Lucene search
K

9 matches found

OSV
OSV
added 2025/12/09 6:16 p.m.2 views

CVE-2025-65594

OpenSIS 9.2 and below is vulnerable to Incorrect Access Control in Student.php, which allows an authenticated low-privilege user to perform unauthorized database write operations relating to the data of other users...

8.1CVSS6.8AI score0.00041EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/02/05 5:17 a.m.7 views

CVE-2024-1654

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authenticated admin access and knowledge of both an internal system identifier and details of another valid user to exploit this...

7.2CVSS7.5AI score0.04152EPSS
Exploits0References1
CVE
CVE
added 2024/07/16 9:26 p.m.59 views

CVE-2024-5815

CVE-2024-5815 is a Cross-Site Request Forgery in GitHub Enterprise Server that permits write operations on a victim-owned repository when an attacker who is a trusted GHE user induces the victim to visit a tag in the attacker’s fork. The issue affects all GitHub Enterprise Server versions prior t...

6.8CVSS6.5AI score0.00164EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2024/03/14 3:15 a.m.12 views

CVE-2024-1654

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authenticated admin access and knowledge of both an internal system identifier and details of another valid user to exploit this...

7.2CVSS7.8AI score0.04152EPSS
Exploits0References1
CVE
CVE
added 2024/03/14 3:6 a.m.58 views

CVE-2024-1654

PaperCut NG/MF (CVE-2024-1654) enables potential unauthorized write operations that may lead to remote code execution. Exploitation requires authenticated admin access and knowledge of both an internal system identifier and another valid user. CVSS v3.1 base score is 7.2 (HIGH) with NETWORK attac...

7.2CVSS7.5AI score0.04152EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2024/03/14 3:6 a.m.12 views

CVE-2024-1654 Unauthorized write operations in PaperCut NG/MF

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authenticated admin access and knowledge of both an internal system identifier and details of another valid user to exploit this...

7.2CVSS7.5AI score0.04152EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/14 3:6 a.m.14 views

CVE-2024-1654 Unauthorized write operations in PaperCut NG/MF

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authenticated admin access and knowledge of both an internal system identifier and details of another valid user to exploit this...

7.2CVSS7.5AI score0.04152EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/03/14 12:0 a.m.1 views

PaperCut NG/MF Security Vulnerabilities

PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. A security vulnerability exists in PaperCut NG/MF that originates from allowing unauthorized write operations that could result in remote code execution...

7.2CVSS8AI score0.04152EPSS
Exploits0References2
CNVD
CNVD
added 2020/08/04 12:0 a.m.2 views

Teltonika TRB245 Improper Access Control Vulnerability

Teltonika TRB245 is a cellular network gateway product from Teltonika Lithuania. An improper access control vulnerability exists in firmware TRB2R00.02.04.01 of the Teltonika TRB245. The vulnerability stems from improper access control. An attacker could exploit the vulnerability to perform...

8.8CVSS6.9AI score0.0031EPSS
Exploits1References1
Rows per page
Query Builder