Lucene search
K

131 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2007-3394

Malware in sbrugna...

7.5CVSS6.4AI score0.00527EPSS
Exploits0References4
Circl
Circl
added 2025/08/06 1:4 a.m.5 views

CVE-2025-1351

creationtimestamp| type| source ---|---|--- 2025-08-06 01:04:20+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81 2025-08-21 10:03:54+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81...

7CVSS4.8AI score0.0003EPSS
Exploits0
NVD
NVD
added 2025/07/07 5:15 p.m.3 views

CVE-2025-1351

IBM Storage Virtualize 8.5, 8.6, and 8.7 products could allow a user to escalate their privileges to that of another user logging in at the same time due to a race condition in the login function...

7CVSS0.0003EPSS
Exploits0References1
CVE
CVE
added 2025/07/07 4:41 p.m.21 views

CVE-2025-1351

IBM Storage Virtualize versions 8.5–8.7 are affected by a race-condition in the login function that could allow a user to escalate privileges to another active session. Remediation from IBM’s security bulletin replaces vulnerable code with fixed versions: 8.5.x: up to 8.5.0.15; 8.5.1.0 and 8.5.2....

7CVSS6.5AI score0.0003EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/07/07 4:41 p.m.2 views

CVE-2025-1351

IBM Storage Virtualize 8.5, 8.6, and 8.7 products could allow a user to escalate their privileges to that of another user logging in at the same time due to a race condition in the login function...

7CVSS5.8AI score0.0003EPSS
Exploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/07/07 3:8 p.m.5 views

Security Bulletin: Vulnerability in login affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products

Summary A vulnerability in the login system affects IBM Storage Virtualize products and could cause denial of service. CVE-2025-1351. Vulnerability Details CVEID:CVE-2025-1351 DESCRIPTION: IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products could allow a...

7CVSS7.5AI score0.0003EPSS
Exploits0Affected Software8
RedhatCVE
RedhatCVE
added 2025/05/22 4:17 p.m.3 views

CVE-2020-1351

An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'...

5.5CVSS6.2AI score0.00275EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 5:20 a.m.4 views

CVE-2013-1351

Verax NMS prior to 2.10 allows authentication via the encrypted password without knowing the cleartext password...

5.9CVSS7.5AI score0.00844EPSS
Exploits3References1
Amazon
Amazon
added 2025/04/16 12:0 a.m.8 views

Important: git

Issue Overview: A flaw was found in the git fast-import command where it provides the export-marks feature that may unexpectedly overwrite arbitrary paths. An attacker can abuse this flaw if they can control the input passed to the fast-import command by using the export-marks feature and overwri...

9.8CVSS9.3AI score0.2462EPSS
Exploits1
OpenVAS
OpenVAS
added 2024/04/23 12:0 a.m.16 views

openSUSE Security Advisory (SUSE-SU-2024:1351-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.00043EPSS
Exploits1References4
Circl
Circl
added 2024/03/10 3:16 p.m.0 views

CVE-2019-1351

creationtimestamp| type| source ---|---|--- 2024-03-10 15:16:16+00:00| seen| https://t.me/ctinow/204284...

7.5CVSS8.2AI score0.17105EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/03/07 5:15 p.m.31 views

CVE-2024-1351

Under certain configurations of --tlsCAFile and tls.CAFile, MongoDB Server may skip peer certificate validation which may result in untrusted connections to succeed. This may effectively reduce the security guarantees provided by TLS and open connections that should have been closed due to failin...

9.8CVSS6.8AI score0.00249EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2024/03/07 4:10 p.m.14 views

CVE-2024-1351 MongoDB Server may allow successful untrusted connection

Under certain configurations of --tlsCAFile and tls.CAFile, MongoDB Server may skip peer certificate validation which may result in untrusted connections to succeed. This may effectively reduce the security guarantees provided by TLS and open connections that should have been closed due to failin...

8.8CVSS8.7AI score0.00249EPSS
Exploits0References6
Cvelist
Cvelist
added 2024/03/07 4:10 p.m.18 views

CVE-2024-1351 MongoDB Server may allow successful untrusted connection

Under certain configurations of --tlsCAFile and tls.CAFile, MongoDB Server may skip peer certificate validation which may result in untrusted connections to succeed. This may effectively reduce the security guarantees provided by TLS and open connections that should have been closed due to failin...

8.8CVSS8.9AI score0.00249EPSS
Exploits0References6
CVE
CVE
added 2024/03/07 4:10 p.m.127 views

CVE-2024-1351

CVE-2024-1351 (MongoDB TLS peer cert validation bypass) Affected product: MongoDB Server (versions affected as per CVE description): v7.0 before or including 7.0.5; v6.0 before or including 6.0.13; v5.0 before or including 5.0.24; v4.4 before or including 4.4.28. Root cause: When TLS is enabled, ...

9.8CVSS8.7AI score0.00249EPSS
Exploits0References6Affected Software1
FreeBSD
FreeBSD
added 2024/03/07 12:0 a.m.45 views

databases/mongodb* -- Improper Certificate Validation

MongoDB, Inc. reports: A security vulnerability was found where a server process running MongoDB 3.2.6 or later will allow incoming connections to skip peer certificate validation if the server process was started with TLS enabled net.tls.mode set to allowTLS, preferTLS, or requireTLS and without...

9.8CVSS7.3AI score0.00249EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/12/20 12:0 a.m.18 views

Cisco IOS and NX-OS Software Locator/ID Separation Protocol Packet DOS (CVE-2016-1351)

The Locator/ID Separation Protocol LISP implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service device reload via a crafted header in a packet, aka Bug ID CSCuu64279. This plugin only works with Tenable.ot. Please visit...

7.8CVSS7.4AI score0.01833EPSS
Exploits0References2
OSV
OSV
added 2023/08/31 12:15 p.m.1 views

BELL-CVE-2019-1351 CVE-2019-1351 does not affect BellSoft software

Bulletin has no description...

7.5CVSS5.8AI score0.17105EPSS
Exploits0References1
Circl
Circl
added 2023/04/19 6:20 a.m.2 views

CVE-2023-1351

creationtimestamp| type| source ---|---|--- 2023-04-19 06:20:15+00:00| seen| https://t.me/cibsecurity/59867...

9.8CVSS6.9AI score0.00306EPSS
Exploits1References1
CVE
CVE
added 2023/03/11 11:31 a.m.41 views

CVE-2023-1351

CVE-2023-1351 affects SourceCodester Computer Parts Sales and Inventory System 1.0, with a SQL injection in the file cust_transac.php via the phonenumber parameter. The vulnerability can be exploited remotely and exploits have been publicly disclosed. Remediation guidance across sources includes ...

9.8CVSS8.3AI score0.00306EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder