mediumPriorität · verfolgen · 20OT-Risiko · erhöhtEPSS 0.005 · 45. PerzentilEPSS0.5%Wahrscheinlichkeit0.005Perzentil45. PerzentilEPSS · Exploit-Vorhersage — Wahrscheinlichkeit, dass diese CVE in den nächsten 30 Tagen ausgenutzt wird (0–1), sowie ihr Perzentilrang unter allen CVEsEUUS
An internal product security audit of Lenovo XClarity Administrator (LXCA) prior to version 3.1.0 discovered the Windows OS credentials provided by the LXCA user to perform driver updates of managed systems may be captured in the First Failure Data Capture (FFDC) service log if the service log is generated while managed endpoints are updating. The service log is only generated when requested by a privileged LXCA user and it is only accessible to the privileged LXCA user that requested the file and is then deleted.
01
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may…
An issue was discovered on D-Link DIR-601 2.02NA devices. Being local to the network and having only "User" account (which is a low privilege account) access, an attacker can inter…
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available using the HTTP path https://<device-ip-or…
When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauth…
OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into th…