Lucene search
+L

1445 matches found

BDU FSTEC
BDU FSTEC
added 2024/11/08 12:0 a.m.10 views

The vulnerability of the Intel Raid Web Console web console, related to deficiencies in access control, allows attackers to disclose protected information.

The vulnerability of the Intel Raid Web Console web console relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to disclose protected information...

3.3CVSS5.4AI score0.00153EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/08 12:0 a.m.11 views

The vulnerability of the Intel Raid Web Console web console, related to pointer swapping errors, allows a hacker to trigger a service failure.

The vulnerability of the Intel Raid Web Console web console is related to pointer aliasing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.7CVSS5.5AI score0.00132EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2024/11/06 2:57 p.m.46 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.53 packages and security update

Red Hat OpenShift Container Platform release 4.13.53 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

8.2CVSS6.9AI score0.01336EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2024/10/31 4:1 a.m.32 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.37 packages and security update

Red Hat OpenShift Container Platform release 4.15.37 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

8.2CVSS6.9AI score0.01336EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:0 a.m.10 views

The vulnerability of the web-based console of the network device Ivanti Cloud Services Appliance allows a hacker to execute arbitrary code.

The vulnerability of the network device administrator web console of Ivanti Cloud Services Appliance is related to the lack of data cleansing measures at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8AI score0.62785EPSS
SaveExploits0References6Affected Software1
CISA KEV Catalog
CISA KEV Catalog
added 2024/10/09 12:0 a.m.72 views

Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

Ivanti Cloud Services Appliance CSA contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements...

7.2CVSS7.7AI score0.43364EPSS
SaveIn wildExploits0
CVE
CVE
added 2024/10/08 4:23 p.m.281 views

CVE-2024-9380

CVE-2024-9380 affects Ivanti Cloud Services Appliance (CSA) admin web console prior to 5.0.2. It is an OS command injection vulnerability that, when exploited by an authenticated admin, can lead to remote code execution. Related advisories document CVE-2024-9379 (SQL injection) and CVE-2024-9381 ...

7.2CVSS7.2AI score0.62785EPSS
SaveIn wildExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/08 4:23 p.m.29 views

CVE-2024-9379

SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements...

6.5CVSS7.9AI score0.43364EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/08 4:23 p.m.30 views

CVE-2024-9379

SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements...

6.5CVSS0.62785EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/08 12:0 a.m.5 views

PT-2024-7353 · Ivanti · Ivanti Cloud Services Appliance

Name of the Vulnerable Software and Affected Versions: Ivanti Cloud Services Appliance versions prior to 5.0.2 Description: The issue is related to a SQL injection vulnerability in the admin web console of Ivanti Cloud Services Appliance. This vulnerability allows a remote authenticated attacker...

8.5CVSS9.3AI score0.62785EPSS
SaveExploits0References69
ATTACKERKB
ATTACKERKB
added 2024/10/08 12:0 a.m.32 views

CVE-2024-9380

An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

7.2CVSS7AI score0.62785EPSS
SaveIn wildExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/02 12:0 a.m.21 views

RHEL 8 / 9 : OpenShift Container Platform 4.15.35 (RHSA-2024:7182)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7182 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

8.3CVSS7.1AI score0.01279EPSS
SaveExploits1References6
NVD
NVD
added 2024/09/16 5:16 p.m.29 views

CVE-2024-34545

Improper input validation in some IntelR RAID Web Console software all versions may allow an authenticated user to potentially enable information disclosure via adjacent access...

5.7CVSS0.00224EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/16 5:16 p.m.31 views

CVE-2024-36261

Improper access control in IntelR RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via adjacent access...

5.7CVSS0.00224EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/16 5:16 p.m.23 views

CVE-2024-34153

Uncontrolled search path element in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS0.00139EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/16 5:16 p.m.24 views

CVE-2024-36247

Improper access control in IntelR RAID Web Console all versions may allow an authenticated user to potentially enable denial of service via adjacent access...

5.7CVSS0.00224EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/16 5:16 p.m.23 views

CVE-2024-34543

Improper access control in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS0.00132EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/16 5:16 p.m.25 views

CVE-2024-32666

NULL pointer dereference in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via local access...

5.5CVSS0.00132EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/16 5:16 p.m.28 views

CVE-2024-28170

Improper access control in IntelR RAID Web Console all versions may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS0.00153EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/16 5:16 p.m.26 views

CVE-2024-32940

Improper access control in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via adjacent access...

6.5CVSS0.00226EPSS
SaveExploits0References1
Rows per page
Query Builder