Lucene search
+L

22057 matches found

The Hacker News
The Hacker News
added 2025/04/24 10:00 a.m.33 views

Critical Commvault Command Center Flaw Enables Attackers to Execute Code Remotely

A critical security flaw has been disclosed in the Commvault Command Center that could allow arbitrary code execution on affected installations. The vulnerability, tracked as CVE-2025-34028 , carries a CVSS score of 9.0 out of a maximum of 10.0. "A critical security vulnerability has been...

10CVSS8.8AI score0.97657EPSS
SaveExploits5
Positive Technologies
Positive Technologies
added 2025/04/24 12:00 a.m.9 views

PT-2025-27728

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential invalid memory access issue has been identified in the Linux kernel, specifically in the asus-ec-sensors component of the hwmon subsystem. The find ec sensor index function...

5.5CVSS6.3AI score0.0016EPSS
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/04/24 12:00 a.m.9 views

Commvault Command Center Innovation Release 11.38 Remote Code Execution

Commvault Command Center Innovation Release version 11.38 proof of concept pre-authentication remote code execution exploit...

10CVSS8.2AI score0.97657EPSS
SaveExploits5
Atlassian
Atlassian
added 2025/04/23 10:59 p.m.65 views

PrivEsc (Privilege Escalation) in Jira Core Data Center

Summary: This High severity PrivEsc Privilege Escalation vulnerability was introduced in versions 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Center. This PrivEsc Privilege Escalation vulnerability, with a CVSS Score of 7.2, allows an attacker to perform actions as a higher-privileged...

8.8CVSS9.3AI score0.00687EPSS
SaveExploits0
OSV
OSV
added 2025/04/22 6:15 p.m.7 views

CVE-2023-44752

An issue in Student Study Center Desk Management System v1.0 allows attackers to bypass authentication via a crafted GET request to /php-sscdms/admin/login.php...

9.8CVSS5.8AI score0.00645EPSS
SaveExploits1References2
NVD
NVD
added 2025/04/22 6:15 p.m.14 views

CVE-2023-44752

An issue in Student Study Center Desk Management System v1.0 allows attackers to bypass authentication via a crafted GET request to /php-sscdms/admin/login.php...

9.8CVSS0.00645EPSS
SaveExploits1References2
NVD
NVD
added 2025/04/22 5:16 p.m.29 views

CVE-2025-34028

The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when expanded by the target server, are vulnerable to path traversal vulnerability that can result in Remote Code Execution via malicious JSP. This issue affec...

10CVSS0.97657EPSS
SaveExploits5References5
CVE
CVE
added 2025/04/22 4:32 p.m.404 views

CVE-2025-34028

CVE-2025-34028 affects Commvault Command Center Innovation Release (11.38.0–11.38.20); it is a path-traversal vulnerability allowing an unauthenticated actor to upload ZIP install packages that, when expanded, enable Remote Code Execution. Root cause: ZIPs containing crafted payloads trigger path...

10CVSS9.9AI score0.97657EPSS
SaveIn wildExploits5References5Affected Software1
Cvelist
Cvelist
added 2025/04/22 4:32 p.m.88 views

CVE-2025-34028 Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal

The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when expanded by the target server, are vulnerable to path traversal vulnerability that can result in Remote Code Execution via malicious JSP. This issue affec...

9.3CVSS0.97657EPSS
SaveExploits5References4
Vulnrichment
Vulnrichment
added 2025/04/22 4:32 p.m.17 views

CVE-2025-34028 Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal

The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when expanded by the target server, are vulnerable to path traversal vulnerability that can result in Remote Code Execution via malicious JSP. This issue affec...

9.3CVSS9.3AI score0.97657EPSS
SaveExploits5References4
NVD
NVD
added 2025/04/22 5:15 a.m.17 views

CVE-2025-2300

Hitachi Ops Center Common Services within Hitachi Ops Center OVA contains an information exposure vulnerability. This issue affects Hitachi Ops Center Common Services: from 11.0.3-00 before 11.0.4-00...

5.5CVSS0.00156EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/22 5:15 a.m.10 views

CVE-2024-46899

Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentials leakage vulnerability.This issue affects Hitachi Ops Center Common Services: from 10.0.0-00 before 11.0.0-04; Hitachi Ops Center Analyzer viewpoint OVF: from 10.0.0-00 before...

7.1CVSS0.00293EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/22 4:12 a.m.18 views

CVE-2024-46899 Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF

Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentials leakage vulnerability.This issue affects Hitachi Ops Center Common Services: from 10.0.0-00 before 11.0.0-04; Hitachi Ops Center Analyzer viewpoint OVF: from 10.0.0-00 before...

7.1CVSS0.00293EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/22 4:12 a.m.57 views

CVE-2024-46899

Hitachi Ops Center: CVE-2024-46899 is linked to an authentication credentials leakage affecting two components. Affected products are Hitachi Ops Center Common Services and Hitachi Ops Center Analyzer viewpoint OVF, both versions 10.0.0-00 through 11.0.0-04. Root cause is improper handling of aut...

7.1CVSS7.1AI score0.00293EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/22 4:12 a.m.9 views

CVE-2024-46899 Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF

Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentials leakage vulnerability.This issue affects Hitachi Ops Center Common Services: from 10.0.0-00 before 11.0.0-04; Hitachi Ops Center Analyzer viewpoint OVF: from 10.0.0-00 before...

7.1CVSS7.5AI score0.00293EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/22 4:12 a.m.7 views

CVE-2025-2300 Information exposure vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center OVA

Hitachi Ops Center Common Services within Hitachi Ops Center OVA contains an information exposure vulnerability. This issue affects Hitachi Ops Center Common Services: from 11.0.3-00 before 11.0.4-00...

5.5CVSS7AI score0.00156EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/22 4:12 a.m.18 views

CVE-2025-2300 Information exposure vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center OVA

Hitachi Ops Center Common Services within Hitachi Ops Center OVA contains an information exposure vulnerability. This issue affects Hitachi Ops Center Common Services: from 11.0.3-00 before 11.0.4-00...

5.5CVSS0.00156EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/22 4:12 a.m.54 views

CVE-2025-2300

The CVE-2025-2300 entry concerns Hitachi Ops Center Common Services, within Hitachi Ops Center OVA. Affected software: Hitachi Ops Center Common Services versions before 11.0.4-00 (specifically 11.0.3-00 and earlier). Root cause: information exposure vulnerability in the Common Services component...

5.5CVSS5.4AI score0.00156EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/22 12:00 a.m.12 views

Commvault Command Center 访问控制错误漏洞

Commvault Command Center is a graphical management interface from Commvault USA. An access control error vulnerability exists in Commvault Command Center version 11.38, which stems from a path traversal vulnerability that could lead to remote code execution...

10CVSS9.6AI score0.97657EPSS
SaveExploits5References4
Vulnrichment
Vulnrichment
added 2025/04/22 12:00 a.m.6 views

CVE-2023-44752

An issue in Student Study Center Desk Management System v1.0 allows attackers to bypass authentication via a crafted GET request to /php-sscdms/admin/login.php...

9.4AI score0.00645EPSS
SaveExploits1References2
Rows per page
Query Builder