Lucene search
K

28 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.3 views

MiracleLinux 7 : kernel-3.10.0-1062.7.1.el7 (AXSA:2019-4426:07)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4426:07 advisory. Kernel: KVM: OOB memory access via mmio ring buffer CVE-2019-14821 kernel: local attacker can trigger multiple use-after-free conditions results in...

8.8CVSS7.4AI score0.00106EPSS
Exploits1References3
OSV
OSV
added 2026/01/05 9:15 a.m.2 views

CVE-2025-15239

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

6.5CVSS6AI score0.00034EPSS
Exploits0References2
Circl
Circl
added 2026/01/05 6:58 a.m.0 views

CVE-2025-15239

creationtimestamp| type| source ---|---|--- 2026-01-05 06:58:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10616-cd942-2.html 2026-01-05 10:02:34+00:00| published-proof-of-concept| Telegram/UCM3N0VAiIL0X9q05DMaRnnlz6r5GWtUQVOA9u8gPZf080...

7.1CVSS4.8AI score0.00034EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2019-15239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, a certain net/ipv4/tcpoutput.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier longterm...

7.8CVSS6.9AI score0.00035EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2022/09/01 12:0 a.m.48 views

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.10)

The version of AOS installed on the remote host is prior to 5.10. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.10 advisory. - In the Linux kernel, a certain net/ipv4/tcpoutput.c change, which was properly incorporated into 4.16.12, was incorrectly...

8.8CVSS6.7AI score0.00106EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2019:3228-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.6AI score0.80379EPSS
Exploits22References10
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.28 views

SUSE: Security Advisory (SUSE-SU-2019:3258-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.6AI score0.80379EPSS
Exploits22References9
Circl
Circl
added 2020/10/06 10:28 p.m.2 views

CVE-2020-15239

creationtimestamp| type| source ---|---|--- 2020-10-06 22:28:25+00:00| seen| https://t.me/cibsecurity/15095...

4CVSS4.5AI score0.00127EPSS
Exploits0References1
OSV
OSV
added 2020/10/06 7:15 p.m.6 views

CVE-2020-15239

In xmpp-http-upload before version 0.4.0, when the GET method is attacked, attackers can read files which have a .data suffix and which are accompanied by a JSON file with the .meta suffix. This can lead to Information Disclosure and in some shared-hosting scenarios also to circumvention of...

3.5CVSS3.7AI score
Exploits0References4
CVE
CVE
added 2020/10/06 6:30 p.m.95 views

CVE-2020-15239

Summary: CVE-2020-15239 affects xmpp-http-upload prior to version 0.4.0. The issue allows directory traversal via GET requests to read ".data" files paired with ".meta" JSON metadata, enabling information disclosure and potentially bypassing access controls in multi-instance deployments. The ".da...

4CVSS3.5AI score0.00127EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2020/10/06 6:30 p.m.12 views

CVE-2020-15239 Directory Traversal in xmpp-http-upload

In xmpp-http-upload before version 0.4.0, when the GET method is attacked, attackers can read files which have a .data suffix and which are accompanied by a JSON file with the .meta suffix. This can lead to Information Disclosure and in some shared-hosting scenarios also to circumvention of...

3.5CVSS3.6AI score0.00127EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2020/04/04 5:36 a.m.35 views

CVE-2019-15239

A flaw was found in the way the Linux kernel's networking subsystem handled the write queue between TCP disconnection and re-connections. A local attacker could use this flaw to trigger multiple use-after-free conditions potentially escalating their privileges on the system...

7.8CVSS1.7AI score0.00035EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.61 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-2201)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.4AI score0.19224EPSS
Exploits18References2
Tenable Nessus
Tenable Nessus
added 2020/01/07 12:0 a.m.54 views

RHEL 7 : kpatch-patch (RHSA-2020:0027)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0027 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

8.8CVSS7.6AI score0.00106EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2020/01/06 2:53 p.m.100 views

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

8.8CVSS7.1AI score0.00106EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2019/12/12 12:0 a.m.66 views

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3228-1)

This update for the Linux Kernel 4.4.180-94100 fixes several issues. The following security issues were fixed : CVE-2018-20856: Fixed a use-after-free in blkdrainqueue due to an improper error handling bsc1156331. CVE-2019-13272: Fixed a privilege escalation from user to root due to improper...

9.3CVSS7.1AI score0.80379EPSS
Exploits22References14
Tenable Nessus
Tenable Nessus
added 2019/12/12 12:0 a.m.61 views

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3230-1)

This update for the Linux Kernel 4.4.180-94103 fixes several issues. The following security issues were fixed : CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship bsc115632...

9.3CVSS7.1AI score0.80379EPSS
Exploits22References11
Tenable Nessus
Tenable Nessus
added 2019/12/12 12:0 a.m.55 views

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3258-1)

This update for the Linux Kernel 4.4.178-9491 fixes several issues. The following security issues were fixed : CVE-2018-20856: Fixed a use-after-free in block/blk-core.c due to improper error handling bsc1156331. CVE-2019-13272: Fixed a privilege escalation from user to root due to improper...

9.3CVSS7.1AI score0.80379EPSS
Exploits22References13
Circl
Circl
added 2019/12/11 3:0 a.m.1 views

CVE-2019-15239

creationtimestamp| type| source ---|---|--- 2019-12-11 03:00:17+00:00| seen| https://t.me/indoghostsec/731 2019-12-11 16:24:35+00:00| seen| https://t.me/indoghostsec/751 2019-12-13 11:21:12+00:00| seen| Telegram/iQUZE2pIByE4vkwExY2sw7tjReCcmi36nOFNFwktNW4 2019-12-14 01:31:35+00:00| seen|...

7.8CVSS7.6AI score0.00035EPSS
Exploits1References12
OpenVAS
OpenVAS
added 2019/12/04 12:0 a.m.49 views

CentOS Update for bpftool CESA-2019:3979 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9AI score0.00106EPSS
Exploits1References2
Rows per page
Query Builder