Lucene search
K

115 matches found

The Hacker News
The Hacker News
added 2026/05/04 4:34 p.m.5 views

Progress Patches Critical MOVEit Automation Bug Enabling Authentication Bypass

Progress Software has released updates to address two security flaws in MOVEit Automation, including a critical bug that could result in an authentication bypass. MOVEit Automation formerly Central is a secure, server-based managed file transfer MFT solution used to schedule and automate file...

9.8CVSS5.9AI score0.00228EPSS
Exploits0
Circl
Circl
added 2026/04/30 12:52 p.m.0 views

CVE-2026-5174

creationtimestamp| type| source ---|---|--- 2026-04-30 12:52:32+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-410 2026-04-30 17:30:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq5dxnf622p 2026-04-30 17:43:25+00:00| seen|...

8.8CVSS6AI score0.00135EPSS
Exploits0References16
Positive Technologies
Positive Technologies
added 2026/01/28 12:0 a.m.2 views

PT-2026-5174

Explorance Blue versions prior to 8.14.13 contain an authenticated remote file download vulnerability in a web service component. In default configurations, this flaw can be leveraged to achieve remote code execution...

9.9CVSS6.2AI score0.0046EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2023-5174

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free an...

9.8CVSS8.2AI score0.00445EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2025/05/26 9:30 a.m.0 views

kolibri-light (>=0.1.1 <=0.3.2) potentially affected by CVE-2025-5174 via pypickle (=1.1.0)

pypickle PYPI version =1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypickle and may be impacted: - kolibri-light =0.1.1, =0.3.2 Source cves: CVE-2025-5174 Source advisory: OSV:GHSA-5QWJ-342R-H886...

7.8CVSS6AI score0.00106EPSS
Exploits1
Circl
Circl
added 2025/05/26 7:46 a.m.10 views

CVE-2025-5174

creationtimestamp| type| source ---|---|--- 2025-05-26 07:46:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17534 2025-05-26 15:07:31+00:00| seen| https://bsky.app/profile/cecallihelper.bsky.social/post/3lq3hbcard22y...

7.8CVSS5.3AI score0.00106EPSS
Exploits1References2
vulnersOsv
vulnersOsv
added 2025/05/26 7:15 a.m.2 views

kolibri-light (>=0.1.1 <=0.3.2) potentially affected by CVE-2025-5174 via pypickle (=1.1.0)

pypickle PYPI version =1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypickle and may be impacted: - kolibri-light =0.1.1, =0.3.2 Source cves: CVE-2025-5174 Source advisory: OSV:PYSEC-2025-45...

7.8CVSS6AI score0.00106EPSS
Exploits1
Vulnrichment
Vulnrichment
added 2025/05/26 7:0 a.m.5 views

CVE-2025-5174 erdogant pypickle pypickle.py load deserialization

A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the function load of the file pypickle/pypickle.py. The manipulation leads to deserialization. Local access is required to approach this attack. The exploit has been disclosed to th...

5.3CVSS5.3AI score0.00106EPSS
Exploits1References7
CVE
CVE
added 2025/05/26 7:0 a.m.44 views

CVE-2025-5174

CVE-2025-5174 affects the erdogant pypickle package up to version 1.1.5. The vulnerability is in the load function of pypickle/pypickle.py, enabling deserialization with local access. The exploit has been disclosed, and upgrading to version 2.0.0 is reported to address the issue (patch 14b4cae704...

7.8CVSS5.3AI score0.00106EPSS
Exploits1References7Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 4:56 a.m.6 views

CVE-2013-5174

Integer signedness error in the kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service system crash via a crafted tty read operation...

4.9CVSS5.9AI score0.00044EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:42 a.m.7 views

CVE-2012-5174

The KYOCERA AH-K3001V, AH-K3002V, WX300K, WX310K, WX320K, and WX320KR devices allow remote attackers to cause a denial of service persistent reboot via an e-mail message in an invalid format...

7.8CVSS7.1AI score0.00099EPSS
Exploits0References1
Circl
Circl
added 2025/02/24 4:17 p.m.0 views

CVE-2024-5174

creationtimestamp| type| source ---|---|--- 2025-02-24 16:17:15+00:00| seen| https://t.me/cvedetector/18794...

5.3CVSS4.8AI score0.00152EPSS
Exploits0References1
CVE
CVE
added 2025/02/24 1:32 p.m.51 views

CVE-2024-5174

CVE-2024-5174 affects Perforce Gliffy and describes a flaw in the reset functionality that results in broken authentication. The available connected data identifies Gliffy as the affected software and the underlying issue as an authentication problem during reset, but does not provide concrete de...

5.3CVSS7.1AI score0.00152EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.12 views

openSUSE: Security Advisory for MozillaThunderbird (SUSE-SU-2023:4016-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.6AI score0.04976EPSS
Exploits3References4
Tenable Nessus
Tenable Nessus
added 2023/10/10 12:0 a.m.37 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : MozillaThunderbird (SUSE-SU-2023:4016-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4016-1 advisory. - A compromised content process could have provided malicious data to FilterNodeD2D1 resulting i...

9.8CVSS8.9AI score0.04976EPSS
Exploits3References17
OpenVAS
OpenVAS
added 2023/10/02 12:0 a.m.11 views

SUSE: Security Advisory (SUSE-SU-2023:3898-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.3AI score0.00704EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2023/10/02 12:0 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2023:3899-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.3AI score0.00704EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2023/09/30 12:0 a.m.26 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : MozillaFirefox (SUSE-SU-2023:3898-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3898-1 advisory. - A compromised content process could have provided malicious data to FilterNodeD2D1 resulting i...

9.8CVSS8.2AI score0.00704EPSS
Exploits0References13
OpenVAS
OpenVAS
added 2023/09/28 12:0 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2023:3837-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.3AI score0.00704EPSS
Exploits0References5
OSV
OSV
added 2023/09/27 5:27 p.m.6 views

SUSE-SU-2023:3837-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.3.0 ESR MFSA 2023-42, bsc1215575: Security fixes: - CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1 bmo1846683. - CVE-2023-5169: Out-of-bounds write in PathOps bmo1846685. - CVE-2023-517...

9.8CVSS8.7AI score0.00704EPSS
Exploits0References8
Rows per page
Query Builder