Lucene search
+L

13199 matches found

CNNVD
CNNVD
added 2025/07/23 12:0 a.m.7 views

IBM Operations Analytics-Log Analysis 安全漏洞

IBM Operations Analytics-Log Analysis is a suite of semi-structured data analysis solutions from International Business Machines IBM. The product is primarily used for application log analysis and problem diagnosis, among other things. A security vulnerability exists in IBM Operations Analytics-L...

6.2CVSS6.3AI score0.00115EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/23 12:0 a.m.21 views

PT-2025-30562 · Ibm · Ibm Smartcloud Analytics Log Analysis

Name of the Vulnerable Software and Affected Versions: IBM SmartCloud Analytics - Log Analysis versions 1.3.7.0 through 1.3.8.2 Description: IBM SmartCloud Analytics - Log Analysis is susceptible to a local denial of service due to improper validation of specified input. Recommendations: IBM...

6.2CVSS6.2AI score0.00115EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/07/23 12:0 a.m.15 views

PT-2025-30563 · Ibm · Ibm Smartcloud Analytics Log Analysis

Name of the Vulnerable Software and Affected Versions: IBM SmartCloud Analytics - Log Analysis versions 1.3.7.0 through 1.3.8.2 Description: IBM SmartCloud Analytics - Log Analysis is susceptible to HTTP header injection due to inadequate validation of input provided through the HOST headers. Thi...

5.4CVSS6.6AI score0.00183EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/07/23 12:0 a.m.7 views

IBM Operations Analytics-Log Analysis 安全漏洞

IBM Operations Analytics-Log Analysis is a suite of semi-structured data analysis solutions from International Business Machines IBM. The product is primarily used for application log analysis and problem diagnosis, among other things. A security vulnerability exists in IBM Operations Analytics-L...

6.1CVSS6.2AI score0.00183EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/23 12:0 a.m.11 views

PT-2025-30564 · Ibm · Ibm Smartcloud Analytics Log Analysis

Name of the Vulnerable Software and Affected Versions: IBM SmartCloud Analytics - Log Analysis versions 1.3.7.0 through 1.3.8.2 Description: IBM SmartCloud Analytics - Log Analysis is susceptible to a security bypass that allows a local, authenticated attacker to manipulate data by circumventing...

5.5CVSS6AI score0.00119EPSS
SaveExploits0References5
CNVD
CNVD
added 2025/07/23 12:0 a.m.8 views

WordPress Profiler-What Slowing Down Your WP Missing Authorization Vulnerability

WordPress Profiler-What Slowing Down Your WP is a plugin for checking the speed of your website, mainly used to analyze the impact of plugins on the loading speed of your website. WordPress Profiler-What Slowing Down Your WP suffers from a missing authorization vulnerability that can be exploited...

6.5CVSS6.8AI score0.00203EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/07/23 12:0 a.m.10 views

The vulnerability of the Java-Script templater Nunjacks in the PROTECH system for analysis and monitoring of production processes allows attackers to execute arbitrary code and gain increased privileges.

The vulnerability of the Java-Script templater Nunjacks in the PROTECH production analysis and monitoring system exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and gain increased privileges...

9.9CVSS6AI score
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/07/23 12:0 a.m.8 views

IBM Operations Analytics-Log Analysis 安全漏洞

IBM Operations Analytics-Log Analysis is a suite of semi-structured data analysis solutions from International Business Machines IBM. The product is primarily used for application log analysis and problem diagnosis, among other things. A security vulnerability exists in IBM Operations Analytics-L...

5.5CVSS6.5AI score0.00119EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/07/23 12:0 a.m.13 views

The vulnerability of the dynamic_analysis.html component in the Mobile Security Framework (MobSF), a security research framework for mobile applications, allows an attacker to execute cross-site scripting attacks.

The vulnerability of the dynamicanalysis.htm component in the Mobile Security Framework MobSF for mobile application security research is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a remote attacker to execute cross-site scripting...

8.5CVSS5.4AI score0.0038EPSS
SaveExploits1References4Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/07/22 6:7 p.m.9 views

Security Bulletin: Host Header Injection Vulnerability in IBM Operations Analytics - Log Analysis (CVE-2024-40686)

Summary Host header vulnerability in IBM Operations Analytics - Log Analysis allows remote attackers to execute scripts within the application context via remote file inclusion. This has been addressed. Vulnerability Details CVEID:CVE-2024-40686 DESCRIPTION: IBM SmartCloud Analytics - Log Analysi...

6.1CVSS6.7AI score0.00183EPSS
SaveExploits0Affected Software1
Circl
Circl
added 2025/07/22 5:56 p.m.36 views

CVE-2022-44693

creationtimestamp| type| source ---|---|--- 2025-07-22 17:56:06+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3lul3b7pvly2r 2025-07-23 02:38:03+00:00| seen| https://bsky.app/profile/secqube.com/post/3lulygkmf7m2l 2026-07-26 02:02:34+00:00| seen| https://t.me/EchelonEyes/975...

8.8CVSS7.2AI score0.01941EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2025/07/22 4:57 p.m.18 views

Security Bulletin: A Function Level Control vulnerability in IBM Operations Analytics - Log Analysis (CVE-2024-41751)

Summary A privilege escalation vulnerability exists in IBM Operations Analytics - Log Analysis. It allows low-privilege users to change the password of high-privilege accounts through intercepting the request. This has been addressed. Vulnerability Details CVEID:CVE-2024-41751 DESCRIPTION: IBM...

5.5CVSS6.9AI score0.00119EPSS
SaveExploits0Affected Software1
Packet Storm News
Packet Storm News
added 2025/07/22 12:0 a.m.10 views

Zeek 7.0.9

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...

7.2AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/07/22 12:0 a.m.8 views

Explainable Vulnerability Detection in C/C++ Using Edge-Aware Graph Attention Networks

Detecting security vulnerabilities in source code remains challenging, particularly due to class imbalance in real-world datasets where vulnerable functions are under-represented. Existing learning-based methods often optimise for recall, leading to high false positive rates and reduced usability...

7.2AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/07/22 12:0 a.m.8 views

From Text to Actionable Intelligence: Automating STIX Entity and Relationship Extraction

Sharing methods of attack and their effectiveness is a cornerstone of building robust defensive systems. Threat analysis reports, produced by various individuals and organizations, play a critical role in supporting security operations and combating emerging threats. To enhance the timeliness and...

7AI score
SaveExploits0
OSV
OSV
added 2025/07/21 8:1 p.m.9 views

MAL-2025-6213 Malicious code in donotinstallthisistest6 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 272225f1adba5810796fd9c194041e72e5fcdcc032fa296a701bcc480b37bfcb Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

7.4AI score
SaveExploits0References1
Wired Threat Level
Wired Threat Level
added 2025/07/21 4:54 p.m.8 views

How WIRED Analyzed the Epstein Video

On this episode of Uncanny Valley, we dive into the differences between what the US government said about a Jeffrey Epstein video it released and the story told by its metadata...

7.3AI score
SaveExploits0
Hacker One
Hacker One
added 2025/07/21 3:17 p.m.24 views

curl: on the implications of permitting procedural culling

Good day. My name is Lorentso Youriévitch Bogdanov. It has come to my attention that you are in need of higher-quality code review. Rest assured that you are not alone in noticing a certain degree of brain-drain in this field. As you can perhaps imagine, the recent shortage of qualified hackers a...

6.7AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/07/21 1:2 p.m.234 views

Exploit for Type Confusion in Google Chrome

CVE-2024-4947 A in-the-wild V8 type confusion bug. This repo...

9.6CVSS10AI score0.15236EPSS
SaveExploits2
GithubExploit
GithubExploit
added 2025/07/20 3:16 p.m.237 views

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

CVE-2025-32463 Detection Framework A comprehensive security m...

9.3CVSS9.9AI score0.56337EPSS
SaveExploits71
Rows per page
Query Builder