Lucene search
+L

9462 matches found

attackerkb
attackerkb
•added 2025/03/04 4:15 p.m.•16 views

CVE-2025-23368

A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI...

9.8CVSS7.2AI score0.00885EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2025/03/04 3:14 p.m.•21 views

CVE-2025-23368 Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli

A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI...

8.1CVSS8.1AI score0.00885EPSS
SaveExploits1References7
osv_cve
osv_cve
•added 2025/03/04 3:14 p.m.•23 views

CVE-2025-23368 Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli

A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI...

8.1CVSS7.1AI score0.00885EPSS
SaveExploits1References12
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2021-27815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial ...

5.5CVSS5.9AI score0.01268EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/03/04 12:00 a.m.•20 views

PT-2025-9676

Name of the Vulnerable Software and Affected Versions Wildfly affected versions not specified Description A flaw was found in the Wildfly Elytron integration, where the component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame...

9.8CVSS7.3AI score0.00885EPSS
SaveExploits1References42
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2018-16301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:readinfile. To trigger this vulnerability the attacker needs to...

7.8CVSS6.9AI score0.00626EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2021-29470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in...

6.5CVSS6.3AI score0.01571EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2012-2335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - php-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers to bypass a protection mechanism in PHP 5.3.12 and 5.4.2 and...

7.5CVSS8.7AI score0.32226EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/03/03 4:30 p.m.•18 views

CVE-2025-27423

Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of compressed or uncompressed tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the i...

7.1CVSS6.1AI score0.22474EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•6 views

CVE-2025-25112: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in kareemsultan Social Links social-links allows Command Line Execution through SQL Injection.This issue affects Social Links: from n/a through = 1.2...

7.6CVSS5.8AI score0.00749EPSS
SaveExploits0References1
Rosalinux
Rosalinux
•added 2025/03/01 9:41 p.m.•40 views

Advisory ROSA-SA-2025-2748

Software: curl 7.61.1 OS: ROSA Virtualization 2.1 packageevrstring: curl-7.61.1-34.0.2.rv3.2 CVE-ID: CVE-2022-32221 BDU-ID: 2022-07403 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the cURL command line utility is related to a logical error in the reused descriptor when processing subsequent...

9.8CVSS6.7AI score0.36081EPSS
SaveExploits7
osv_oesa
osv_oesa
•added 2025/02/28 11:08 a.m.•29 views

OESA-2025-1228 libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or...

8.1CVSS7.8AI score0.9003EPSS
SaveExploits10References2
osv_oesa
osv_oesa
•added 2025/02/28 11:08 a.m.•24 views

OESA-2025-1230 libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or...

8.1CVSS7.8AI score0.9003EPSS
SaveExploits10References2
osv_cve
osv_cve
•added 2025/02/26 5:15 p.m.•24 views

CVE-2025-20118

A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is du...

4.4CVSS5.8AI score0.00156EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2025/02/26 4:15 p.m.•94 views

CVE-2024-53427

decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form ...

8.1CVSS6.1AI score0.00364EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2025/02/26 12:00 a.m.•21 views

Cisco IOS XR Unauthorized Access

The vulnerability of the command-line interface of Cisco IOS XR systems is related to improper validation of arguments passed to a specific CLI command. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.00139EPSS
SaveExploits0References2Affected Software1
Redos
Redos
•added 2025/02/26 12:00 a.m.•22 views

ROS-20250226-34

A vulnerability in the gzipdowrite function of the zlib compression library of the cURL command-line utility is related to an integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely, bypass the ASLR protection mechanism, execute arbitrary code, or cause a denia...

7.3CVSS7.1AI score0.01801EPSS
SaveExploits2
GithubExploit
GithubExploit
•added 2025/02/21 4:36 p.m.•282 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919---Exploit-Script Deskripsi CVE-2024-24919 adal...

8.6CVSS8.1AI score0.99978EPSS
SaveExploits54
osv_oesa
osv_oesa
•added 2025/02/21 11:08 a.m.•16 views

OESA-2025-1155 postgresql security update

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

8.1CVSS7.8AI score0.9003EPSS
SaveExploits10References2
osv_oesa
osv_oesa
•added 2025/02/21 11:08 a.m.•19 views

OESA-2025-1154 postgresql security update

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

8.1CVSS7.8AI score0.9003EPSS
SaveExploits10References2
Rows per page
Query Builder