Lucene search
K

10 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-37730

Malicious code in bioql PyPI...

7.2CVSS6.2AI score0.04769EPSS
Exploits0References1
Circl
Circl
added 2025/05/06 6:21 p.m.23 views

CVE-2025-37730

creationtimestamp| type| source ---|---|--- 2025-05-06 18:21:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15174 2025-05-06 19:20:01+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lojlqlndmjh2 2025-05-06 22:51:07+00:00| seen|...

6.5CVSS4.8AI score0.0009EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/05/06 5:29 p.m.15 views

CVE-2025-37730 Logstash Improper Certificate Validation in TCP output

Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle MitM attack in “client” mode, as hostname verification in TCP output was not being performed when the sslverificationmode = full was set...

6.5CVSS0.0009EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/06 5:29 p.m.15 views

CVE-2025-37730 Logstash Improper Certificate Validation in TCP output

Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle MitM attack in “client” mode, as hostname verification in TCP output was not being performed when the sslverificationmode = full was set...

6.5CVSS6.7AI score0.0009EPSS
Exploits0References1
Elastic
Elastic
added 2025/05/06 4:33 p.m.7 views

Logstash 8.17.6, 8.18.1, and 9.0.1 Security Update (ESA-2025-08)

Logstash Improper Certificate Validation in TCP output ESA-2025-08 Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle MitM attack in “client” mode, as hostname verification in TCP output was not being performed when the sslverificationmode = full was set...

6.5CVSS6.8AI score0.0009EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/04/11 12:0 a.m.18 views

Siemens SCALANCE W1750D Command Injection (CVE-2021-37730)

A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant IAP versions: Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and below; Aruba Instant...

9CVSS7.4AI score0.03402EPSS
Exploits0References4
CVE
CVE
added 2022/09/07 2:39 p.m.50 views

CVE-2022-37730

CVE-2022-37730 affects ftcms 2.1 with a Cross Site Request Forgery (CSRF) vulnerability in the PHP page (often News.php). The issue allows an attacker to craft a link or page that tricks a logged-in victim into sending a request to the server using the victim’s authentication context, impacting c...

8.8CVSS8.9AI score0.0011EPSS
Exploits1References1Affected Software1
Circl
Circl
added 2021/10/12 6:25 p.m.1 views

CVE-2021-37730

creationtimestamp| type| source ---|---|--- 2021-10-12 18:25:52+00:00| seen| https://t.me/cibsecurity/30423...

9CVSS7AI score0.03402EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/12 3:15 p.m.1 views

CVE-2021-37730

A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant IAP versions: Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and below; Aruba Instant...

9CVSS5.9AI score0.03402EPSS
Exploits0References3
CVE
CVE
added 2021/10/12 2:7 p.m.70 views

CVE-2021-37730

CVE-2021-37730 concerns a remote arbitrary command execution in HPE Aruba Instant (IAP). The vulnerability affects Aruba Instant versions across 6.4.x, 6.5.x, 8.5.x, 8.6.x and 8.7.x (as listed in the NVD entry). The 4.2.x ENISA/ICS/CISA-style documentation describes multiple vectors: a command-in...

9CVSS7.2AI score0.03402EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder