Server Security Vulnerabilities
An attacker with access to a Management Console user account with the editor role could escalate privileges through a command injection vulnerability in the Management Console. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in versions 3.11.3, 3.10.5, 3.9.8, and....
8.8CVSS
8AI Score
0.001EPSS
An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection. This vulnerability could lead to the execution of user-controlled methods and remote code execution. To exploit this bug, an actor would need to be logged into an account on the...
9.8CVSS
8.6AI Score
0.08EPSS
OPCUAServerToolkit will write a log message once an OPC UA client has successfully connected containing the client's self-defined description...
5.3CVSS
7.2AI Score
0.0005EPSS
Missing or insecure tags in the HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower could allow an attacker to execute a malicious script on the user's...
9.8CVSS
7.5AI Score
0.001EPSS
HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker to execute a malicious script on the user's...
9.8CVSS
7.5AI Score
0.001EPSS
HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower can sometimes include sensitive information in a query string which could allow an attacker to execute a malicious...
5.3CVSS
7.2AI Score
0.0005EPSS
A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as problematic. This affects an unknown part of the component USER Command Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public.....
7.5CVSS
7.3AI Score
0.003EPSS
This High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of Confluence Data Center and Server. Remote Code Execution (RCE) vulnerability, with a CVSS Score of 8.0 and a CVSS Vector of CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H allows an authenticated...
8CVSS
7.8AI Score
0.001EPSS
This High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of Confluence Data Center and Server. Remote Code Execution (RCE) vulnerability, with a CVSS Score of 8.6 and a CVSS Vector of CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N allows an unauthenticated...
8.6CVSS
8.1AI Score
0.002EPSS
This High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of Confluence Data Center and Server. Remote Code Execution (RCE) vulnerability, with a CVSS Score of 8.3 and a CVSS Vector of CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H allows an unauthenticated...
8.3CVSS
8.1AI Score
0.002EPSS
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action. Most recent supported versions of Confluence Data Center and Server...
A vulnerability was found in FreeFloat FTP Server 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component SIZE Command Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the...
7.5CVSS
7.3AI Score
0.001EPSS
Lif Auth Server is a server for validating logins, managing information, and account recovery for Lif Accounts. The issue relates to the get_pfp and get_banner routes on Auth Server. The issue is that there is no check to ensure that the file that Auth Server is receiving through these URLs is...
7.5CVSS
7.2AI Score
0.001EPSS
A vulnerability, which was classified as problematic, was found in Acritum Femitter Server 1.04. Affected is an unknown function. The manipulation leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-250446 is the.....
7.5CVSS
7.4AI Score
0.003EPSS
NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-default command line option --model-control explicit, an attacker may use the model load API to cause a relative path traversal. A successful exploit of this vulnerability may lead....
8.8CVSS
7.6AI Score
0.001EPSS
An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic...
5.3CVSS
7.1AI Score
0.001EPSS
An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file. This allows an adversary to capture NLTMv2 hashes and potentially crack them...
4.7CVSS
7AI Score
0.001EPSS
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to...
7.8CVSS
7.2AI Score
0.0004EPSS
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and installing their...
7.3CVSS
8.1AI Score
0.0004EPSS
6.5CVSS
7.1AI Score
0.001EPSS
6.1CVSS
7AI Score
0.0004EPSS
8.8CVSS
8.6AI Score
0.002EPSS
5.3CVSS
6.2AI Score
0.001EPSS
6.5CVSS
6.9AI Score
0.001EPSS
5.5CVSS
6.4AI Score
0.0005EPSS
7.8CVSS
8AI Score
0.0005EPSS
7.8CVSS
8AI Score
0.0005EPSS
7.5CVSS
8.1AI Score
0.003EPSS
5.7CVSS
6.6AI Score
0.001EPSS
4.4CVSS
6.3AI Score
0.0005EPSS
5.5CVSS
6.6AI Score
0.0005EPSS
7.8CVSS
7.9AI Score
0.002EPSS
7.3CVSS
7.9AI Score
0.001EPSS
7.5CVSS
8.1AI Score
0.001EPSS
7.3CVSS
7.8AI Score
0.001EPSS
5.5CVSS
6.4AI Score
0.0005EPSS
4.7CVSS
5.9AI Score
0.0005EPSS
5.7CVSS
6.3AI Score
0.001EPSS
7.5CVSS
7.7AI Score
0.003EPSS
7.8CVSS
8AI Score
0.0005EPSS
7.8CVSS
7.9AI Score
0.001EPSS
7.8CVSS
8AI Score
0.001EPSS
6.5CVSS
7AI Score
0.001EPSS
7.8CVSS
8.2AI Score
0.001EPSS
9CVSS
8.4AI Score
0.0004EPSS
6.6CVSS
7.1AI Score
0.0005EPSS
6.5CVSS
6.9AI Score
0.001EPSS
4.9CVSS
6.2AI Score
0.001EPSS
6.5CVSS
6.9AI Score
0.001EPSS
6.5CVSS
7AI Score
0.001EPSS