Lucene search
K

54 matches found

RedhatCVE
RedhatCVE
added 2026/05/26 8:15 p.m.7 views

CVE-2026-9497

A flaw has been found in changmingxie tcc-transaction up to 2.1.0. This issue affects the function Fastjson.parseObject of the component Fastjson AutoType REST API. This manipulation causes deserialization. It is possible to initiate the attack remotely. The vendor was contacted early about this...

6.5CVSS6.3AI score0.00045EPSS
Exploits0References1
OSV
OSV
added 2026/04/25 4:46 p.m.2 views

MINI-CJ5Q-9497-C66P

Bulletin has no description...

7.5CVSS5AI score0.00077EPSS
Exploits1
Circl
Circl
added 2026/04/01 3:25 p.m.1 views

CVE-2025-9497

creationtimestamp| type| source ---|---|--- 2026-04-01 15:25:32+00:00| seen| Telegram/4zYpYE5e92FkC7Z53Af8gCedtL6FpkxFD5yjbQn9BVECOM...

9.8CVSS4.8AI score0.00014EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.1 views

MiracleLinux 7 : freeradius-3.0.13-10.el7 (AXSA:2019-3883:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3883:01 advisory. Security Fix - FreeRADIUSCVE-2019-9497 Dragonblood CVE-2019-11234 - FreeRADIUSCVE-2019-9498CVE-2019-9499 Dragonblood CVE-2019-11235...

9.8CVSS6.5AI score0.25852EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 5:58 a.m.2 views

CVE-2015-9497

The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php...

8.8CVSS6.2AI score0.00411EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 4:35 a.m.3 views

CVE-2024-9497

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress 4 SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

8.6CVSS8AI score0.0001EPSS
Exploits0References1
NVD
NVD
added 2025/01/24 3:15 p.m.4 views

CVE-2024-9497

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress 4 SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

8.6CVSS0.0001EPSS
Exploits0References1
Circl
Circl
added 2025/01/24 2:43 p.m.3 views

CVE-2024-9497

creationtimestamp| type| source ---|---|--- 2025-01-24 14:43:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113883860197424338 2025-01-24 15:04:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2910 2025-01-24 15:49:00+00:00| seen|...

8.6CVSS5.8AI score0.0001EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/01/24 2:38 p.m.7 views

CVE-2024-9497 Uncontrolled search path can lead to DLL hijacking in USBXpress 4 SDK installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress 4 SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

8.6CVSS9AI score0.0001EPSS
Exploits0References1
CVE
CVE
added 2025/01/24 2:38 p.m.61 views

CVE-2024-9497

The CVE-2024-9497 entry describes DLL hijacking in the USBXpress 4 SDK installer caused by an uncontrolled search path. The vulnerability enables local privilege escalation and arbitrary code execution when the impacted installer is run. Connected sources corroborate the issue across Red Hat, NVD...

8.6CVSS9AI score0.0001EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/24 2:38 p.m.16 views

CVE-2024-9497 Uncontrolled search path can lead to DLL hijacking in USBXpress 4 SDK installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress 4 SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

8.6CVSS0.0001EPSS
Exploits0References1
OSV
OSV
added 2023/08/31 12:15 p.m.1 views

BELL-CVE-2019-9497 CVE-2019-9497 does not affect BellSoft software

Bulletin has no description...

8.1CVSS7.3AI score0.11468EPSS
Exploits0References1
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.9 views

SA44525 - 2020-07: Out-of-Cycle Advisory: Multiple Vulnerabilities in Apache Guacamole Software

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. This advisory provides information about the Apache Guacamole HTML5 Access vulnerabilities highlighted in CVE-2020-9498 and CVE-2020-9497. If a end user connects to a malicious or...

6.7CVSS7AI score0.00107EPSS
Exploits0
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.29 views

Mageia: Security Advisory (MGASA-2021-0272)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS5.8AI score0.00633EPSS
Exploits0References8
Rosalinux
Rosalinux
added 2021/07/02 6:21 p.m.40 views

Advisory ROSA-SA-2021-1998

Software: wpasupplicant 2.6 OS: Cobalt 7.9 CVE-ID: CVE-2017-13084 CVE-Crit: MEDIUM CVE-DESC: Wi-Fi Protected Access WPA and WPA2 allows the Station-to-Station-Link STSL temporary key STK to be reassigned during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or...

8.1CVSS7.2AI score0.11468EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2021/01/04 12:0 a.m.40 views

Fedora 33 : guacamole-server (2020-640645e518)

Updated SPEC file and rebuilt for new dependencies. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

6.7CVSS6.4AI score0.00107EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2021/01/04 12:0 a.m.42 views

Fedora 32 : guacamole-server (2020-bfde0ab889)

Updated SPEC file and rebuilt for new dependencies. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

6.7CVSS6.4AI score0.00107EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2020/11/07 12:0 a.m.27 views

Debian: Security Advisory (DLA-2435-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.7CVSS6.8AI score0.00107EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2020/09/04 12:0 a.m.39 views

Slack < 4.4.0 Remote Code Execution (Deprecated)

This plugin has been deprecated due to server side fixes. The version of the Slack Desktop installed on the remote host is prior to 4.4.0. It is, therefore, affected by a Remote Code Execution vulnerability. With any in-app redirect - logic/open redirect, HTML or javascript injection, it is...

8.1AI score
Exploits0References3
OSV
OSV
added 2020/07/02 1:15 p.m.29 views

CVE-2020-9497

Apache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via static virtual channels. If a userconnects to a malicious or compromised RDP server, specially-craftedPDUs could result in disclosure of information within the memory ofthe guacd process handling the...

4.4CVSS6.4AI score
Exploits0References11
Rows per page
Query Builder