Lucene search
K

18 matches found

CVE
CVE
added 2026/03/12 1:0 p.m.5 views

CVE-2026-2514

Flowmon ADS versions prior to 12.5.5 and 13.0.3 are affected. An adversary with access to Flowmon monitoring ports can craft malicious network data that, when processed by Flowmon ADS and viewed by an authenticated user, could cause unintended actions in the user's browser context. Reported CVSS ...

8.6CVSS5.8AI score0.00035EPSS
Exploits0References1
CVE
CVE
added 2026/03/12 12:58 p.m.6 views

CVE-2026-2513

Progress Flowmon ADS vulnerable in versions prior to 12.5.5 and 13.0.3. An administrator who clicks a malicious link within an authenticated web session may trigger unintended actions, exposing high-severity risk (CVSS 8.6; Network vector, user interaction required). The advisory does not include...

8.6CVSS5.8AI score0.0007EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/12 12:0 a.m.3 views

PT-2026-24948

A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session...

8.6CVSS5.8AI score0.0007EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/09 12:43 p.m.2 views

EUVD-2025-33341

A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated session...

8.8CVSS6.2AI score0.00039EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/09 12:43 p.m.5 views

CVE-2025-10240 Possibility of unintended actions when a user clicks a malicious link in the Progress Flowmon web application

A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated session...

8.8CVSS0.00039EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/09 12:42 p.m.3 views

CVE-2025-10239 Unintended command execution via troubleshooting scripts in Progress Flowmon

In Flowmon versions prior to 12.5.5, a vulnerability has been identified that allows a user with administrator privileges and access to the management interface to execute additional unintended commands within scripts intended for troubleshooting purposes...

7.2CVSS6.8AI score0.00055EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/09 12:42 p.m.3 views

EUVD-2025-33340

In Flowmon versions prior to 12.5.5, a vulnerability has been identified that allows a user with administrator privileges and access to the management interface to execute additional unintended commands within scripts intended for troubleshooting purposes...

7.2CVSS6.7AI score0.00055EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/09/24 12:0 a.m.137 views

Apple iOS < 12.5.5 Multiple Vulnerabilities (HT212824)

Binary data appleios1255check.nbin...

9.3CVSS6.8AI score0.71973EPSS
Exploits2References5
CISA
CISA
added 2021/09/23 12:0 a.m.10 views

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit these vulnerabilities to take control of an affected system. These vulnerabilities have been detected in exploits in the wild. CISA encourages users and administrators to review the Appl...

7.2AI score
Exploits0References2
Apple
Apple
added 2021/09/23 12:0 a.m.57 views

About the security content of iOS 12.5.5

About the security content of iOS 12.5.5 This document describes the security content of iOS 12.5.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS9AI score0.71973EPSS
Exploits2References1Affected Software1
NVD
NVD
added 2021/08/24 7:15 p.m.20 views

CVE-2021-30869

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malicious application may be able to execute...

9.3CVSS0.0172EPSS
Exploits0References5
Prion
Prion
added 2021/08/24 7:15 p.m.24 views

Deserialization of untrusted data

A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report tha...

5CVSS6.6AI score0.00722EPSS
Exploits0References5Affected Software5
ATTACKERKB
ATTACKERKB
added 2021/08/24 12:0 a.m.40 views

CVE-2021-30869

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malicious application may be able to execute...

9.3CVSS2.3AI score0.0172EPSS
In wildExploits0References5
CNVD
CNVD
added 2017/10/18 12:0 a.m.2 views

Ipswitch IMail Server Buffer Overflow Vulnerability

Ipswitch IMail Server is a mail server from Ipswitch, Inc. that runs on the Microsoft Windows operating system. A stack buffer overflow vulnerability exists in Ipswitch IMail server version 12.5.5 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary code...

9.8CVSS9.7AI score0.00242EPSS
Exploits3References1
CNVD
CNVD
added 2017/10/18 12:0 a.m.1 views

Ipswitch IMail Server Buffer Overflow Vulnerability (CNVD-2017-32277)

Ipswitch IMail Server is a mail server from Ipswitch, Inc. that runs on the Microsoft Windows operating system. A stack buffer overflow vulnerability exists in Ipswitch IMail server version 12.5.5 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary code...

9.8CVSS9.7AI score0.00242EPSS
Exploits3References1
NVD
NVD
added 2017/10/03 1:29 a.m.10 views

CVE-2017-12639

Stack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vectors in IMmailSrv, aka ETRE or ETCTERARED...

9.8CVSS9.8AI score0.00242EPSS
Exploits3References1
OSV
OSV
added 2017/02/20 8:59 a.m.1 views

DEBIAN-CVE-2017-2355

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute...

8.8CVSS8.5AI score0.00235EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2017/01/27 12:0 a.m.29 views

Apple iTunes < 12.5.5 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.5.5. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist in WebKit due to improper validation of certain unspecified input. An unauthenticated, remote attacker can exploi...

8.8CVSS8.7AI score0.00382EPSS
Exploits0References6
Rows per page
Query Builder