Lucene search
+L

18942 matches found

NVD
NVD
added 2025/05/08 11:15 p.m.14 views

CVE-2025-29827

Improper authorization in Azure Automation allows an authorized attacker to elevate privileges over a network...

9.9CVSS0.01364EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/08 10:17 p.m.42 views

CVE-2025-29827 Azure Automation Elevation of Privilege Vulnerability

...

9.9CVSS0.01364EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/08 10:17 p.m.104 views

CVE-2025-29827

CVE-2025-29827 — Azure Automation Elevation of Privilege : The Azure Automation service is affected by an improper authorization vulnerability that can allow an authenticated attacker to elevate privileges over the network. Public sources in the provided documents indicate updates/fixes have been...

9.9CVSS8.4AI score0.01364EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/08 10:17 p.m.11 views

CVE-2025-29827 Azure Automation Elevation of Privilege Vulnerability

...

9.9CVSS6.9AI score0.01364EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/08 5:45 p.m.53 views

CVE-2025-4098

CVE-2025-4098 affects Horner Automation Cscape 10.0 (10.0.415.2) SP1. The vulnerability is an out-of-bounds read in a component/function used by Cscape that could allow an attacker to disclose information and potentially execute arbitrary code on affected installations. The CVSS metrics indicate ...

8.4CVSS7AI score0.00268EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/08 5:45 p.m.6 views

CVE-2025-4098 Out-of-bounds Read in Horner Automation Cscape

Horner Automation Cscape version 10.0 10.0.415.2 SP1 is vulnerable to an out-of-bounds read vulnerability that could allow an attacker to disclose information and execute arbitrary code on affected installations of Cscape...

8.4CVSS7.5AI score0.00268EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/08 5:45 p.m.34 views

CVE-2025-4098 Out-of-bounds Read in Horner Automation Cscape

Horner Automation Cscape version 10.0 10.0.415.2 SP1 is vulnerable to an out-of-bounds read vulnerability that could allow an attacker to disclose information and execute arbitrary code on affected installations of Cscape...

8.4CVSS0.00268EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/05/08 7:0 a.m.16 views

Azure Automation Elevation of Privilege Vulnerability

Improper authorization in Azure Automation allows an authorized attacker to elevate privileges over a network...

9.9CVSS8.2AI score0.01364EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/08 6:23 a.m.5 views

Security Bulletin: A denial of service vulnerabilities has been identified in IBM WebSphere Application Server Liberty shipped with IBM Business Automation Workflow

Summary WebSphere Application Server Liberty is shipped as part of IBM Business Automation Workflow containers and as part of the optional components Process Federation Server since 8.5.6, and User Management Service since 18.0.0.1 in IBM Business Automation Workflow traditional. Information abou...

5.5CVSS5.8AI score0.00408EPSS
SaveExploits1Affected Software2
CNNVD
CNNVD
added 2025/05/08 12:0 a.m.9 views

Microsoft Azure Automation 授权问题漏洞

Microsoft Azure Automation is a cloud automation service from Microsoft Corporation USA. The product focuses on providing cloud-based automation and configuration services. An authorization issue vulnerability exists in Microsoft Azure Automation that stems from improper authorization and could...

9.9CVSS8.3AI score0.01364EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/08 12:0 a.m.5 views

Horner Automation Cscape 缓冲区错误漏洞

Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. A buffer error vulnerability exists in Horner Automation Cscape version 10.0 that originates from an out-of-bounds read and could allow an attacker to disclose information...

8.4CVSS6.9AI score0.00268EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/08 12:0 a.m.8 views

PT-2025-20429 · Microsoft · Azure Automation

Name of the Vulnerable Software and Affected Versions: Azure Automation affected versions not specified Description: The issue is related to improper authorization in Azure Automation, allowing an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is n...

9.9CVSS9.1AI score0.01364EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/05/08 12:0 a.m.11 views

PT-2025-20405 · Horner Automation · Cscape

Name of the Vulnerable Software and Affected Versions: Horner Automation Cscape version 10.0 10.0.415.2 SP1 Description: The issue is an out-of-bounds read vulnerability that could allow an attacker to disclose information and execute arbitrary code on affected installations of Cscape...

8.4CVSS6.6AI score0.00268EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2025/05/07 12:30 p.m.249 views

API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc

APIs For OSINT This is a Collection of APIs that will be useful for automating various tasks in OSINT. Thank you for following me! https://cybdetective.com IOT/IP Search engines Name | Link | Description | Price ---|---|---|--- Shodan | https://developer.shodan.io | Search engine for Internet...

7.1AI score
SaveExploits0References4
OSV
OSV
added 2025/05/07 10:5 a.m.5 views

RHSA-2025:4553 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Bulletin has no description...

7.5CVSS5.7AI score0.00799EPSS
SaveExploits0References9
Packet Storm News
Packet Storm News
added 2025/05/07 12:0 a.m.9 views

Weaponizing Language Models for Cybersecurity Offensive Operations: Automating Vulnerability Assessment Report Validation; a Review Paper

This, with the ever-increasing sophistication of cyberwar, calls for novel solutions. In this regard, Large Language Models LLMs have emerged as a highly promising tool for defensive and offensive cybersecurity-related strategies. While existing literature has focused much on the defensive use of...

6.8AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2025/05/06 2:59 p.m.14 views

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.5CVSS7.3AI score0.00799EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/06 8:30 a.m.24 views

Security Bulletin: IBM Cloud Pak for Business Automation images repackage a vulnerable version of freetype - CVE-2025-27363

Summary Some of the container images in IBM Cloud Pak for Business Automation include a vulnerable version of freetype. Vulnerability Details CVEID:CVE-2025-27363 DESCRIPTION: An out of bounds write exists in FreeType versions 2.13.0 and below newer versions of FreeType are not vulnerable when...

8.1CVSS7.7AI score0.26049EPSS
SaveExploits1Affected Software2
Tenable Nessus
Tenable Nessus
added 2025/05/06 12:0 a.m.18 views

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Moderate) (RHSA-2025:4553)

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:4553 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can...

7.5CVSS7.5AI score0.00799EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/05 4:23 p.m.35 views

Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for April 2025.

Summary Security vulnerabilities are addressed with IBM Business Automation Insights 24.0.1-IF002 and IBM Business Automation Insights 24.0.0-IF003 Vulnerability Details CVEID:CVE-2025-1634 DESCRIPTION: A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client...

9.8CVSS9.4AI score0.04505EPSS
SaveExploits2Affected Software1
Rows per page
Query Builder