Lucene search
K

1775 matches found

Vulnrichment
Vulnrichment
added 2025/12/18 5:51 a.m.3 views

CVE-2025-68459

RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service...

8.6CVSS7.2AI score0.01261EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2025/12/13 3:49 p.m.125 views

MicrosoftAmplifierPoC

Microsoft Amplifier RCE PoC Proof of concept demonstrating re...

8.2AI score
Exploits0
vulnersOsv
vulnersOsv
added 2025/12/10 6:30 p.m.2 views

appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0 <=2.8), au.com.versent.jenkins.plugins:ignore-committer-strategy (>=55.v51410e712e0c <=57.v0756db_b_f6926) +623 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (>=2.0 <=2.528.2)

org.jenkins-ci.main:cli MAVEN version =2.0, =1.0, =55.v51410e712e0c, =4.1.0.506.v619d63bec9d8, =66.v12c841920f7d, =109.v2c51a117a7b4, =1.155.v3d884c1bdee1, =1.281.v331e3f5a05a9, =4050.v8ba69b587c39, =4050.v8ba69b587c39, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =1.0.6 and more Source cves: CVE-20...

7.5CVSS7.5AI score0.00506EPSS
Exploits0
OSV
OSV
added 2025/12/10 6:30 p.m.2 views

GHSA-9P56-P6MW-W8QC Jenkins has a Denial of service vulnerability in HTTP-based CLI

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service...

7.5CVSS7.2AI score0.00506EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.4 views

Jenkins 安全漏洞

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A security vulnerability exists in Jenkins 2.540 and earlier and LTS 2.528.2 and earlier, which stems from not properly...

7.5CVSS7.4AI score0.00506EPSS
Exploits0References3
EUVD
EUVD
added 2025/12/05 12:31 a.m.4 views

EUVD-2025-201304

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command.This vulnerability affects Fireware OS 12.0 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 up ...

8.6CVSS7.1AI score0.0051EPSS
Exploits0References2
OSV
OSV
added 2025/12/04 10:15 p.m.4 views

CVE-2025-12195

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec configuration CLI commands.This vulnerability affects Fireware OS 11.0 up to and including 11.12.4+541730, 12.0 up to and includi...

7.2CVSS6AI score0.00567EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/04 9:45 p.m.3 views

CVE-2025-12196 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command.This vulnerability affects Fireware OS 12.0 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 up ...

8.6CVSS7.2AI score0.0051EPSS
Exploits0References1
Fedora
Fedora
added 2025/11/29 4:49 p.m.13 views

[SECURITY] Fedora 43 Update: pack-0.38.2-1.fc43

pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...

7.5CVSS6.8AI score0.00586EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2025/11/25 11:12 a.m.4 views

Important: Red Hat Security Advisory: RHTAS 1.3.1 - Tech Preview Release of Model Transparency

The Tech Preview release of the RHTAS Model Transparency CLI image. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.3 The RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads...

9.8CVSS7.2AI score0.0071EPSS
Exploits0References4
Snyk
Snyk
added 2025/11/24 4:24 p.m.1 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
Exploits0References3
CNVD
CNVD
added 2025/11/20 12:0 a.m.2 views

Fortinet FortiExtender Buffer Overflow Vulnerability

Fortinet FortiExtender is a wireless WAN wide area network extender device from Fortinet. The Fortinet FortiExtender suffers from a buffer overflow vulnerability that originates from buffer copying without checking the input size, which can be exploited by an attacker to cause an authenticated us...

7.8CVSS8.1AI score0.00139EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/18 9:32 p.m.3 views

EUVD-2025-198085

A vulnerability in the command line interface of affected devices could allow an authenticated remote attacker to conduct a command injection attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

6.5CVSS7.5AI score0.00806EPSS
Exploits0References2
OSV
OSV
added 2025/11/18 8:15 p.m.3 views

CVE-2025-37162

A vulnerability in the command line interface of affected devices could allow an authenticated remote attacker to conduct a command injection attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

8.8CVSS6.1AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/18 7:23 p.m.3 views

CVE-2025-37162 Authenticated Command Injection Vulnerability Leading to Arbitrary Remote Command Execution

A vulnerability in the command line interface of affected devices could allow an authenticated remote attacker to conduct a command injection attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

6.5CVSS7.5AI score0.00806EPSS
Exploits0References1
CVE
CVE
added 2025/11/18 7:23 p.m.13 views

CVE-2025-37162

CVE-2025-37162 describes an authenticated command injection vulnerability in the command line interface of affected devices. Successful exploitation could allow execution of arbitrary OS commands by an attacker with valid credentials and network access; impact is system compromise of the underlyi...

8.8CVSS7.6AI score0.00806EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2025/11/18 5:16 p.m.2 views

CVE-2025-46776

A buffer copy without checking size of input 'classic buffer overflow' vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to execute arbitrary code or comman...

7.8CVSS6.3AI score0.00139EPSS
Exploits0References1
NVD
NVD
added 2025/11/18 5:16 p.m.5 views

CVE-2025-46776

A buffer copy without checking size of input 'classic buffer overflow' vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to execute arbitrary code or comman...

7.8CVSS0.00139EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/18 5:1 p.m.4 views

EUVD-2025-198008

An Improper Privilege Management vulnerability CWE-269 in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions,...

1.9CVSS6.2AI score0.00135EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/18 5:1 p.m.5 views

CVE-2025-46776

A buffer copy without checking size of input 'classic buffer overflow' vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to execute arbitrary code or comman...

6.4CVSS0.00139EPSS
Exploits0References1
Rows per page
Query Builder