Lucene search
+L

3988 matches found

Citrix
Citrix
added 2025/04/22 12:0 a.m.14 views

Printers intermittently shows Access denied, Unable to connect

Customer has moved from 7.15 to DAAS with WEM on cloud, Since then they are facing issues with printers intermittently 2. Issue is occurring with all the users Admins and non Admins 3. Issue got auto resolved post 15-20 minutes and sometimes users need to close the application and they able to...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2025/04/22 12:0 a.m.2 views

TOTOLINK A3700R cstecgi.cgi setSmartQosCfg Access Control Error Vulnerability

The TOTOLINK A3700R is a wireless router that provides wireless network connectivity and management. The TOTOLINK A3700R suffers from an access control error vulnerability that originates from improper access control of the setSmartQosCfg function in the /cgi-bin/cstecgi.cgi file. No detailed...

6.9CVSS5.3AI score0.00575EPSS
SaveExploits1References1
Citrix
Citrix
added 2025/04/15 12:0 a.m.72 views

Citrix Cloud Intermittent loss of connectivity to On-Prem AD

When attempting to run MCS Process - Ran into issues contacting the On-Prem Active Directory Citrix.CloudServices.ADAgent EventID 10102 Errors: Message=Unable to connect to the forest associated with domain "DOMAINNAME.local"...

7.1AI score
SaveExploits0
OSV
OSV
added 2025/04/14 6:56 a.m.7 views

CVE-2025-30516 Unauthorized Notification Exposure in Mobile App Under Specific Conditions

Mattermost Mobile Apps versions =2.25.0 fail to terminate sessions during logout under certain conditions e.g. poor connectivity, allowing unauthorized users on shared devices to access sensitive notification content via continued mobile notifications...

2CVSS6AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/04/14 12:0 a.m.8 views

PT-2025-16220

Name of the Vulnerable Software and Affected Versions: Mattermost Mobile Apps versions =2.25.0 Description: The issue arises when Mattermost Mobile Apps fail to terminate sessions during logout under certain conditions, such as poor connectivity, allowing unauthorized users on shared devices to...

7.5CVSS6.3AI score0.00263EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2025/04/07 10:15 a.m.31 views

CVE-2024-45552 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesnt adhere to RFC standards...

8.2CVSS0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/07 10:15 a.m.21 views

CVE-2024-45544 Use After Free in Data Network Stack & Connectivity

Memory corruption while processing IOCTL calls to add route entry in the HW...

6.6CVSS0.00103EPSS
SaveExploits0References1
Fedora
Fedora
added 2025/04/07 1:35 a.m.20 views

[SECURITY] Fedora 40 Update: containernetworking-plugins-1.5.1-2.fc40

Some reference and example networking plugins, maintained by the CNI team. The CNI Container Network Interface project consists of a specification and libraries for writing plugins to configure network interfaces in Linux containers, along with a number of supported plugins. CNI concerns itself...

4.4CVSS7.2AI score0.00385EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2025/04/04 6:32 a.m.9 views

CVE-2025-0415

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for...

9.2CVSS8.1AI score0.00531EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/03 12:0 a.m.5 views

insightsoftware Spark JDBC 安全漏洞

insightsoftware Spark JDBC is a data connectivity driver from insightsoftware. It supports Spark access to multiple databases A security vulnerability exists in insightsoftware Spark JDBC version 2.6.21, which stems from malicious parameter injection that could lead to remote code execution...

8.8CVSS8.6AI score0.00567EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/02 7:15 a.m.16 views

CVE-2025-0415

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for...

9.2CVSS0.00531EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/02 6:22 a.m.11 views

CVE-2025-0415 Command Injection in NTP Setting

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for...

9.2CVSS8AI score0.00531EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/02 6:22 a.m.74 views

CVE-2025-0415

CVE-2025-0415 is a remote command-injection vulnerability in MOXA device web interfaces via NTP settings. The issue allows a web-admin to execute arbitrary system commands, potentially causing the device to enter an infinite reboot loop and disrupt connectivity for downstream systems. The CVSS ba...

9.2CVSS8AI score0.00531EPSS
SaveExploits0References1
Citrix
Citrix
added 2025/03/25 12:0 a.m.24 views

PVS Configuration Wizard Error: Insufficient Privileges

When creating a new PVS farm by running configuration wizard, and selecting option to register the PVS server with a CVAD farm, configuration wizard returns an error: The current user needs to be a Machine catalog Administrator or higher on the Citrix Virtual Desktops Controller at "servername"...

7.5AI score
SaveExploits0
CNNVD
CNNVD
added 2025/03/21 12:0 a.m.6 views

kubeslice 安全漏洞

kubeslice is a kubeslice open source application that enables multi-cloud, multi-cluster service connectivity. A security vulnerability exists in kubeslice version 1.3.1, which stems from improper privileges and could allow an attacker to obtain a token for a service account and elevate privilege...

7.4CVSS6.7AI score0.0036EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2025/03/20 6:49 p.m.166 views

go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment

Impact The issue only occurs when the CLIENT SETINFO command times out during connection establishment. The following circumstances can cause such a timeout: 1. The client is configured to transmit its identity. This can be disabled via the DisableIndentity flag. 2. There are network connectivity...

3.7CVSS7.2AI score0.00694EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2025/03/20 6:3 p.m.52 views

CVE-2025-29923 go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment

go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.3, go-redis potentially responds out of order when CLIENT SETINFO times out during connection establishment. This can happen when the client is configured to transmit its identity, there...

3.7CVSS0.00694EPSS
SaveExploits0References3
CVE
CVE
added 2025/03/20 6:3 p.m.576 views

CVE-2025-29923

CVE-2025-29923 affects the Go Redis client library (go-redis). Prior to versions 9.5.5, 9.6.3, and 9.7.3, the client may return out-of-order responses when a timeout occurs during the CLIENT SETINFO phase at connection establishment, especially if identity transmission is enabled or timeouts are ...

3.7CVSS6.9AI score0.00694EPSS
SaveExploits0References3
Rockylinux
Rockylinux
added 2025/03/17 8:16 p.m.8 views

nmstate bug fix and enhancement update

An update is available for nmstate. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Nmstate is a library with an accompanying command line tool that manages host...

7.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.17 views

The vulnerability of the SSL-VPN portal for FortiOS operating systems allows a hacker to induce a service failure.

The vulnerability of the SSL-VPN portal for FortiOS operating systems is related to the assignment of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

6.8CVSS5.4AI score0.00855EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder