.00781EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/17 12:00 a.m.6 views

MayiCMS has a flawed logic vulnerability

MayiCMS is a php mysql based website builder. MayiCMS suffers from a logic flaw vulnerability that can be exploited by attackers to perform unauthorized operations...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2020/04/16 12:00 a.m.8 views

IBM QRadar SIEM Access Control Error Vulnerability

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An access control...

5.5CVSS6.5AI score0.00893EPSS
SaveExploits3References1
CNVD
CNVD
added 2020/04/15 12:00 a.m.8 views

IBM QRadar SIEM Input Validation Error Vulnerability

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An input validatio...

6.5CVSS6.5AI score0.01085EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/08 12:00 a.m.11 views

IBM Security Information Queue Unauthorized Operation Vulnerability

IBM Security Information Queue is a data integration product from IBM USA. The product utilizes Kafka technology and a publish-subscribe model to integrate data between IBM security products. A security vulnerability exists in IBM Security Information Queue ISIQ that stems from a program's failur...

4.3CVSS6.9AI score0.00796EPSS
SaveExploits0References1
NVD
NVD
added 2020/03/26 3:15 p.m.23 views

CVE-2020-9066

Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169C00E166R4P1 have an improper authentication vulnerability. The Application doesn't perform proper authentication when user performs certain operations. An attacker can trick user into installing a malicious plug-in to exploit...

7.8CVSS7.7AI score0.00566EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/26 3:15 p.m.8 views

CVE-2020-9066

Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169C00E166R4P1 have an improper authentication vulnerability. The Application doesn't perform proper authentication when user performs certain operations. An attacker can trick user into installing a malicious plug-in to exploit...

7.8CVSS7.1AI score0.00566EPSS
SaveExploits0References1
Prion
Prion
added 2020/03/26 3:15 p.m.17 views

Authentication flaw

Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169C00E166R4P1 have an improper authentication vulnerability. The Application doesn't perform proper authentication when user performs certain operations. An attacker can trick user into installing a malicious plug-in to exploit...

6.8CVSS7.6AI score0.00566EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder