Lucene search
+L

122 matches found

Circl
Circl
added 2025/06/17 2:39 p.m.12 views

CVE-2025-4404

creationtimestamp| type| source ---|---|--- 2025-06-17 14:39:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18594 2025-06-17 14:55:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114699282395931964 2025-06-17 15:08:20+00:00| seen|...

9.1CVSS7.4AI score0.01892EPSS
SaveExploits1References9
OSV
OSV
added 2025/06/17 2:15 p.m.2 views

DEBIAN-CVE-2025-4404

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the krbCanonicalName for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a...

9.1CVSS8.4AI score0.01892EPSS
SaveExploits1References1
OSV
OSV
added 2025/06/17 2:15 p.m.10 views

CVE-2025-4404

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the krbCanonicalName for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a...

9.1CVSS7.1AI score0.01892EPSS
SaveExploits1References15
Vulnrichment
Vulnrichment
added 2025/06/17 1:39 p.m.19 views

CVE-2025-4404 Freeipa: idm: privilege escalation from host to domain admin in freeipa

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the krbCanonicalName for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a...

9.1CVSS9.4AI score0.01892EPSS
SaveExploits1References15
Cvelist
Cvelist
added 2025/06/17 1:39 p.m.12 views

CVE-2025-4404 Freeipa: idm: privilege escalation from host to domain admin in freeipa

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the krbCanonicalName for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a...

9.1CVSS0.01892EPSS
SaveExploits1References15
Debian CVE
Debian CVE
added 2025/06/17 1:39 p.m.6 views

CVE-2025-4404

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the krbCanonicalName for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a...

9.1CVSS8.4AI score0.01892EPSS
SaveExploits1
OSV
OSV
added 2025/06/17 12:0 a.m.7 views

ALSA-2025:9184 Important: ipa security update

AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA CVE-2025-4404 For more details...

9.1CVSS9.3AI score0.01892EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
added 2025/06/17 12:0 a.m.7 views

Important: ipa security update

AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA CVE-2025-4404 For more details...

9.1CVSS9.4AI score0.01892EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
added 2025/06/17 12:0 a.m.9 views

Important: idm:DL1 security update

AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA CVE-2025-4404 For more details...

9.1CVSS9.4AI score0.01892EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/06/17 12:0 a.m.6 views

RHEL 8 : idm:DL1 (RHSA-2025:9194)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9194 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based...

9.1CVSS8.5AI score0.01892EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/06/17 12:0 a.m.7 views

RHEL 10 : ipa (RHSA-2025:9190)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9190 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-base...

9.1CVSS8.5AI score0.01892EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/06/17 12:0 a.m.8 views

RHEL 8 : idm:DL1 (RHSA-2025:9192)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9192 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based...

9.1CVSS8.5AI score0.01892EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/06/17 12:0 a.m.8 views

RHEL 7 : ipa (RHSA-2025:9189)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9189 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based...

9.1CVSS8.5AI score0.01892EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/06/17 12:0 a.m.5 views

RHEL 8 : idm:DL1 (RHSA-2025:9191)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9191 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based...

9.1CVSS8.5AI score0.01892EPSS
SaveExploits1References4
OSV
OSV
added 2025/06/17 12:0 a.m.10 views

ALSA-2025:9188 Important: idm:DL1 security update

AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA CVE-2025-4404 For more details...

9.1CVSS9.3AI score0.01892EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2025/05/21 7:59 p.m.7 views

CVE-2008-4404

The IPv6 Neighbor Discovery Protocol NDP implementation on IBM zSeries servers does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service loss of connectivity or read private network traffic via a spoofed message that modifies the Forwa...

10CVSS6.7AI score0.07425EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/14 5:39 a.m.32 views

CVE-2024-4404 ElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery

The ElementsKit PRO plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.6.2 via the 'renderraw' function. This can allow authenticated attackers, with contributor-level permissions and above, to make web requests to arbitrary locations originating...

8.5CVSS0.00322EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
added 2024/05/29 12:0 a.m.3 views

VulnCheck KEV: CVE-2018-4404

In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improved memory handling...

9.3CVSS7.3AI score0.13919EPSS
SaveExploits4References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.3 views

Malicious code in wlwz-2312-4404 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75b02908b5e87f4a4205a5f373381fd176a535eb5fc0a0a15a2c18879b91464f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:0 a.m.17 views

Rocky Linux 8 : kexec-tools (RLSA-2021:4404)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4404 advisory. - A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal...

5.5CVSS5.5AI score0.00248EPSS
SaveExploits0References7
Rows per page
Query Builder