Lucene search
K

123 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/22 12:0 a.m.7 views

RockyLinux 9 : grub2 (RLSA-2026:4760)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:4760 advisory. grub2: Missing unregister call for gettext command may lead to use-after-free CVE-2025-61662 Tenable has extracted the preceding description block directly from t...

7.8CVSS7.1AI score0.00017EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/03/25 12:29 p.m.2 views

CVE-2026-4760 Potential unauthorized access to files on the Web HMI server host

From Panorama Web HMI, an attacker can gain read access to certain Web HMI server files, if he knows their paths and if these files are accessible to the Servin process execution account. Installations based on Panorama Suite 2022-SP1 22.50.005 are vulnerable unless update PS-2210-02-4079 or high...

9.2CVSS6AI score0.00104EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/25 12:29 p.m.17 views

CVE-2026-4760 Potential unauthorized access to files on the Web HMI server host

From Panorama Web HMI, an attacker can gain read access to certain Web HMI server files, if he knows their paths and if these files are accessible to the Servin process execution account. Installations based on Panorama Suite 2022-SP1 22.50.005 are vulnerable unless update PS-2210-02-4079 or high...

9.2CVSS0.00104EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/03/17 12:0 a.m.2 views

RHEL 9 : grub2 (RHSA-2026:4760)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:4760 advisory. The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular...

7.8CVSS5.9AI score0.00017EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/01/06 1:46 a.m.1 views

CVE-2025-20762

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch...

6.5AI score0.00038EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-4760

Malware in sbrugna...

7.8CVSS7.7AI score0.00099EPSS
Exploits1References2
Circl
Circl
added 2025/09/23 8:49 p.m.1 views

CVE-2025-4760

creationtimestamp| type| source ---|---|--- 2025-09-23 20:49:46+00:00| seen| Telegram/An9v4fAMFKrLHxY6c06MRb4v1YshqyGCUPL3G8QBe2222vc...

4.8CVSS4.8AI score0.00025EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2025/09/23 3:31 p.m.4 views

org.wso2.carbon.devicemgt:org.wso2.carbon.device.mgt.common (>=1.2.0 <=2.0.19) potentially affected by CVE-2025-4760 via org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.api (>=5.0.5 <=6.1.35)

org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.api MAVEN version =5.0.5, =1.2.0, =2.0.19 Source cves: CVE-2025-4760 Source advisory: OSV:GHSA-CMJC-QP7J-XGWR...

4.8CVSS5.8AI score0.00025EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2016-4760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP...

6.5CVSS7.4AI score0.0107EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 1:20 a.m.5 views

CVE-2010-4760

Open Ticket Request System OTRS before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket...

3.5CVSS6.1AI score0.00164EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:58 p.m.8 views

CVE-2005-4760

BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, when fullyDelegatedAuthorization is enabled for a servlet, does not cause servlet deployment to fail when failures occur in authorization or role providers, which might prevent the servlet from being "fully...

5.1CVSS6.9AI score0.0068EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2015-4760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown...

10CVSS5.6AI score0.09686EPSS
Exploits0References2
Circl
Circl
added 2023/09/21 12:30 p.m.2 views

CVE-2023-4760

creationtimestamp| type| source ---|---|--- 2023-09-21 12:30:57+00:00| seen| https://t.me/cibsecurity/70876...

9.8CVSS8.7AI score0.00376EPSS
Exploits1References1
NVD
NVD
added 2023/09/21 8:15 a.m.8 views

CVE-2023-4760

In Eclipse RAP versions from 3.0.0 up to and including 3.25.0, Remote Code Execution is possible on Windows when using the FileUpload component. The reason for this is a not completely secure extraction of the file name in the FileUploadProcessor.stripFileNameString name method. As soon as this...

9.8CVSS9AI score0.00376EPSS
Exploits1References2
OSV
OSV
added 2023/09/21 8:15 a.m.11 views

CVE-2023-4760

In Eclipse RAP versions from 3.0.0 up to and including 3.25.0, Remote Code Execution is possible on Windows when using the FileUpload component. The reason for this is a not completely secure extraction of the file name in the FileUploadProcessor.stripFileNameString name method. As soon as this...

9.8CVSS7.8AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/09/21 7:35 a.m.10 views

CVE-2023-4760 Remote Code Execution in Eclipse RAP on Windows

In Eclipse RAP versions from 3.0.0 up to and including 3.25.0, Remote Code Execution is possible on Windows when using the FileUpload component. The reason for this is a not completely secure extraction of the file name in the FileUploadProcessor.stripFileNameString name method. As soon as this...

7.6CVSS7.5AI score0.00376EPSS
Exploits1References2
CVE
CVE
added 2023/09/21 7:35 a.m.43 views

CVE-2023-4760

CVE-2023-4760 affects Eclipse RAP versions 3.0.0–3.25.0. The issue arises from the FileUploadProcessor.stripFileName(String name) path handling: when a "/" is found, the portion before it is discarded, but backslashes that appear later may be kept. This can allow Remote Code Execution on Windows ...

9.8CVSS9AI score0.00376EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2023/09/14 7:16 p.m.7 views

CVE-2018-4760

Rejected reason: This candidate is unused by its CNA...

6.6AI score
Exploits0
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.24 views

Debian: Security Advisory (DLA-283-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS4.7AI score0.09686EPSS
Exploits0References2
F5 Networks
F5 Networks
added 2023/02/21 6:15 p.m.61 views

K17173: OpenJDK vulnerability CVE-2015-4760

Security Advisory Description Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. CVE-2015-4760. Impact When your system is exploited by a locally authenticated attacker,...

10CVSS4.5AI score0.09686EPSS
Exploits0Affected Software20
Rows per page
Query Builder