Search Results (1984 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2011-4181 1 Opensuse 1 Open Build Service 2024-11-21 7.5 High
A vulnerability in open build service allows remote attackers to gain access to source files even though source access is disabled. Affected releases are SUSE open build service up to and including version 2.1.15 (for 2.1) and before version 2.3.
CVE-2011-1762 1 Wordpress 1 Wordpress 2024-11-21 6.5 Medium
A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts. This may allow a user with 'Contributor-level' privileges to post as if they had 'publish_posts' permission.
CVE-2009-5151 1 Absolute 1 Computrace Agent 2024-11-21 N/A
The stub component of Absolute Computrace Agent V70.785 executes code from a disk's inter-partition space without requiring a digital signature for that code, which allows attackers to execute code on the BIOS. This allows a privileged local user to achieve persistent control of BIOS behavior, independent of later disk changes.
CVE-2009-5150 1 Absolute 1 Computrace Agent 2024-11-21 N/A
Absolute Computrace Agent V80.845 and V80.866 does not have a digital signature for the configuration block, which allows attackers to set up communication with a web site other than the intended search.namequery.com site by modifying data within a disk's inter-partition space. This allows a privileged local user to execute arbitrary code even after that user loses access and all disk partitions are reformatted.