Lucene search
+L

9936 matches found

Cvelist
Cvelist
•added 2025/05/13 4:59 p.m.•42 views

CVE-2025-29957 Windows Deployment Services Denial of Service Vulnerability

...

6.2CVSS0.00636EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/13 4:59 p.m.•89 views

CVE-2025-29957

Technical details about CVE-2025-29957 (Windows Deployment Services) are not provided in the supplied documents. Please monitor for updated advisories from Microsoft or NVD for affected product/version, root cause, impact, and remediation.

6.2CVSS7AI score0.00636EPSS
SaveExploits0References1Affected Software15
vulnersOsv
vulnersOsv
•added 2025/05/13 4:42 p.m.•10 views

io.quarkus:quarkus-vertx-http-deployment (>=2.13.0.cr1, <=3.3.3) potentially affected by CVE-2025-47204 via org.webjars:bootstrap-multiselect (0.9.15)

org.webjars:bootstrap-multiselect MAVEN version 0.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:bootstrap-multiselect and may be impacted: - io.quarkus:quarkus-vertx-http-deployment =2.13.0.cr1, =3.3.3 Source cves: CVE-2025-47204...

6.1CVSS5.3AI score0.00443EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2025/05/13 3:59 p.m.•17 views

openjdk: Better TLS connection support (Oracle CPU 2025-04)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle...

7.4CVSS6.7AI score0.00833EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
•added 2025/05/13 7:00 a.m.•24 views

Windows Deployment Services Denial of Service Vulnerability

Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to deny service locally...

6.2CVSS6.9AI score0.00636EPSS
SaveExploits0
Citrix
Citrix
•added 2025/05/13 12:00 a.m.•32 views

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 11

Package name: xms10.15.0.11117.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.11009.bin,xms10.15.0.10915.bin, xms10.15.0.10808.bin, xms10.15.0.10731.bin, xms10.15.0.10624.bin, xms10.15.0.10517.bin, xms10.15.0.10417.bin, xms10.15.0.10327.bin,...

7AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/13 12:00 a.m.•6 views

CVE-2025-29957: Uncontrolled Resource Consumption

Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to deny service locally...

6.2CVSS6.4AI score0.00636EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/13 12:00 a.m.•21 views

Microsoft Windows Deployment Services 资源管理错误漏洞

Microsoft Windows Deployment Services is a setup container for Microsoft Corporation's Windows Deployment Services, an updated and redesigned version of Remote Installation Services RIS, which can be used to set up new computers via network-based unattended installations. A resource management...

6.2CVSS8.1AI score0.00636EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/13 12:00 a.m.•14 views

PT-2025-20961 · Microsoft · Windows Deployment Services +1

Name of the Vulnerable Software and Affected Versions: Windows Deployment Services affected versions not specified Description: The issue is related to uncontrolled resource consumption in Windows Deployment Services, allowing an unauthorized attacker to deny service locally. This is a...

6.2CVSS8.8AI score0.00636EPSS
SaveExploits0References12
The Hacker News
The Hacker News
•added 2025/05/12 12:10 p.m.•137 views

⚡ Weekly Recap: Zero-Day Exploits, Developer Malware, IoT Botnets, and AI-Powered Scams

What do a source code editor, a smart billboard, and a web server have in common? They've all become launchpads for attacks—because cybercriminals are rethinking what counts as "infrastructure." Instead of chasing high-value targets directly, threat actors are now quietly taking over the...

10CVSS8.7AI score0.72664EPSS
SaveExploits18
Citrix
Citrix
•added 2025/05/12 12:00 a.m.•26 views

Not able to provision Adaptive Auth appliances

Adaptive Auth provision failed with error: Deployment provision failed...

7.2AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/05/12 12:00 a.m.•31 views

LLM-Based Threat Detection and Prevention Framework for IoT Ecosystems

The increasing complexity and scale of the Internet of Things IoT have made security a critical concern. This paper presents a novel Large Language Model LLM-based framework for comprehensive threat detection and prevention in IoT environments. The system integrates lightweight LLMs fine-tuned on...

6.8AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/05/09 12:00 a.m.•19 views

RiM: Record, Improve and Maintain Physical Well-Being Using Federated Learning

In academic settings, the demanding environment often forces students to prioritize academic performance over their physical well-being. Moreover, privacy concerns and the inherent risk of data breaches hinder the deployment of traditional machine learning techniques for addressing these health...

6.6AI score
SaveExploits0
Snyk
Snyk
•added 2025/05/08 6:30 p.m.•6 views

Directory Traversal

Overview ironic is an OpenStack Bare Metal Provisioning Affected versions of this package are vulnerable to Directory Traversal via the handling of file:// image URLs during the deployment process. An attacker can write, list, view, edit, create, or delete unintended files to a target node disk b...

5.7CVSS7.4AI score0.0019EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2025/05/08 5:16 p.m.•15 views

DEBIAN-CVE-2025-44021

OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling if a deployment was performed via the API. A malicious project assigned as a node owner can provide a path to any local file readable by ironic-conductor, which may then be written to the target...

2.8CVSS5.6AI score0.0019EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/05/08 4:08 p.m.•24 views

Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty CVE-2025-25193, CVE-2025-23184, CVE-2024-47535. This has been addressed in the remediation section. Vulnerability Details Refer to the security bulletins listed i...

7.5CVSS6.6AI score0.02134EPSS
SaveExploits1Affected Software1
osv_cve
osv_cve
•added 2025/05/08 11:24 a.m.•13 views

CVE-2025-3506 Potentially senitive path exposed via unauthenticated http route

Files to be deployed with agents are accessible without authentication in Checkmk 2.1.0, Checkmk 2.2.0, Checkmk 2.3.0 and Checkmk 2.4.0b6 allows attacker to access files that could contain secrets...

6.3CVSS5.9AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2025/05/08 12:00 a.m.•19 views

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk version 2.4.0 that originates from accessing agent deployment files containing sensitive information without authentication...

6.3CVSS6.3AI score0.00324EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/05/08 12:00 a.m.•29 views

IBM CICS TX Standard 缓冲区错误漏洞

IBM CICS TX Standard is a comprehensive single transaction runtime package from International Business Machines IBM, Inc. It can provide a cloud-native deployment model for standalone applications. A buffer error vulnerability exists in IBM CICS TX Standard version 11.1, which stems from the...

7.8CVSS6.9AI score0.00279EPSS
SaveExploits0References3
osv_rlsa
osv_rlsa
•added 2025/05/07 7:11 p.m.•23 views

RLSA-2024:3043 Moderate: ansible-core bug fix, enhancement, and security update

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

5CVSS6.3AI score0.00304EPSS
SaveExploits0References2
Rows per page
Query Builder