52562 matches found
Microsoft Windows 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and versions are affected:Windows 10...
Microsoft Win32k 资源管理错误漏洞
Microsoft Win32k is a system file for Windows multi-user administration by Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Win32k. An attacker exploiting this vulnerability could elevate privileges. The following products and editions are affected:Windows ...
Microsoft Windows 缓冲区错误漏洞
Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A buffer error vulnerability exists in the Microsoft Windows Storage Management Provider. An attacker exploiting this vulnerability could gain access to sensitive information. The following...
Microsoft Windows Netlogon 安全漏洞
Microsoft Windows Netlogon is an important component of Windows from Microsoft Corporation USA, whose main functions are authentication of users and machines on intra-domain networks and replication of databases for domain-controlled backups, as well as maintenance of domain member-to-domain,...
KB5061010: Windows 10 Version 1607 / Windows Server 2016 Security Update (June 2025)
The remote Windows host is missing security update 5061010. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-33066 - Improper access contro...
Microsoft Windows DHCP Server 安全漏洞
Microsoft Windows DHCP Server is a core service used by Microsoft Corporation USA to automatically obtain network configuration information. A security vulnerability exists in Microsoft Windows DHCP Server. An attacker has exploited the vulnerability to cause a denial of service on the system. Th...
Oracle Linux 7 : zlib (ELSA-2025-8314)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8314 advisory. 1.2.7-21.0.1 - Resolves: CVE-2025-4638 Orabug: 38010977 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
VulnCheck KEV: CVE-2016-10924
The ebook-download plugin before 1.2 for WordPress has directory traversal...
Security Bulletin: IBM CloudPak for Data Scheduling Service is vulernable to the Sweet32 attack.
Summary The 3DES cipher was available in some TLS cipher suites. Vulnerability Details CVEID:CVE-2016-2183 DESCRIPTION: The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.16 bug fix and security update
Red Hat OpenShift Container Platform release 4.18.16 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...
AlmaLinux 8 : rsync (ALSA-2025:8395)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:8395 advisory. zlib: Out-of-bounds pointer arithmetic in inftrees.c CVE-2016-9840 Tenable has extracted the preceding description block directly from the AlmaLinux security...
Low: Red Hat Security Advisory: rsync security update
An update for rsync is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
RHEL 8 : rsync (RHSA-2025:8395)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:8395 advisory. The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only...
From past to Present: a Survey of Malicious URL Detection Techniques, Datasets and Code Repositories
Malicious URLs persistently threaten the cybersecurity ecosystem, by either deceiving users into divulging private data or distributing harmful payloads to infiltrate host systems. Gaining timely insights into the current state of this ongoing battle holds significant importance. However, existin...
ABB M2M Gateway Arbitrary Code Execution in embedded OpenSSH (CVE-2016-10009)
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS11 modules by leveraging control over a forwarded agent-socket. This plugin only works with Tenable.ot. Please visit...
CVE-2024-12907
Kentico CMS in version 7 is vulnerable to a Reflected XSS attacks through manipulation of a specific GET request parameter sent to /CMSMessages/AccessDenied.aspx endpoint. Notably, support for this version of Kentico ended in 2016. Version 8 was tested as well and does not contain this...
CVE-2016-100005
creationtimestamp| type| source ---|---|--- 2025-05-23 03:20:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpsoe5oluc2a...
CVE-2016-7063
A flaw was found in pritunl-client before version 1.0.1116.6. Arbitrary write to user specified path may lead to privilege escalation...