Lucene search
K

75 matches found

Circl
Circl
added 2026/03/22 2:15 p.m.1 views

CVE-2019-25613

creationtimestamp| type| source ---|---|--- 2026-03-22 14:15:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhnq7v5ppd2x 2026-04-05 08:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miqbsf2wrj2d...

8.7CVSS5.9AI score0.00412EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/02/12 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-25613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index. CVE-2026-25613 Note...

7.1CVSS5.5AI score0.00077EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/10 6:54 p.m.4 views

CVE-2026-25613

An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index...

7.1CVSS5.5AI score0.00077EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/10 6:54 p.m.4 views

CVE-2026-25613 An unsafe cast in the MongoDB query planner can result in a segmentation fault.

An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index...

7.1CVSS5.5AI score0.00077EPSS
Exploits0References1
NVD
NVD
added 2025/11/20 9:16 p.m.2 views

CVE-2025-25613

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext usi...

7.5CVSS0.00032EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/05/14 12:0 a.m.11 views

Alibaba Cloud Linux 3 : 0044: ruby:2.7 (ALINUX3-SA-2021:0044)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0044 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-25613: An issue was discovered in...

7.5CVSS7.4AI score0.00576EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/10 3:28 p.m.10 views

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to LDAP injection due to hbase-client

Summary hbase-client is used by the ds-cas-lite microservice as part of the HBase API functionality. Vulnerability Details CVEID:CVE-2023-25613 DESCRIPTION: Apache Kerby could allow a remote attacker to conduct an LDAP injection, caused by a flaw in LdapIdentityBackend. By sending a request with ...

9.8CVSS9.2AI score0.00213EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2020-25613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked th...

7.5CVSS7.1AI score0.00275EPSS
Exploits0References2
Circl
Circl
added 2024/03/05 10:26 p.m.0 views

CVE-2024-25613

creationtimestamp| type| source ---|---|--- 2024-03-05 22:26:20+00:00| seen| https://t.me/ctinow/200756 2024-03-05 22:32:11+00:00| seen| https://t.me/ctinow/200766...

7.2CVSS7AI score0.00124EPSS
Exploits0References2
NVD
NVD
added 2024/03/05 9:15 p.m.10 views

CVE-2024-25613

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS7.7AI score0.00124EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/05 8:17 p.m.13 views

CVE-2024-25613

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS8.2AI score0.00124EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/05 8:17 p.m.13 views

CVE-2024-25613

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS7.8AI score0.00124EPSS
Exploits0References1
CVE
CVE
added 2024/03/05 8:17 p.m.59 views

CVE-2024-25613

CVE-2024-25613 refers to authenticated command injection in the ArubaOS CLI. The core issue is a vulnerability that allows an authenticated attacker with access to the CLI to execute arbitrary commands with elevated privileges on the underlying OS. Affected context is ArubaOS-based appliances (Mo...

7.2CVSS7.6AI score0.00124EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/09/27 12:0 a.m.78 views

Amazon Linux 2 : ruby (ALASRUBY2.6-2023-006)

The version of ruby installed on the remote host is prior to 2.6.7-126. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2RUBY2.6-2023-006 advisory. An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP...

7.5CVSS7.3AI score0.00576EPSS
Exploits0References6
OSV
OSV
added 2023/08/31 12:15 p.m.0 views

BELL-CVE-2020-25613 CVE-2020-25613 does not affect BellSoft software

Bulletin has no description...

7.5CVSS7.3AI score0.00275EPSS
Exploits0References1
vulnersOsv
vulnersOsv
added 2023/02/20 6:30 p.m.1 views

org.apache.kerby:kerby-kdc-test (>=1.0.0-RC1 <=1.0.0-RC2) potentially affected by CVE-2023-25613 via org.apache.kerby:ldap-backend (>=1.0.0-RC1 <=1.0.0-RC2)

org.apache.kerby:ldap-backend MAVEN version =1.0.0-RC1, =1.0.0-RC1, =1.0.0-RC2 Source cves: CVE-2023-25613 Source advisory: OSV:GHSA-337F-XR2X-6FCF...

9.8CVSS7.2AI score0.00213EPSS
Exploits0
Circl
Circl
added 2023/02/20 6:15 p.m.0 views

CVE-2023-25613

creationtimestamp| type| source ---|---|--- 2023-02-20 18:15:55+00:00| seen| https://t.me/cibsecurity/58525 2023-02-24 15:04:36+00:00| seen| https://t.me/breachdetector/207052 2023-02-24 21:27:53+00:00| seen| Telegram/Lw7u-Xk6xSteuBiwyNzWX2LNGzfySroFN8WyCw6GBv2i6to...

9.8CVSS8.6AI score0.00213EPSS
Exploits0References2
NVD
NVD
added 2023/02/20 4:15 p.m.16 views

CVE-2023-25613

An LDAP Injection vulnerability exists in the LdapIdentityBackend of Apache Kerby before 2.0.3...

9.8CVSS9.7AI score0.00213EPSS
Exploits0References1
CVE
CVE
added 2023/02/20 3:29 p.m.102 views

CVE-2023-25613

CVE-2023-25613 is an LDAP injection in Apache Kerby via LdapIdentityBackend. IBM/Cloudera advisories list CVE-2023-25613 among vulnerabilities affecting CDP (e.g., 7.1.9 HF2) and IBM DataStage on Cloud Pak for Data. Remediation provided: upgrade to Cloud Pak for Data 5.0.0+ for DataStage on Cloud...

9.8CVSS9.6AI score0.00213EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/02/20 3:29 p.m.16 views

CVE-2023-25613 LDAP Injection Vulnerability in Apache Kerby

An LDAP Injection vulnerability exists in the LdapIdentityBackend of Apache Kerby before 2.0.3...

9.8AI score0.00213EPSS
Exploits0References1
Rows per page
Query Builder