Lucene search
+L

14091 matches found

SUSE Linux
SUSE Linux
added 2025/03/05 3:01 p.m.4 views

Security update for glib2

This update for glib2 fixes the following issues: CVE-2024-52533: Fixed a single byte buffer overflow in setconnectmsg bsc1233282 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

7.1CVSS7.8AI score0.01254EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2025/03/05 12:46 a.m.16 views

CVE-2025-27370

OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the privatekeyjwt authentication mechanism is used, a malicious Authorization Server could trick a Client into writing attacker-controlled values into the audience, including token endpoints or issu...

6.9CVSS7.2AI score0.00333EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:00 a.m.15 views

The vulnerability of the IPSec component of the Ivanti Connect Secure network access control tool allows a hacker to trigger a service failure.

The vulnerability of the IPSec component in the Ivanti Connect Secure network access control tool is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.8AI score0.01558EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:00 a.m.9 views

The vulnerability of the Query Handler component of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server allows a perpetrator to cause service failures.

The vulnerability of the Query Handler component of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using ...

5.3CVSS5.5AI score0.00696EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:00 a.m.16 views

The vulnerability of Ivanti Connect Secure and Ivanti Policy Secure, which are network access control tools, stems from insecure privilege management. This allows attackers to elevate their privileges.

The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.5AI score0.00222EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:00 a.m.11 views

The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure network access control devices, related to the handling of the zero pointer, allows a violator to trigger a service failure.

The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.7AI score0.01402EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:00 a.m.13 views

The vulnerability of the Ivanti Connect Secure network access control tool lies in the reading of data outside the permitted range in memory, allowing a intruder to trigger a service failure.

The vulnerability of the Ivanti Connect Secure network access control tool is related to reading data beyond the allowed range in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.2AI score0.02099EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:00 a.m.12 views

The vulnerability of Ivanti Connect Secure and Ivanti Policy Secure, which are network access control tools, stems from buffer overflow in the stack. This allows a malicious user to trigger a service failure.

The vulnerability of Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

6.8CVSS7.8AI score0.01096EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:00 a.m.9 views

The vulnerability of the Query Handler component of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server allows a perpetrator to cause service failures.

The vulnerability of the Query Handler component of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using ...

5.3CVSS5.4AI score0.00407EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:00 a.m.11 views

The vulnerability of the IPSec component of the Ivanti Connect Secure network access control tool allows a hacker to trigger a service failure.

The vulnerability of the IPSec component in the Ivanti Connect Secure network access control tool is related to reading data beyond the allowed range in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.2AI score0.01937EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:00 a.m.10 views

The vulnerability of the bar files in the control panel of the software integration for IBM App Connect Enterprise allows a perpetrator to write any files into the file system.

The vulnerability of the bar files in the control panel of the IBM App Connect Enterprise software relates to incorrect path name restrictions for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to write any files into the file system remotely...

6.8CVSS5.4AI score0.00488EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2025/03/03 6:15 p.m.31 views

CVE-2025-27370

OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the privatekeyjwt authentication mechanism is used, a malicious Authorization Server could trick a Client into writing attacker-controlled values into the audience, including token endpoints or issu...

6.9CVSS0.00333EPSS
SaveExploits0References5
OSV
OSV
added 2025/03/03 6:15 p.m.12 views

CVE-2025-27370

OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the privatekeyjwt authentication mechanism is used, a malicious Authorization Server could trick a Client into writing attacker-controlled values into the audience, including token endpoints or issu...

6.9CVSS5.9AI score0.00333EPSS
SaveExploits0References5
OSV
OSV
added 2025/03/03 1:32 p.m.8 views

MAL-2025-1900 Malicious code in meta-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/03 1:32 p.m.9 views

Malicious code in meta-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2025/03/03 1:29 p.m.8 views

MAL-2025-1859 Malicious code in instacart-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/03 1:27 p.m.3 views

Malicious code in godaddy-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2025/03/03 1:27 p.m.3 views

MAL-2025-1814 Malicious code in godaddy-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/03 1:25 p.m.5 views

Malicious code in epicagames-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2025/03/03 1:25 p.m.5 views

MAL-2025-1800 Malicious code in epicagames-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Rows per page
Query Builder