Lucene search
+L

7872 matches found

Cvelist
Cvelist
•added 2026/01/28 11:46 p.m.•47 views

CVE-2025-15344 Tanium addressed a SQL injection vulnerability in Asset.

Tanium addressed a SQL injection vulnerability in Asset...

6.3CVSS0.00292EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/28 11:46 p.m.•18 views

EUVD-2025-206520

Tanium addressed a SQL injection vulnerability in Asset...

6.3CVSS5.9AI score0.00292EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/28 11:46 p.m.•8 views

CVE-2025-15344 Tanium addressed a SQL injection vulnerability in Asset.

Tanium addressed a SQL injection vulnerability in Asset...

6.3CVSS5.8AI score0.00292EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/28 11:46 p.m.•39 views

CVE-2025-15344

Technical details are not publicly available in the provided documents. Monitor for updates from Tanium and CVE trackers to obtain affected versions, root cause, and remediation specifics.

8.8CVSS5.8AI score0.00292EPSS
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/28 7:45 p.m.•17 views

Malicious code in epic-asset-uploader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2cb990940a69aa54175e17a56f993e9c380e4eb2bbe8fc9f6e86c09b252464 The package epic-asset-uploader was found to contain malicious code. Source: ghsa-malware...

5.4AI score
SaveExploits0References1
OSV
OSV
•added 2026/01/28 7:45 p.m.•12 views

MAL-2026-594 Malicious code in epic-asset-uploader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2cb990940a69aa54175e17a56f993e9c380e4eb2bbe8fc9f6e86c09b252464 The package epic-asset-uploader was found to contain malicious code. Source: ghsa-malware...

5.6AI score
SaveExploits0References1
Fedora
Fedora
•added 2026/01/28 1:26 a.m.•20 views

[SECURITY] Fedora 42 Update: assimp-5.3.1-6.fc42

Assimp, the Open Asset Import Library, is a free library to import various well-known 3D model formats into applications. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems, but is not limited to these applications...

7.8CVSS6.6AI score0.00243EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/01/28 12:00 a.m.•27 views

PT-2026-5239

Name of the Vulnerable Software and Affected Versions Tanium Asset affected versions not specified Description Tanium Asset contains a SQL injection flaw. This issue could potentially allow an attacker to manipulate database queries through crafted input. Recommendations At the moment, there is n...

8.8CVSS5.7AI score0.00292EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/01/28 12:00 a.m.•29 views

SolarWinds Web Help Desk security vulnerabilities

SolarWinds Web Help Desk is a service desk and asset management software provided by the American company SolarWinds. This software supports centralized knowledge bases, IT asset management, project and task management functions. There is a security vulnerability in SolarWinds Web Help Desk, whic...

9.8CVSS6AI score0.60642EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2026/01/27 7:37 p.m.•13 views

CVE-2026-24473

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, Serve static Middleware for the Cloudflare Workers adapter contains an information disclosure vulnerability that may allow attackers to read arbitrary keys from the Workers environment...

6.3CVSS6AI score0.00466EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2026/01/27 7:37 p.m.•42 views

CVE-2026-24473 Hono has an Arbitrary Key Read in Serve static Middleware (Cloudflare Workers Adapter)

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, Serve static Middleware for the Cloudflare Workers adapter contains an information disclosure vulnerability that may allow attackers to read arbitrary keys from the Workers environment...

6.3CVSS0.00466EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/01/27 7:09 p.m.•28 views

Hono has an Arbitrary Key Read in Serve static Middleware (Cloudflare Workers Adapter)

Summary Serve static Middleware for the Cloudflare Workers adapter contains an information disclosure vulnerability that may allow attackers to read arbitrary keys from the Workers environment. Improper validation of user-controlled paths can result in unintended access to internal asset keys...

6.3CVSS6.2AI score0.00466EPSS
SaveExploits0References5Affected Software1
Snyk
Snyk
•added 2026/01/27 7:09 p.m.•9 views

Incorrect Authorization

Overview org.webjars.npm:hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to Incorrect Authorization via improper validation of user-supplied paths in the serve-static middleware. An attacker can access internal asset keys by crafting requests that...

6.3CVSS5.8AI score0.00466EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/26 12:00 a.m.•16 views

Tanium Discover security vulnerabilities

Tanium Discover is an asset scanning module developed by the American company Tanium. Tanium Discover has a security vulnerability, which stems from uncontrolled resource consumption...

6.5CVSS5.8AI score0.00392EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/26 12:00 a.m.•23 views

Tanium Discover security vulnerabilities

Tanium Discover is an asset scanning module developed by the American company Tanium. Tanium Discover has a security vulnerability, which stems from improper input validation...

4.9CVSS5.8AI score0.00436EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/23 11:10 a.m.•17 views

OESA-2026-1217 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability was found in Open...

5.5CVSS5AI score0.00255EPSS
SaveExploits1References2
Microsoft Secure
Microsoft Secure
•added 2026/01/21 2:33 p.m.•23 views

A new era of agents, a new era of posture

The rise of AI Agents marks one of the most exciting shifts in technology today. Unlike traditional applications or cloud resources, these agents are not passive components- they reason, make decisions, invoke tools, and interact with other agents and systems on behalf of users. This autonomy...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/01/21 2:19 p.m.•15 views

CVE-2025-14377

A security issue was discovered within the legacy Ansible playbook component of Verve Asset Manager, caused by plaintext secrets incorrectly stored when a playbook is running. This component has been retired and has been optional since the 1.36 release in 2024...

8.8CVSS5.3AI score0.00192EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/21 1:21 p.m.•16 views

CVE-2025-14376

A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext secrets stored in environment variables on the ADI server. This component has been retired and has been optional since the 1.36 release in 2024...

8.6CVSS5.3AI score0.00134EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/21 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2025-3950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowe...

3.5CVSS5.4AI score0.0027EPSS
SaveExploits0References2
Rows per page
Query Builder