Lucene search
K

2727 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2024-21820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect default permissions in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially...

8.5CVSS6.3AI score0.00209EPSS
Exploits0References2
CVE
CVE
added 2025/08/29 10:0 p.m.51 views

CVE-2025-55173

CVE-2025-55173 is a vulnerability in Next.js Image Optimization: attacker-controlled external image sources could cause content injection, enabling file downloads with arbitrary content/filenames under certain configurations and potentially aiding phishing. Affected versions are Next.js before 14...

4.3CVSS6.5AI score0.00509EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2025/08/29 9:15 p.m.3 views

CVE-2025-58066

nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which allow non-NTS traffic are affected by a denial of service vulnerability, where an attacker can induce a message storm between two NTP...

5.3CVSS0.00313EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/08/29 12:0 a.m.3 views

PT-2025-37253

Name of the Vulnerable Software and Affected Versions: CUPS versions 2.4.12 and earlier Description: CUPS Common Unix Printing System is an open-source printing system for Linux and Unix-like operating systems. Versions 2.4.12 and earlier are susceptible to a remote denial of service due to unsaf...

9.8CVSS8AI score0.73062EPSS
Exploits7References71
NVD
NVD
added 2025/08/27 5:15 p.m.3 views

CVE-2025-20348

A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device. This vulnerability exists because of...

5CVSS0.00273EPSS
Exploits0References1
OSV
OSV
added 2025/08/27 5:15 p.m.4 views

CVE-2025-20347

A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device. This vulnerability exists because of...

5.4CVSS5.8AI score0.00232EPSS
Exploits0References1
NVD
NVD
added 2025/08/27 5:15 p.m.6 views

CVE-2025-20347

A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device. This vulnerability exists because of...

5.4CVSS0.00232EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/08/27 12:0 a.m.4 views

PT-2025-34897 · Cisco · Cisco Nexus Dashboard +1

Name of the Vulnerable Software and Affected Versions: Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller NDFC affected versions not specified Description: A vulnerability exists in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller NDFC due...

5.4CVSS6AI score0.00232EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2020-8561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests...

4.1CVSS6AI score0.01953EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-46392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow...

6.5CVSS6.4AI score0.01663EPSS
Exploits0References3
CVE
CVE
added 2025/08/26 12:56 p.m.520 views

CVE-2025-7775

CVE-2025-7775 is a memory overflow vulnerability in Citrix NetScaler ADC and NetScaler Gateway. The CVE affects deployments where the appliance is configured as a Gateway (VPN VServer, ICA Proxy, CVPN, RDP Proxy) or AAA VServer, and also affects LB virtual servers of type HTTP, SSL, or HTTP_QUIC ...

9.8CVSS7.8AI score0.18973EPSS
In wildExploits2References2Affected Software1
Packet Storm
Packet Storm
added 2025/08/26 12:0 a.m.152 views

📄 GeoVision ASManager Windows Application 6.1.2.0 Credential Disclosure

GeoVision ASManager Windows Application version 6.1.2.0 suffers from a credential disclosure vulnerability. Exploit Title: GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure Date: 19-MAR-2025 Exploit Author: Giorgi Dograshvili DRAGOWN Vendor Homepage:...

5.1CVSS7.2AI score0.01278EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:0 a.m.2 views

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Network Address Translation DNS Inspection DoS (cisco-sa-asaftd-nat-dns-dos-bqhynHTM)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability. - A vulnerability in the function that performs IPv4 and IPv6 Network Address Translation NAT DNS inspection for Cisco Secure Firewall Adaptive Security Appliance ASA Software an...

8.6CVSS5.9AI score0.00567EPSS
Exploits0References5
Veracode
Veracode
added 2025/08/25 7:53 a.m.3 views

NULL Pointer Dereference

libtiff is vulnerable to Null Pointer Dereference. The vulnerability is due to lack of validation in the PSLvl2page function of tiff2ps.c, which can trigger a null pointer dereference under specific configurations...

2.5CVSS3.5AI score0.00174EPSS
Exploits1References9Affected Software1
Akamai Blog
Akamai Blog
added 2025/08/22 12:0 p.m.3 views

A New Way to Manage Property Configurations: Dynamic Rule Updates

...

7.3AI score
Exploits0
NVD
NVD
added 2025/08/21 6:15 p.m.9 views

CVE-2025-7051

On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2...

8.3CVSS0.00255EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/08/21 12:0 a.m.7 views

PT-2025-34268 · Solarwinds · N-Central

Name of the Vulnerable Software and Affected Versions: N-central versions prior to 2025.2 Description: An authenticated user can read, write, and modify syslog configurations across customers on an N-central server. Recommendations: Update to version 2025.2 or later...

8.3CVSS7.1AI score0.00255EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/08/20 3:43 p.m.2 views

tomcat: Apache Tomcat denial of service

A denial of service flaw was found in Apache Tomcat. For some unlikely configurations of multipart upload, an integer overflow vulnerability may lead to a denial of service via bypassing size limits...

7.5CVSS7.2AI score0.0196EPSS
Exploits0References5
NVD
NVD
added 2025/08/20 3:15 a.m.7 views

CVE-2025-8145

The Redirection for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.4 via deserialization of untrusted input in the getleadfields function. This makes it possible for unauthenticated attackers to inject a PHP Object. The addition...

8.8CVSS0.00483EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2019-19905

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very long lines from configuration files. This affects systems that have...

9.8CVSS8.1AI score0.03384EPSS
Exploits0References2
Rows per page
Query Builder