Lucene search
K

16 matches found

Nuclei
Nuclei
added yesterday12 views

JEHC-BPM - Remote Code Execute

A Remote Command Execution vulnerability in the component /server/executeExec of JEHC-BPM = v2.0.1 allows attackers to execute arbitrary code. The vulnerability exists due to insufficient authorization checks in the executeExec endpoint which allows direct command execution. id: CVE-2025-45854...

10CVSS5.9AI score0.21433EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/06/03 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-45854

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: inside-secure/eip93 - unregister only available algorithm EIP93 has an options register. This register indicates which crypto algorithms are implemented...

5.8AI score0.00022EPSS
Exploits0References2
OSV
OSV
added 2026/05/27 2:16 p.m.4 views

DEBIAN-CVE-2026-45854

In the Linux kernel, the following vulnerability has been resolved: crypto: inside-secure/eip93 - unregister only available algorithm EIP93 has an options register. This register indicates which crypto algorithms are implemented in silicon. Supported algorithms are registered on this basis...

5.7AI score0.00022EPSS
Exploits0References1
OSV
OSV
added 2026/05/27 2:16 p.m.3 views

UBUNTU-CVE-2026-45854

In the Linux kernel, the following vulnerability has been resolved: crypto: inside-secure/eip93 - unregister only available algorithm EIP93 has an options register. This register indicates which crypto algorithms are implemented in silicon. Supported algorithms are registered on this basis...

5.7AI score0.00022EPSS
Exploits0References3
CVE
CVE
added 2026/05/27 12:15 p.m.11 views

CVE-2026-45854

CVE-2026-45854 – Linux kernel crypto: inside-secure/eip93 The issue concerns the EIP93 option register, which indicates which crypto algorithms are implemented in silicon. The kernel previously unregisters all algorithms based on this register, including those not supported by hardware, which cou...

5.8AI score0.00022EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/06/05 12:3 a.m.14 views

CVE-2025-45854

/server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams...

10CVSS7.9AI score0.21433EPSS
Exploits1References1
Circl
Circl
added 2025/06/03 3:57 a.m.12 views

CVE-2025-45854

creationtimestamp| type| source ---|---|--- 2025-06-03 03:57:32+00:00| seen| https://gist.github.com/Cafe-Tea/bc14b38f4bfd951de2979a24c3358460 2025-06-03 17:28:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpsu7sisk2s 2025-06-17 17:16:45+00:00| confirmed|...

10CVSS5.8AI score0.21433EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/02/05 3:32 a.m.4 views

CVE-2024-45854

Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when a ‘describe’ query is run on it...

7.5CVSS7.2AI score0.00225EPSS
Exploits1References1
Circl
Circl
added 2024/09/16 9:12 p.m.2 views

CVE-2023-45854

creationtimestamp| type| source ---|---|--- 2024-09-16 21:12:57+00:00| seen| https://t.me/cvedetector/5753...

7.5CVSS4.8AI score0.0027EPSS
Exploits0References1
Circl
Circl
added 2024/09/12 3:36 p.m.2 views

CVE-2024-45854

creationtimestamp| type| source ---|---|--- 2024-09-12 15:36:57+00:00| seen| https://t.me/cvedetector/5465 2026-03-18 07:30:04+00:00| seen| https://bsky.app/profile/nerq-ai.bsky.social/post/3mhcxpsgkex2j...

7.5CVSS4.8AI score0.00225EPSS
Exploits1References2
CVE
CVE
added 2024/09/12 1:3 p.m.52 views

CVE-2024-45854

CVE-2024-45854 concerns MindsDB platform 23.10.3.0 and later, with a deserialization of untrusted data flaw that can let a maliciously uploaded ‘inhouse’ model execute arbitrary code on the server when a describe query is run. The connected documents confirm the affected product/version and the u...

7.5CVSS7AI score0.00225EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/09/12 1:3 p.m.12 views

CVE-2024-45854

Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when a ‘describe’ query is run on it...

7.1CVSS0.00225EPSS
Exploits1References1
Circl
Circl
added 2023/02/07 7:23 a.m.1 views

CVE-2022-45854

creationtimestamp| type| source ---|---|--- 2023-02-07 07:23:37+00:00| seen| https://t.me/cibsecurity/57642...

4.3CVSS4.7AI score0.00237EPSS
Exploits0References1
CVE
CVE
added 2023/02/07 12:0 a.m.61 views

CVE-2022-45854

CVE-2022-45854 affects Zyxel NWA110AX firmware prior to 6.50(ABTG.0)C0. The vulnerability stems from an improper check for unusual conditions in the AP firmware, allowing a local LAN attacker to trigger a temporary denial-of-service by sending crafted VLAN frames after intercepting the AP’s MAC. ...

4.3CVSS5.1AI score0.00237EPSS
Exploits0References1Affected Software1
Packet Storm
Packet Storm
added 2009/12/31 12:0 a.m.20 views

Alt-N SecurityGateway username Buffer Overflow

$Id: altnsecuritygateway.rb 8010 2009-12-28 20:38:50Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

10CVSS0.8AI score0.80446EPSS
Exploits8
Saint
Saint
added 2008/07/18 12:0 a.m.28 views

Alt-N SecurityGateway username buffer overflow

Added: 07/18/2008 CVE: CVE-2008-4193 BID: 29457 OSVDB: 45854 Background Alt-N SecurityGateway is an e-mail spam firewall for Exchange and SMTP servers. Problem A buffer overflow vulnerability in the web administration interface allows remote attackers to execute arbitrary commands by sending an...

10CVSS7.9AI score0.80446EPSS
Exploits8
Rows per page
Query Builder