Lucene search
+L

20607 matches found

RedhatCVE
RedhatCVE
added 2024/10/28 5:54 a.m.33 views

CVE-2020-26311

A flaw was found in Useragent package, a user agent parser for Node.js. Affected versions of this package contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. Mitigation Mitigation for this issue is either not available or the currently...

7.5CVSS6.2AI score0.00518EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/10/28 12:00 a.m.13 views

OpenText Operations Agent 安全漏洞

OpenText Operations Agent is a software from OpenText Canada that is used to manage and monitor OpenText products and solutions. A security vulnerability exists in OpenText Operations Agent, which is caused by improper input neutralization during web page generation and is susceptible to cross-si...

4.8CVSS6AI score0.00183EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/28 12:00 a.m.19 views

PT-2024-36507 · Opentext · Opentext Operations Agent

Name of the Vulnerable Software and Affected Versions: OpenText Operations Agent versions 12.20 through 12.26 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This could allow an attacker with local admin...

1.8CVSS6.7AI score0.00183EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/10/28 12:00 a.m.16 views

PT-2025-16022 · Ibm · Ibm Qradar Wincollect Agent

Name of the Vulnerable Software and Affected Versions: IBM QRadar WinCollect Agent versions 10.0 through 10.1.13 Description: The issue allows a remote attacker to cause a denial of service by interrupting an HTTP request, which could consume memory resources. Recommendations: For versions 10.0...

6.5CVSS6.5AI score0.00404EPSS
SaveExploits0References7
Wolfi
Wolfi
added 2024/10/24 10:42 p.m.21 views

GHSA-5VVG-PVHP-HV2M vulnerabilities

Vulnerabilities for packages: airflow...

5.3AI score
SaveExploits0
Wolfi
Wolfi
added 2024/10/24 10:15 p.m.38 views

CVE-2024-49750 vulnerabilities

Vulnerabilities for packages: airflow...

5.5CVSS5.1AI score0.00202EPSS
SaveExploits0
Hacker One
Hacker One
added 2024/10/23 6:23 p.m.25 views

AWS VDP: Non-Production API Endpoints for the bedrock-agent Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration

The non-production API endpoints for the bedrock-agent service failed to log to CloudTrail, resulting in silent permission enumeration. A total of 26 non-production endpoints were found that could be used with standard IAM credentials without generating CloudTrail logs. This vulnerability was...

7.1AI score
SaveExploits0
Veeam
Veeam
added 2024/10/23 12:00 a.m.33 views

How to Detect and Remove Separated Disks During Veeam Agent for Linux Restore

Purpose This article documents how to detect and clean up the restored disks of a Linux machine that used Logical Volume Manager LVM, was backed up with Veeam Agent for Linux , and restored to a hypervisor VM or cloud computing platform. This issue is documented in the following Veeam Agent for...

7.2AI score
SaveExploits0Affected Software1
OSV
OSV
added 2024/10/22 7:15 p.m.11 views

CVE-2024-48903

An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

7.8CVSS5.8AI score0.00746EPSS
SaveExploits0References2
NVD
NVD
added 2024/10/22 7:15 p.m.25 views

CVE-2024-48903

An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

7.8CVSS0.00746EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/10/22 6:28 p.m.17 views

CVE-2024-48903

An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

7.8CVSS7.2AI score0.00746EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/22 12:00 a.m.15 views

Trend Micro Deep Security Agent 安全漏洞

Trend Micro Deep Security Agent is a security solution from Trend Micro, Inc. that is primarily used to protect data and applications in servers, virtual machines, and cloud environments. A security vulnerability exists in versions prior to Trend Micro Deep Security Agent 20.0.1-17380, which stem...

7.8CVSS6.4AI score0.00746EPSS
SaveExploits0References4
Redos
Redos
added 2024/10/22 12:00 a.m.41 views

ROS-20241021-07

Vulnerability of ssh-agent of OpenSSH cryptographic protection tool is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service or execute arbitrary code...

7.1CVSS7.7AI score0.03422EPSS
SaveExploits1
Veeam
Veeam
added 2024/10/18 12:00 a.m.777 views

Error: Failed to verify [C:\windows\Veeam\Backup\Upload\VeeamDeploymentDll.dll] signature.

Challenge When Veeam Backup & Replication is attempting to install Veeam Agent for Microsoft Windows backup agents on a machine the procedure fails with: Unable to install backup agent: failed to connect to Error: Failed to verify C:\windows\Veeam\Backup\Upload\VeeamDeploymentDll.dll signature...

6.6AI score
SaveExploits0Affected Software2
Positive Technologies
Positive Technologies
added 2024/10/17 12:00 a.m.12 views

PT-2024-33260 · Trend Micro · Trend Micro Deep Security Agent

Name of the Vulnerable Software and Affected Versions: Trend Micro Deep Security Agent version 20 Description: An improper access control vulnerability could allow a local attacker to escalate privileges on affected installations. To exploit this issue, an attacker must first obtain the ability t...

7.8CVSS6.5AI score0.00746EPSS
SaveExploits0References10
CNVD
CNVD
added 2024/10/17 12:00 a.m.48 views

Microsoft Azure Monitor Agent Elevation of Privilege Vulnerability

Microsoft Azure Monitor Agent is a lightweight agent program that can be installed on servers or virtual machines in Azure or local environments. An elevation of privilege vulnerability exists in Microsoft Azure Monitor Agent, which is caused by an error in the Monitor Agent component. An attacke...

7.1CVSS6.7AI score0.00649EPSS
SaveExploits0References1
Chainguard
Chainguard
added 2024/10/16 1:15 p.m.24 views

CVE-2023-32192 vulnerabilities

Vulnerabilities for packages: rancher-agent...

8.3CVSS7.2AI score0.00352EPSS
SaveExploits0
Chainguard
Chainguard
added 2024/10/16 1:15 p.m.31 views

CVE-2023-32193 vulnerabilities

Vulnerabilities for packages: rancher-webhook...

8.3CVSS7.7AI score0.0044EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/10/16 12:00 a.m.10 views

Rancher 信任管理问题漏洞

Rancher is an open source container management platform from Rancher Open Source in the United States, built for organizations deploying containers in production environments. Rancher suffers from a trust management issue vulnerability that stems from the ability to hijack a Rancher agent via a...

8CVSS7.7AI score0.00423EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/15 5:33 p.m.18 views

GHSA-FMJ7-7GFW-64PG Agent Dart is missing certificate verification checks

Certificate verification in lib/agent/certificate.dart has been found to contain two issues: - During the delegation verification in checkDelegation function the canisterranges aren't verified. The impact of not checking the canisterranges is that a subnet can sign canister responses in behalf of...

7.6CVSS6.4AI score0.00368EPSS
SaveExploits0References6
Rows per page
Query Builder