Lucene search
K

87 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.3 views

MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.342.b07-1.el7 (AXSA:2022-3599:06)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3599:06 advisory. OpenJDK: integer truncation issue in Xalan-J JAXP, 8285407 CVE-2022-34169 OpenJDK: class compilation issue Hotspot, 8281859 CVE-2022-21540 OpenJDK:...

7.5CVSS7.1AI score0.10953EPSS
Exploits2References4
RedhatCVE
RedhatCVE
added 2025/05/23 2:33 a.m.3 views

CVE-2023-3599

A vulnerability was found in SourceCodester Best Fee Management System 1.0. It has been rated as critical. Affected by this issue is the function saveuser of the file adminclass.php of the component Add User Handler. The manipulation leads to improper access controls. The attack may be launched...

9.8CVSS6.9AI score0.00112EPSS
Exploits0References1
Circl
Circl
added 2025/04/30 5:13 p.m.10 views

CVE-2025-3599

creationtimestamp| type| source ---|---|--- 2025-04-30 17:13:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14090 2025-04-30 18:00:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo2esvzxd424 2025-04-30 20:25:46+00:00| seen| https://t.me/cvedetector/24129...

7.5CVSS4.8AI score0.00186EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/04/30 4:49 p.m.69 views

CVE-2025-3599 Symantec Endpoint Protection Elevation of Privilege

Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user...

6.5CVSS0.00186EPSS
Exploits0References1
CVE
CVE
added 2025/04/30 4:49 p.m.47 views

CVE-2025-3599

CVE-2025-3599 affects the Symantec Endpoint Protection Windows Agent with the ERASER Engine prior to 119.1.7.8. The vulnerability is an Elevation of Privilege that may allow an attacker to delete resources normally protected from an application or user. Affected component: ERASER Engine in the SE...

7.5CVSS6.4AI score0.00186EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/30 4:49 p.m.5 views

CVE-2025-3599 Symantec Endpoint Protection Elevation of Privilege

Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user...

6.5CVSS6.9AI score0.00186EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2022-3599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file...

6.5CVSS6.6AI score0.00039EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/05/28 12:0 a.m.42 views

Oracle Linux 8 : libtiff (ELSA-2024-3059)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3059 advisory. - Fix CVE-2022-3599 CVE-2022-4645 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

6.8CVSS6.9AI score0.00039EPSS
Exploits2References2
Oracle linux
Oracle linux
added 2024/05/23 12:0 a.m.32 views

libtiff security update

4.0.9-31 - Fix CVE-2022-3599 CVE-2022-4645 - Resolves: RHEL-5399 4.0.9-30 - Bump specfile to retrigger gating - Add tests folder for standard beakerlib - Related: RHEL-4683 RHEL-4685 RHEL-4686 RHEL-4687 RHEL-4688...

6.8CVSS6.9AI score0.00039EPSS
Exploits2
Cvelist
Cvelist
added 2024/05/02 4:52 p.m.13 views

CVE-2024-3599 WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.0.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion

The WP Cookie Consent for GDPR, CCPA & ePrivacy plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the gdprpolicyprocessdelete function in all versions up to, and including, 3.0.2. This makes it possible for unauthenticated attackers to delete...

5.3CVSS5.4AI score0.00159EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.17 views

openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:3599-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.04259EPSS
Exploits3References2
Circl
Circl
added 2024/02/11 11:36 a.m.0 views

CVE-2014-3599

creationtimestamp| type| source ---|---|--- 2024-02-11 11:36:45+00:00| seen| https://t.me/ctinow/182753...

6.5CVSS6.4AI score0.00384EPSS
Exploits0References1
Circl
Circl
added 2023/07/10 10:24 p.m.1 views

CVE-2023-3599

creationtimestamp| type| source ---|---|--- 2023-07-10 22:24:08+00:00| seen| https://t.me/cibsecurity/66300...

9.8CVSS6.9AI score0.00112EPSS
Exploits0References1
CVE
CVE
added 2023/07/10 5:31 p.m.33 views

CVE-2023-3599

SourceCodester Best Fee Management System 1.0 is affected by CVE-2023-3599 in the function save_user of admin_class.php (Add User Handler). The issue enables improper access controls and can be exploited remotely; multiple sources indicate the exploit has been disclosed publicly. Constraints vary...

9.8CVSS7.1AI score0.00112EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2023/05/16 12:0 a.m.25 views

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-1936)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.9AI score0.00171EPSS
Exploits9References2
Oracle linux
Oracle linux
added 2023/05/15 12:0 a.m.114 views

libtiff security update

4.4.0-7 - Fix CVE-2022-3970 - Resolves: CVE-2022-3970 4.4.0-6 - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598 CVE-2022-3627 - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598 CVE-2022-3627...

8.8CVSS7.1AI score0.00116EPSS
Exploits9
Tenable Nessus
Tenable Nessus
added 2023/05/14 12:0 a.m.41 views

AlmaLinux 9 : libtiff (ALSA-2023:2340)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2340 advisory. - Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access v...

8.8CVSS6.3AI score0.00116EPSS
Exploits9References11
RedHat Linux
RedHat Linux
added 2023/05/09 10:2 a.m.113 views

Moderate: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

8.8CVSS6.8AI score0.00116EPSS
Exploits10References12
OSV
OSV
added 2023/05/09 12:0 a.m.23 views

ALSA-2023:2340 Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: heap Buffer overflows in tiffcrop.c CVE-2022-3570 libtiff: out-of-bounds write in TIFFmemcpy in libtiff/tifunix CVE-2022-3597 libtiff: out-of-bounds write in...

8.8CVSS7.8AI score0.00116EPSS
Exploits9References22
OpenVAS
OpenVAS
added 2023/02/10 12:0 a.m.26 views

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-1391)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.00116EPSS
Exploits7References2
Rows per page
Query Builder