Lucene search
+L

7017 matches found

Vulnrichment
Vulnrichment
added 2024/11/28 10:16 p.m.6 views

CVE-2024-8299 Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESIS32 all versions, Mitsubishi Electric...

7.8CVSS7.5AI score0.00242EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/11/28 10:16 p.m.34 views

CVE-2024-8299 Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESIS32 all versions, Mitsubishi Electric...

7.8CVSS0.00242EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/11/28 12:00 a.m.17 views

PT-2024-9087

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 all versions Mitsubishi Electric GENESIS64 all versions Mitsubishi Electric MC Works64 all versions Description The issue is related to an uncontrolled search path element, which can be exploited by a local authenticated...

7.8CVSS9.2AI score0.00242EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
added 2024/11/28 12:00 a.m.13 views

PT-2024-8832

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 all versions Mitsubishi Electric GENESIS64 all versions Mitsubishi Electric MC Works64 all versions Description The issue is related to an uncontrolled search path element, which can be exploited by a local authenticated...

7.8CVSS9AI score0.00242EPSS
SaveExploits0References14
CNNVD
CNNVD
added 2024/11/28 12:00 a.m.12 views

Mitsubishi Electric MC Works64和Mitsubishi Electric GENESIS64 代码问题漏洞

Mitsubishi Electric MC Works64 and Mitsubishi Electric GENESIS64 are both products of Mitsubishi Electric Corporation Mitsubishi Electric, Japan.The Mitsubishi Electric MC Works64 is a data acquisition and monitoring system SCADA. Mitsubishi Electric GENESIS64 is a SCADA kit. Mitsubishi Electric ...

7.8CVSS9.2AI score0.00242EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/27 12:00 a.m.14 views

The vulnerability of the Intel Rendering Toolkit’s software development tools is related to an uncontrolled search path element, which allows a hacker to enhance their privileges.

The vulnerability of the Intel Rendering Toolkit software development tools is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.00165EPSS
SaveExploits0References3Affected Software7
Cvelist
Cvelist
added 2024/11/26 11:36 a.m.44 views

CVE-2023-0163 Prototype Pollution in convict

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a...

0.00274EPSS
SaveExploits1References2
Rosalinux
Rosalinux
added 2024/11/26 9:44 a.m.27 views

Advisory ROSA-SA-2024-2531

Software: python-idna 2.4 OS: rosa-server79 packageevrstring: python-idna-2.4-1.0.1.res7 CVE-ID: CVE-2024-3651 BDU-ID: 2024-04211 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the idna.encode function of the Internationalized Domain of Names in Applications IDNA is associated with uncontrolled...

7.5CVSS7AI score0.01386EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:00 a.m.19 views

The vulnerability of Siemens Solid Edge’s design and simulation tools lies in its uncontrolled search path, which allows a hacker to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a attacker to execute arbitrary code by placing the created DLL file within the system...

7.3CVSS7.9AI score0.00189EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:00 a.m.12 views

The vulnerability of the Intel Binary Configuration Tool’s configuration modification utility lies in its uncontrolled search path, which allows a malicious actor to exploit their privileges.

The vulnerability of the Intel Binary Configuration Tool’s configuration modification utility is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.00175EPSS
SaveExploits0References5Affected Software1
SUSE CVE
SUSE CVE
added 2024/11/25 3:48 a.m.3 views

SUSE CVE-2024-52949

iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is consequently possible to overflow memory on the stack...

7.5CVSS7.6AI score0.00748EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/11/22 9:30 p.m.40 views

CVE-2024-7253 NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

7.8CVSS0.00349EPSS
SaveExploits0References2
CVE
CVE
added 2024/11/22 9:30 p.m.110 views

CVE-2024-7253

NoMachine CVE-2024-7253 affects NoMachine installations with a flaw in nxnode.exe that loads a library from an unsecured location. This enables local privilege escalation to SYSTEM when an attacker can execute low-privileged code. Exploitation is LOCAL with HIGH impact to confidentiality/integrit...

7.8CVSS7.8AI score0.00349EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2024/11/22 8:05 p.m.104 views

CVE-2024-30376

The CVE-2024-30376 entry concerns Famatech Advanced IP Scanner. The vulnerability arises from the application's use of Qt, where Qt plugins are loaded from an unsecured location, enabling a local attacker who can run low-privileged code to escalate privileges and execute arbitrary code with admin...

7.3CVSS7.4AI score0.00412EPSS
SaveExploits0References1Affected Software1
F5 Networks
F5 Networks
added 2024/11/22 7:58 p.m.47 views

K000148691: qt vulnerabilities CVE-2022-25634 and CVE-2020-0570

Security Advisory Description CVE-2022-25634 Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory. CVE-2020-0570 Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable...

7.5CVSS6.9AI score0.0196EPSS
SaveExploits1
OSV
OSV
added 2024/11/22 6:15 a.m.13 views

UBUNTU-CVE-2024-8932

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...

9.8CVSS6.2AI score0.01275EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:00 a.m.21 views

The vulnerability of the needrestart utility, related to the uncontrolled element in the search process, allows a hacker to execute arbitrary code in the context of the root user.

The vulnerability of the needrestart utility is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the root user, when processing the RUBYLIB variable...

7.8CVSS8AI score0.0757EPSS
SaveExploits2References6Affected Software4
CNNVD
CNNVD
added 2024/11/22 12:00 a.m.12 views

NoMachine 代码问题漏洞

NoMachine is a remote desktop access tool from NoMachine, Luxembourg. A code issue vulnerability exists in NoMachine that stems from the presence of an uncontrolled search path element local privilege escalation vulnerability that allows a local attacker to escalate privileges on an affected...

7.8CVSS7.9AI score0.00349EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/19 8:15 p.m.26 views

CVE-2024-45420

Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a denial of service via network access...

6.5CVSS0.00467EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/19 8:15 p.m.12 views

CVE-2024-45420

Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a denial of service via network access...

6.5CVSS5.8AI score0.00467EPSS
SaveExploits0References1
Rows per page
Query Builder