Lucene search
+L

20587 matches found

OSV
OSV
added 2025/01/21 6:15 p.m.18 views

CVE-2025-24460

In JetBrains TeamCity before 2024.12.1 improper access control allowed to see Projects’ names in the agent pool...

4.3CVSS5.8AI score0.0027EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/21 6:15 p.m.25 views

CVE-2025-24460

In JetBrains TeamCity before 2024.12.1 improper access control allowed to see Projects’ names in the agent pool...

4.3CVSS0.0027EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/21 5:23 p.m.33 views

CVE-2025-24460

In JetBrains TeamCity before 2024.12.1 improper access control allowed to see Projects’ names in the agent pool...

4.3CVSS0.0027EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/21 5:23 p.m.90 views

CVE-2025-24460

CVE-2025-24460 affects JetBrains TeamCity up to version 2024.12.1, where an improper access control allowed viewing Projects’ names in the agent pool. The issue is caused by a lack of proper authorization checks on project visibility within the agent pool, as described across multiple sources (Re...

4.3CVSS6.8AI score0.0027EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
added 2025/01/21 9:41 a.m.798 views

Exploit for Server-Side Request Forgery in Havocframework Havoc

CVE-2024-41570 | Havoc C2 SSRF with RCE | Automated Reverse Sh...

9.8CVSS7.1AI score0.02909EPSS
SaveExploits6
CNNVD
CNNVD
added 2025/01/21 12:00 a.m.11 views

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from an improper access...

4.3CVSS6.8AI score0.0027EPSS
SaveExploits0References2
SUSE Linux
SUSE Linux
added 2025/01/20 6:49 a.m.6 views

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: Update to version 3.3.1611.0: CVE-2025-21613: Fixed argument injection via the URL field in github.com/go-git/go-git/v5 bsc1235575 Full changelog: https://github.com/aws/amazon-ssm-agent/compare/3.1.1260.0...3.3.1611.0 Patch Instruction...

8.1CVSS7.6AI score0.01287EPSS
SaveExploits0References4
OSV
OSV
added 2025/01/20 6:49 a.m.4 views

SUSE-SU-2025:0191-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: Update to version 3.3.1611.0: - CVE-2025-21613: Fixed argument injection via the URL field in github.com/go-git/go-git/v5 bsc1235575 Full changelog: https://github.com/aws/amazon-ssm-agent/compare/3.1.1260.0...3.3.1611.0...

9.8CVSS9.1AI score0.01287EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2025/01/18 12:00 a.m.4 views

amazon-ssm-agent-3.3.1611.0-1.1 on GA media (moderate)

amazon-ssm-agent-3.3.1611.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14658-1 Rating: moderate Cross-References: CVE-2025-21613 CVSS scores: CVE-2025-21613 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerabilit...

8.1CVSS8.4AI score0.01287EPSS
SaveExploits0
OSV
OSV
added 2025/01/17 3:15 a.m.9 views

CVE-2024-51462

IBM QRadar WinCollect Agent 10.0.0 through 10.1.12 could allow a remote attacker to inject XML data into parameter values due to improper input validation of assumed immutable data...

5.3CVSS5.8AI score0.0037EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/17 2:16 a.m.76 views

CVE-2024-51462

IBM QRadar WinCollect Agent (Windows) versions 10.0.0–10.1.12 are affected by CVE-2024-51462 due to improper input validation of assumed immutable data, enabling a remote attacker to inject XML data into parameter values and potentially modify data. Remediation is to upgrade to WinCollect Standal...

5.3CVSS4.3AI score0.0037EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/01/17 2:16 a.m.27 views

CVE-2024-51462 IBM QRadar WinCollect Agent data manipulation

IBM QRadar WinCollect Agent 10.0.0 through 10.1.12 could allow a remote attacker to inject XML data into parameter values due to improper input validation of assumed immutable data...

4CVSS0.0037EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/17 2:16 a.m.7 views

CVE-2024-51462 IBM QRadar WinCollect Agent data manipulation

IBM QRadar WinCollect Agent 10.0.0 through 10.1.12 could allow a remote attacker to inject XML data into parameter values due to improper input validation of assumed immutable data...

4CVSS4.3AI score0.0037EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/17 12:00 a.m.4 views

OPENSUSE-SU-2025:14658-1 amazon-ssm-agent-3.3.1611.0-1.1 on GA media

These are all security issues fixed in the amazon-ssm-agent-3.3.1611.0-1.1 package on the GA media of openSUSE Tumbleweed...

9.8CVSS9.8AI score0.01287EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/17 12:00 a.m.10 views

IBM QRadar WinCollect Agent 安全漏洞

IBM QRadar WinCollect Agent is an agent program from International Business Machines IBM that collects and sends Windows event logs. A security vulnerability exists in IBM QRadar WinCollect Agent versions 10.0.0 through 10.1.12, which arises from improper validation of inputs for assumed immutabl...

5.3CVSS6.5AI score0.0037EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/16 6:41 p.m.10 views

WordPress Team 118GROUP Agent plugin <= 1.6.0 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Mika in WordPress Plugin Team 118GROUP Agent versions = 1.6.0...

7.5CVSS7AI score0.00659EPSS
SaveExploits0Affected Software1
CVE
CVE
added 2025/01/16 6:48 a.m.50 views

CVE-2024-12226

CVE-2024-12226 affects Octopus Kubernetes: the Kubernetes worker/agent (versions 1–2) could log sensitive variables in clear-text to the Kubernetes script pod log. Root cause details beyond what’s stated are not provided. The issue has been fixed for both versions 1 and 2; apply the documented fi...

6.5CVSS6.5AI score0.0035EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/16 12:00 a.m.9 views

PT-2025-1787 · Octopus · Octopus Kubernetes Agent +1

Name of the Vulnerable Software and Affected Versions: Octopus Kubernetes worker or agent versions 1 through 2 Description: In affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be written to the Kubernetes script pod log in clear-text. This issue was identifie...

6.5CVSS6.9AI score0.0035EPSS
SaveExploits0References5
Microsoft KB
Microsoft KB
added 2025/01/14 8:00 a.m.35 views

Description of the security update for SharePoint Server Subscription Edition: January 14, 2025 (KB5002676)

None None...

7.8CVSS6.8AI score0.01807EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2025/01/14 8:00 a.m.48 views

Description of the security update for SharePoint Server 2019: January 14, 2025 (KB5002666)

None None...

7.8CVSS6.8AI score0.01807EPSS
SaveExploits0
Rows per page
Query Builder