Lucene search
K

89 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/13 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-1403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - Unknown description CVE-2026-1403 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable...

5.8AI score
Exploits0References2
OSV
OSV
added 2026/04/09 12:0 a.m.4 views

UBUNTU-CVE-2026-1403

Unknown description...

5.8AI score
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/07 9:11 a.m.7 views

CVE-2025-1403

Qiskit SDK 0.45.0 through 1.2.4 could allow a remote attacker to cause a denial of service using a maliciously crafted QPY file containing a malformed symengine serialization stream which can cause a segfault within the symengine library...

8.6CVSS6.8AI score0.00099EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/15 3:56 a.m.8 views

Security Bulletin: Qiskit SDK Vulnerability Allows Remote Attackers to Cause Denial of Service via Maliciously Crafted QPY File

Summary A maliciously crafted QPY file containing a malformed symengine serialization stream as part of the larger QPY serialization of a ParameterExpression object can cause a segfault within the symengine library, allowing an attacker to terminate the hosting process. Vulnerability Details...

8.6CVSS8.1AI score0.00099EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/03 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2010-1403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses uninitialized memory during the handling ...

9.3CVSS8.3AI score0.17128EPSS
Exploits0References2
OSV
OSV
added 2025/02/21 5:15 p.m.2 views

CVE-2025-1403

Qiskit SDK 0.45.0 through 1.2.4 could allow a remote attacker to cause a denial of service using a maliciously crafted QPY file containing a malformed symengine serialization stream which can cause a segfault within the symengine library...

8.6CVSS7.2AI score
Exploits0References1
NVD
NVD
added 2025/02/21 5:15 p.m.5 views

CVE-2025-1403

Qiskit SDK 0.45.0 through 1.2.4 could allow a remote attacker to cause a denial of service using a maliciously crafted QPY file containing a malformed symengine serialization stream which can cause a segfault within the symengine library...

8.6CVSS0.00099EPSS
Exploits0References1
CVE
CVE
added 2025/02/21 4:55 p.m.62 views

CVE-2025-1403

CVE-2025-1403 affects Qiskit SDK from 0.45.0 to 1.2.4, where a malicious QPY file with a malformed symengine serialization stream can trigger a segfault in the symengine library, enabling remote denial of service. The Red Hat, OSV, and IBM advisories confirm the vulnerability and provide remediat...

8.6CVSS8.3AI score0.00099EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/21 4:55 p.m.7 views

CVE-2025-1403 Qiskit SDK denial of service

Qiskit SDK 0.45.0 through 1.2.4 could allow a remote attacker to cause a denial of service using a maliciously crafted QPY file containing a malformed symengine serialization stream which can cause a segfault within the symengine library...

8.6CVSS8.3AI score0.00099EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/21 4:55 p.m.8 views

CVE-2025-1403 Qiskit SDK denial of service

Qiskit SDK 0.45.0 through 1.2.4 could allow a remote attacker to cause a denial of service using a maliciously crafted QPY file containing a malformed symengine serialization stream which can cause a segfault within the symengine library...

8.6CVSS0.00099EPSS
Exploits0References1
Circl
Circl
added 2024/03/19 6:16 p.m.2 views

RHSA-2024:1403

creationtimestamp| type| source ---|---|--- 2024-03-19 18:16:38+00:00| seen| https://t.me/ctinow/211792...

4.8AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/03/18 12:0 a.m.20 views

Cisco IP 8800 Series Phones btcli Utility Command Injection (CVE-2016-1403)

CISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS command execution via crafted CLI commands, aka Bug ID CSCuz03005. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

7.8CVSS7.6AI score0.00247EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/03/15 12:0 a.m.46 views

Progress OpenEdge 11.7.x < 11.7.19 / 12.2.x < 12.2.13 / 12.8.x < 12.8.1 (000253075)

The version of Progress OpenEdge installed on the remote host is prior to 11.7.19, 12.2.13, or 12.8.1. It is, therefore, affected by a vulnerability as referenced in the 000253075 advisory. - In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms...

10CVSS8.5AI score0.16243EPSS
Exploits1References2
The Hacker News
The Hacker News
added 2024/03/11 6:28 a.m.52 views

Proof-of-Concept Exploit Released for Progress Software OpenEdge Vulnerability

Technical specifics and a proof-of-concept PoC exploit have been made available for a recently disclosed critical security flaw in Progress Software OpenEdge Authentication Gateway and AdminServer, which could be potentially exploited to bypass authentication protections. Tracked as CVE-2024-1403...

10CVSS8.2AI score0.16243EPSS
Exploits1
GithubExploit
GithubExploit
added 2024/03/06 3:27 p.m.476 views

Exploit for Authentication Bypass by Primary Weakness in Progress Openedge

CVE-2024-1403 Progress OpenEdge Authentication Bypass An explo...

10CVSS9.7AI score0.16243EPSS
Exploits1
Circl
Circl
added 2024/02/27 5:27 p.m.1 views

CVE-2024-1403

creationtimestamp| type| source ---|---|--- 2024-02-27 17:27:56+00:00| seen| https://t.me/ctinow/194635 2024-02-27 17:28:10+00:00| seen| https://t.me/ctinow/194646 2024-03-07 02:16:08+00:00| published-proof-of-concept| https://t.me/ctinow/201989 2024-03-07 07:53:11+00:00|...

10CVSS8.9AI score0.16243EPSS
Exploits1References11
CVE
CVE
added 2024/02/27 3:39 p.m.260 views

CVE-2024-1403

CVE-2024-1403 affects Progress OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, and 12.8.1. The flaw is an authentication bypass caused by improper handling of credentials, where unexpected content can bypass authentication via the authorizeUser() flow that validates aga...

10CVSS9.7AI score0.16243EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2024/02/27 3:39 p.m.15 views

CVE-2024-1403 Authentication Bypass in OpenEdge Authentication Gateway and AdminServer

In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified. The vulnerability is a bypass to authentication based on a failure to properly handle username and...

10CVSS9.9AI score0.16243EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/02/27 3:39 p.m.32 views

CVE-2024-1403 Authentication Bypass in OpenEdge Authentication Gateway and AdminServer

In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified. The vulnerability is a bypass to authentication based on a failure to properly handle username and...

10CVSS7.2AI score0.16243EPSS
Exploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.2 views

Malicious code in wlwz-2312-1403 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cb38821475478df4ccad89ad27746eb79e417ddd4602ba639b5b3e83fbf86ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
Rows per page
Query Builder