Lucene search
+L

5977 matches found

Tenable Nessus
Tenable Nessus
•added 2025/08/19 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2024-4227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Genivia gSOAP with a specific configuration an unauthenticated remote attacker can generate a high CPU load when forcing to parse an XML having duplicate ID...

7.5CVSS7.2AI score0.00719EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/19 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2016-8858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The kexinputkexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service memory consumption by sending many...

7.8CVSS7.3AI score0.29462EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2025/08/18 1:48 a.m.•40 views

kernel: USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor

A vulnerability was found in the usbparseendpoint function in the Linux kernel's usb drivers, where improper handling of the reserved bits in an endpoint descriptor's bEndpointAddress field can lead to confusion in the endpointisduplicate routine in config.c. This will erroneously treat the same...

5.5CVSS7.1AI score0.00299EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/08/18 12:00 a.m.•2 views

Linux Distros Unpatched Vulnerability : CVE-2025-38490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: libwx: remove duplicate pagepoolputfullpage pagepoolputfullpage should only be invoked...

9.8CVSS5.9AI score0.00317EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/16 12:00 a.m.•17 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unrestricted number of duplicate connections from the same IP, which could result in exhausting the maxim...

7.5CVSS8AI score0.02103EPSS
SaveExploits1References7
NVD
NVD
•added 2025/08/15 6:15 p.m.•90 views

CVE-2025-55285

@backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. Prior to version 2.1.1, duplicate logging of the input values in the fetch:template action in the Scaffolder meant that some of the secrets were not properly redacted. If $ secrets.x is not passed...

2.6CVSS0.00243EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/08/15 5:10 p.m.•5 views

CVE-2025-55285 @backstage/plugin-scaffolder-backend Template Secret Leakage in Logs in Scaffolder When Using `fetch:template`

@backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. Prior to version 2.1.1, duplicate logging of the input values in the fetch:template action in the Scaffolder meant that some of the secrets were not properly redacted. If $ secrets.x is not passed...

2.6CVSS7.1AI score0.00243EPSS
SaveExploits0References2
OSV
OSV
•added 2025/08/15 5:10 p.m.•27 views

CVE-2025-55285 @backstage/plugin-scaffolder-backend Template Secret Leakage in Logs in Scaffolder When Using `fetch:template`

@backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. Prior to version 2.1.1, duplicate logging of the input values in the fetch:template action in the Scaffolder meant that some of the secrets were not properly redacted. If $ secrets.x is not passed...

2.6CVSS6.5AI score
SaveExploits0References4
CVE
CVE
•added 2025/08/15 5:10 p.m.•54 views

CVE-2025-55285

The CVE-2025-55285 issue affects the Backstage scaffolder-backend plugin. Before version 2.1.1, the fetch:template action could duplicate the input log path, causing some secrets passed via the {{ secrets }} bag to be written to logs instead of being redacted. Affected product: @backstage/plugin-...

2.6CVSS6.5AI score0.00243EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2025/08/15 7:02 a.m.•27 views

CVE-2025-9019

A vulnerability has been found in tcpreplay 4.5.1. This vulnerability affects the function maskcidr6 of the file cidr.c of the component tcpprep. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitatio...

5.9CVSS7.4AI score0.00997EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/08/15 12:00 a.m.•21 views

PT-2025-33617 · Undefined · Undefined

CVE-2024-12573 - Apache Web Server Authentication Bypass CVE ID : CVE-2024-12573 Published : Aug. 15, 2025, 3:15 p.m. | 2 hours, 49 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-24752 Reason: This candidate is a reservation duplicate of...

7.1CVSS7.3AI score0.01212EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2025/08/15 12:00 a.m.•17 views

Backstage 日志信息泄露漏洞

Backstage is a Backstage open source application. Backstage is an open platform for building developer portals. A log information disclosure vulnerability exists in versions prior to Backstage 2.1.1, which stems from duplicate logging of input values resulting in some secrets not being edited...

2.6CVSS6.2AI score0.00243EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/15 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2025-37946

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix duplicate pcidevput in disableslot when PF has child VFs With commit...

7.8CVSS6AI score0.00186EPSS
SaveExploits0References3
OSV
OSV
•added 2025/08/14 6:52 p.m.•9 views

MAL-2025-14053 Malicious code in activerecord-rescue_from_duplicate (npm)

The package activerecord-rescuefromduplicate was found to contain malicious code...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/08/14 12:00 a.m.•18 views

The vulnerability of the duplicate-data-source command in the Tableau Server analytical platform allows a hacker to gain unauthorized access to protected information.

The vulnerability of the “duplicate-data-source” command in the Tableau Server analytical platform is related to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...

8.5CVSS6.1AI score0.00441EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/11 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2023-23604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A duplicate SystemPrincipal object could be created when parsing a non-system html document via DOMParser::ParseFromSafeString. This could have lead to bypassin...

6.5CVSS6.4AI score0.00463EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/08 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2022-50136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix duplicated reported IWCMEVENTCONNECTREPLY event If siwrecvmparr returns -EAGAI...

7.5CVSS5.3AI score0.00608EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/08 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2021-47190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: perf bpf: Avoid memory leak from perfenvinsertbtf perfenvinsertbtf doesn't insert if a...

5.5CVSS5.2AI score0.00232EPSS
SaveExploits0References3
OSV
OSV
•added 2025/08/06 9:30 a.m.•14 views

GHSA-522R-9946-FW43 Duplicate Advisory: CIRCL-Fourq: Missing and wrong validation can lead to incorrect results

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2x5j-vhc8-9cwm. This link is maintained to preserve external references. Original Description A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to...

3.7CVSS6.2AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/08/05 12:00 a.m.•38 views

PT-2025-32116 · Undefined · Undefined

CVE-2025-54797 - Apache Struts Remote Code Execution CVE ID : CVE-2025-54797 Published : Aug. 5, 2025, 12:15 a.m. | 2 hours, 19 minutes ago Description : Rejected reason: This CVE is a duplicate of CVE-2025-52464. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected...

9.5CVSS6.8AI score0.00581EPSS
SaveExploits0References1
Rows per page
Query Builder