Lucene search
K

129 matches found

ATTACKERKB
ATTACKERKB
added 2026/02/26 11:27 a.m.4 views

CVE-2026-1198

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in [email protected]...

8.6CVSS5.8AI score0.00015EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2026/02/02 12:0 a.m.2 views

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2026-1198)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.4AI score0.30014EPSS
Exploits12References2
RedhatCVE
RedhatCVE
added 2026/01/07 9:16 a.m.4 views

CVE-2025-1198

An issue discovered in GitLab CE/EE affecting all versions from 16.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 meant that long-lived connections in ActionCable potentially allowed revoked Personal Access Tokens access to streaming results...

5.3CVSS4AI score0.00024EPSS
Exploits0References1
Circl
Circl
added 2025/12/29 5:0 a.m.1 views

CVE-2025-15062

creationtimestamp| type| source ---|---|--- 2025-12-29 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1198/ 2026-01-23 11:03:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3kij74q72h...

7.8CVSS7.3AI score0.00053EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-1198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by simulating ax25 device...

5.5CVSS6.8AI score0.00134EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/03 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2008-1198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easi...

7.1CVSS5.9AI score0.00458EPSS
Exploits1References2
Wolfi
Wolfi
added 2025/02/13 2:15 a.m.37 views

CVE-2025-1198 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-cng...

5.3CVSS5.8AI score0.00024EPSS
Exploits0
Chainguard
Chainguard
added 2025/02/13 2:15 a.m.6 views

CVE-2025-1198 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ee-fips, gitlab-pages, gitlab-ee-fips, gitlab-pages-fips, gitlab-runner-fips, gitlab-cng, gitlab-rails-ee, gitlab-cng-fips, gitlab-ee...

5.3CVSS5.8AI score0.00024EPSS
Exploits0
Circl
Circl
added 2025/02/13 1:28 a.m.2 views

CVE-2025-1198

creationtimestamp| type| source ---|---|--- 2025-02-13 01:28:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113993982140981348 2025-02-13 02:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzmlxhx2v2x 2025-02-13 04:36:57+00:00| seen|...

5.3CVSS4.7AI score0.00024EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/02/13 12:55 a.m.5 views

CVE-2025-1198 Insufficient Session Expiration in GitLab

An issue discovered in GitLab CE/EE affecting all versions from 16.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 meant that long-lived connections in ActionCable potentially allowed revoked Personal Access Tokens access to streaming results...

4.2CVSS6.5AI score0.00024EPSS
Exploits0References1
CVE
CVE
added 2025/02/13 12:55 a.m.287 views

CVE-2025-1198

The CVE-2025-1198 entry covers a GitLab CE/EE issue where long‑lived ActionCable connections could allow revoked Personal Access Tokens to access streaming results. Affected versions are GitLab 16.11 up to 17.6.5 (inclusive fixes), 17.7 up to 17.7.4, and 17.8 up to 17.8.2. The underlying root cau...

5.3CVSS6.6AI score0.00024EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/02/13 12:0 a.m.12 views

GitLab 16.11 < 17.6.5 / 17.7 < 17.7.4 / 17.8 < 17.8.2 (CVE-2025-1198)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue discovered in GitLab CE/EE affecting all versions from 16.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 meant that long-lived connections in ActionCable potentially allow...

5.3CVSS5.5AI score0.00024EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:0 a.m.23 views

CentOS 7 : kernel (RHSA-2022:1198)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1198 advisory. - A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to...

7.8CVSS6.9AI score0.00033EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.12 views

RHEL 4 : initscripts (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - initscripts: IPSec ifup script allows for aggressive IKE mode CVE-2008-1198 Note that Nessus has not tested for thi...

7.1CVSS6.9AI score0.00458EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2024/04/21 12:0 a.m.25 views

RHEL 6 : openstack-cinder (RHSA-2013:1198)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:1198 advisory. The openstack-cinder packages provide OpenStack Volume Cinder, which provides services to manage and access block storage volumes for use by...

5CVSS8.3AI score0.03938EPSS
Exploits2References9
CVE
CVE
added 2024/02/02 11:31 p.m.54 views

CVE-2024-1198

The CVE-2024-1198 entry concerns openBI up to 6.0.3. Affected is the function addxinzhi in application/controllers/User.php of the Phar Handler. Manipulation of the outimgurl argument leads to deserialization, enabling a remote attack. The vulnerability is actively discussed across multiple sourc...

9.8CVSS9.5AI score0.00069EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/03/28 12:0 a.m.30 views

CBL Mariner 2.0 Security Update: kernel (CVE-2022-1198)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1198 advisory. - A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an...

5.5CVSS6.9AI score0.00134EPSS
Exploits1References2
OSV
OSV
added 2023/03/10 9:15 p.m.0 views

CVE-2023-1198

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saysis Starcities allows SQL Injection.This issue affects Starcities: through 1.3...

9.8CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2023/03/10 9:15 p.m.9 views

CVE-2023-1198

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saysis Starcities allows SQL Injection. This issue affects Starcities: through 1.3...

9.8CVSS9.9AI score0.0025EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/03/10 10:54 a.m.10 views

CVE-2023-1198 SQLi in Saysis Starcities

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saysis Starcities allows SQL Injection. This issue affects Starcities: through 1.3...

9.8CVSS10AI score0.0025EPSS
Exploits0References2
Rows per page
Query Builder