Lucene search
K

33 matches found

Circl
Circl
added 2026/05/06 10:3 a.m.3 views

CVE-2026-7457

creationtimestamp| type| source ---|---|--- 2026-05-06 10:03:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6h5tch5u2i 2026-05-08 22:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlerxl24tv2s...

6.4CVSS5.8AI score0.00063EPSS
Exploits0References2
OSV
OSV
added 2026/03/04 5:26 a.m.0 views

MINI-7457-CF5Q-CVV6

Bulletin has no description...

7.5CVSS5.9AI score0.0002EPSS
Exploits0
OSV
OSV
added 2026/01/29 12:49 a.m.1 views

CGA-7457-JCX7-8HRP

Bulletin has no description...

10CVSS5.8AI score0.30947EPSS
Exploits4
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:0 a.m.4 views

RockyLinux 10 : exiv2 (RLSA-2025:7457)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7457 advisory. exiv2: Use After Free in Exiv2 CVE-2025-26623 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note that...

9.8CVSS6.5AI score0.01101EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/06/27 12:0 a.m.2 views

Oracle Linux 10 : exiv2 (ELSA-2025-7457)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7457 advisory. 0.28.3-3.2 - Revert: remove rpath patch Resolves: RHEL-80106 - Fix CVE-2025-26623 exiv2: Use After Free Resolves: RHEL-80106 Tenable has extracted the precedin...

9.8CVSS6.5AI score0.01101EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/06/12 11:21 p.m.3 views

CVE-2024-7457

The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model. Instead of validating the client's authorization reference, the helper invokes AuthorizationCopyRights using its own privileged context root, effectively authorizing itself...

7.8CVSS7.4AI score0.00086EPSS
Exploits0References1
NVD
NVD
added 2025/06/11 12:15 a.m.4 views

CVE-2024-7457

The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model. Instead of validating the client's authorization reference, the helper invokes AuthorizationCopyRights using its own privileged context root, effectively authorizing itself...

7.8CVSS0.00086EPSS
Exploits0References1
Circl
Circl
added 2025/06/10 11:33 p.m.7 views

CVE-2024-7457

creationtimestamp| type| source ---|---|--- 2025-06-10 23:33:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18021 2025-06-11 02:15:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrcdljfnay2p...

7.8CVSS4.8AI score0.00086EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/06/10 11:19 p.m.19 views

CVE-2024-7457 macOS Stash network-management utility: Unauthorized Manipulation of System Network Preferences

The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model. Instead of validating the client's authorization reference, the helper invokes AuthorizationCopyRights using its own privileged context root, effectively authorizing itself...

7.8CVSS7AI score0.00086EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/10 11:19 p.m.22 views

CVE-2024-7457 macOS Stash network-management utility: Unauthorized Manipulation of System Network Preferences

The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model. Instead of validating the client's authorization reference, the helper invokes AuthorizationCopyRights using its own privileged context root, effectively authorizing itself...

7.8CVSS0.00086EPSS
Exploits0References1
CVE
CVE
added 2025/06/10 11:19 p.m.54 views

CVE-2024-7457

The CVE-2024-7457 entry concerns ws.stash.app.mac.daemon.helper on macOS. Affected component is the ws.stash.app.mac.daemon.helper, which improperly uses macOS AuthorizationCopyRights() with its own privileged context (root) instead of validating the client’s authorization reference. This allows ...

7.8CVSS7.5AI score0.00086EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/05/07 12:0 a.m.4 views

RockyLinux 9 : mod_jk bug fix update (Moderate) (RLSA-2024:7457)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:7457 advisory. The modjk module is an Apache HTTP Server plug-in that enables the Apache HTTP Server to connect with the Apache Tomcat servlet engine. Bug Fixes: Rebase to...

5.9CVSS6AI score0.00039EPSS
Exploits0References3
OSV
OSV
added 2025/04/24 12:40 p.m.2 views

USN-7457-1 openssh vulnerability

It was discovered that OpenSSH incorrectly handled the DisableForwarding directive. The directive would fail to disable X11 and agent forwarding, contrary to documentation and expectations...

4.3CVSS7.1AI score0.00226EPSS
Exploits0References2
OSV
OSV
added 2025/01/30 1:23 p.m.8 views

CGA-7457-3CRG-22F8

Bulletin has no description...

3.7CVSS4.5AI score0.00146EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2022/11/08 12:0 a.m.155 views

RHEL 8 : container-tools:rhel8 (RHSA-2022:7457)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7457 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: golang:...

7.8CVSS7.5AI score0.00464EPSS
Exploits2References62
Hacker One
Hacker One
added 2022/01/04 10:0 p.m.27 views

PlayStation: Use-after-free in setsockopt IPV6_2292PKTOPTIONS (CVE-2020-7457)

The PS5 is vulnerable to https://hackerone.com/reports/826026 which easily grants kernel access to an attacker. This vulnerability had been reported by me for the PS4 2 years ago when the PS5 did not yet exist, thus this should be considered as a new report and not a duplicate. I was able to use...

6.8CVSS1.4AI score0.44579EPSS
Exploits4
OSV
OSV
added 2020/07/09 2:15 p.m.0 views

CVE-2020-7457

In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p11, missing synchronization in the IPV62292PKTOPTIONS socket option set handler contained a race condition allowing a malicious application to modify memory...

8.1CVSS5.9AI score
Exploits0References3
CVE
CVE
added 2020/07/09 1:46 p.m.146 views

CVE-2020-7457

CVE-2020-7457 concerns a missing synchronization in the FreeBSD IPV6_2292PKTOPTIONS set handler (setsockopt), causing a race against freed memory in the ip6_pktopts path. Impact described as potential memory corruption and privilege escalation. Affected lines include FreeBSD stable/12 and stable/...

8.1CVSS8AI score0.44579EPSS
Exploits4References3Affected Software1
FreeBSD Advisory
FreeBSD Advisory
added 2020/07/08 12:0 a.m.12 views

FreeBSD-SA-20:20.ipv6

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:20.ipv6 Security Advisory The FreeBSD Project Topic: IPv6 socket option race condition and use after free Category: core Module: network Announced: 2020-07-0...

8.1CVSS7.2AI score0.44579EPSS
Exploits4
NVD
NVD
added 2017/04/14 2:59 p.m.9 views

CVE-2017-7457

XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure...

5CVSS5.1AI score0.00472EPSS
Exploits5References3
Rows per page
Query Builder