Search Results (1488 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2012-1157 2 Fedoraproject, Moodle 2 Fedora, Moodle 2024-08-06 4.3 Medium
Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default
CVE-2013-4859 1 Insteon 2 Hub, Hub Firmware 2024-08-06 8.1 High
INSTEON Hub 2242-222 lacks Web and API authentication
CVE-2013-4764 1 Samsung 4 Galaxy S3, Galaxy S3 Firmware, Galaxy S4 and 1 more 2024-08-06 4.3 Medium
Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission.
CVE-2013-4763 1 Samsung 4 Galaxy S3, Galaxy S3 Firmware, Galaxy S4 and 1 more 2024-08-06 4.6 Medium
Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission.
CVE-2013-4394 2 Debian, Systemd Project 2 Debian Linux, Systemd 2024-08-06 N/A
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."
CVE-2013-4281 1 Redhat 1 Openshift 2024-08-06 5.5 Medium
In Red Hat Openshift 1, weak default permissions are applied to the /etc/openshift/server_priv.pem file on the broker server, which could allow users with local access to the broker to read this file.
CVE-2024-43114 1 Jetbrains 1 Teamcity 2024-08-06 7.5 High
In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions
CVE-2024-20005 2024-08-06 8.2 High
In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355599; Issue ID: ALPS08355599.