Lucene search
+L

6376 matches found

Vulnrichment
Vulnrichment
added 2026/02/03 4:52 p.m.5 views

CVE-2019-25264 Snipe-IT Open Source Asset Management 4.7.5 - Persistent Cross-Site Scripting

Snipe-IT 4.7.5 contains a persistent cross-site scripting vulnerability that allows authorized users to upload malicious SVG files with embedded JavaScript. Attackers can craft SVG files with script tags to execute arbitrary JavaScript when the accessory is viewed by other users...

6.4CVSS5.4AI score0.00243EPSS
SaveExploits0References4
Snyk
Snyk
added 2026/02/03 7:48 a.m.5 views

Malicious Package

Overview epic-asset-uploader is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
OSV
OSV
added 2026/01/30 12:28 p.m.19 views

OESA-2026-1267 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability, which was classifie...

5.5CVSS4.9AI score0.00262EPSS
SaveExploits3References4
Qualys Blog
Qualys Blog
added 2026/01/29 5:0 p.m.12 views

Top 10 Cloud Compliance Tools for Enterprise Security and Audit Readiness in 2026

Key Takeaways Cloud compliance has shifted from periodic audits to a continuous operating requirement as hybrid and multi-cloud environments change faster than traditional controls can keep pace. Modern cloud compliance solutions provide continuous, automated compliance monitoring across AWS,...

6AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/01/29 3:55 p.m.195 views

Sentinel-X

!Licen...

5.9AI score
SaveExploits0
The Hacker News
The Hacker News
added 2026/01/29 11:55 a.m.10 views

Survey of 100+ Energy Systems Reveals Critical OT Cybersecurity Gaps

A study by OMICRON has revealed widespread cybersecurity gaps in the operational technology OT networks of substations, power plants, and control centers worldwide. Drawing on data from more than 100 installations, the analysis highlights recurring technical, organizational, and functional issues...

7.8CVSS6.1AI score0.74497EPSS
SaveExploits7
OSV
OSV
added 2026/01/29 12:48 a.m.6 views

CGA-RX73-RR3H-9383

Bulletin has no description...

6.5CVSS5.8AI score0.00455EPSS
SaveExploits0
OSV
OSV
added 2026/01/29 12:16 a.m.8 views

CVE-2025-15344

Tanium addressed a SQL injection vulnerability in Asset...

8.8CVSS5.8AI score0.00265EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/29 12:16 a.m.17 views

CVE-2025-15344

Tanium addressed a SQL injection vulnerability in Asset...

8.8CVSS0.00265EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/29 12:0 a.m.26 views

Tanium Asset security vulnerabilities

Tanium Asset is an IT asset inventory and management software developed by the American company Tanium. Tanium Asset has a security vulnerability that can be exploited by SQL injection attacks...

8.8CVSS5.8AI score0.00265EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/28 11:46 p.m.7 views

EUVD-2025-206520

Tanium addressed a SQL injection vulnerability in Asset...

6.3CVSS5.9AI score0.00265EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/28 11:46 p.m.3 views

CVE-2025-15344 Tanium addressed a SQL injection vulnerability in Asset.

Tanium addressed a SQL injection vulnerability in Asset...

6.3CVSS5.9AI score0.00265EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/28 11:46 p.m.40 views

CVE-2025-15344 Tanium addressed a SQL injection vulnerability in Asset.

Tanium addressed a SQL injection vulnerability in Asset...

6.3CVSS0.00265EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/28 11:46 p.m.5 views

CVE-2025-15344

Tanium addressed a SQL injection vulnerability in Asset...

6.3CVSS5.9AI score0.00265EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/01/28 11:46 p.m.25 views

CVE-2025-15344

Technical details are not publicly available in the provided documents. Monitor for updates from Tanium and CVE trackers to obtain affected versions, root cause, and remediation specifics.

8.8CVSS5.9AI score0.00265EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/01/28 7:45 p.m.8 views

MAL-2026-594 Malicious code in epic-asset-uploader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2cb990940a69aa54175e17a56f993e9c380e4eb2bbe8fc9f6e86c09b252464 The package epic-asset-uploader was found to contain malicious code. Source: ghsa-malware...

5.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/28 7:45 p.m.11 views

Malicious code in epic-asset-uploader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2cb990940a69aa54175e17a56f993e9c380e4eb2bbe8fc9f6e86c09b252464 The package epic-asset-uploader was found to contain malicious code. Source: ghsa-malware...

5.4AI score
SaveExploits0References1
Fedora
Fedora
added 2026/01/28 1:26 a.m.12 views

[SECURITY] Fedora 42 Update: assimp-5.3.1-6.fc42

Assimp, the Open Asset Import Library, is a free library to import various well-known 3D model formats into applications. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems, but is not limited to these applications...

7.8CVSS6.2AI score0.00224EPSS
SaveExploits1
CNNVD
CNNVD
added 2026/01/28 12:0 a.m.19 views

SolarWinds Web Help Desk security vulnerabilities

SolarWinds Web Help Desk is a service desk and asset management software provided by the American company SolarWinds. This software supports centralized knowledge bases, IT asset management, project and task management functions. There is a security vulnerability in SolarWinds Web Help Desk, whic...

9.8CVSS6AI score0.57314EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2026/01/28 12:0 a.m.21 views

PT-2026-5239

Tanium addressed a SQL injection vulnerability in Asset...

6.3CVSS5.9AI score0.00265EPSS
SaveExploits0References2
Rows per page
Query Builder