Lucene search
+L

11694 matches found

Amazon
Amazon
added 2025/01/17 12:00 a.m.17 views

Important: rsync

Issue Overview: A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data...

7.5CVSS7.3AI score0.08823EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
added 2025/01/17 12:00 a.m.49 views

Amazon Linux 2 : rsync (ALAS-2025-2731)

The version of rsync installed on the remote host is prior to 3.1.2-11. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2731 advisory. A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an...

7.5CVSS7.5AI score0.08823EPSS
SaveExploits4References12
Tenable Nessus
Tenable Nessus
added 2025/01/17 12:00 a.m.32 views

Amazon Linux 2023 : rsync, rsync-daemon (ALAS2023-2025-801)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-801 advisory. A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison...

7.5CVSS7.4AI score0.08823EPSS
SaveExploits4References12
OSV
OSV
added 2025/01/16 1:15 p.m.8 views

CVE-2025-0472

Information exposure in the PMB platform affecting versions 4.2.13 and earlier. This vulnerability allows an attacker to upload a file to the environment and enumerate the internal files of a machine by looking at the request response...

7.5CVSS5.8AI score0.00497EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/16 1:03 p.m.64 views

CVE-2025-0472

The connected sources confirm a CVE-2025-0472 information-exposure vulnerability in the PMB platform, affecting versions up to 4.2.13. The issue allows an attacker to upload a file to the environment and enumerate internal machine files by inspecting the request response. The root cause is descri...

7.5CVSS7AI score0.00497EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/16 1:03 p.m.15 views

CVE-2025-0472 Information exposure vulnerability in PMB platform

Information exposure in the PMB platform affecting versions 4.2.13 and earlier. This vulnerability allows an attacker to upload a file to the environment and enumerate the internal files of a machine by looking at the request response...

7.5CVSS6.8AI score0.00497EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/16 1:03 p.m.47 views

CVE-2025-0472 Information exposure vulnerability in PMB platform

Information exposure in the PMB platform affecting versions 4.2.13 and earlier. This vulnerability allows an attacker to upload a file to the environment and enumerate the internal files of a machine by looking at the request response...

7.5CVSS0.00497EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/01/16 4:08 a.m.7 views

SUSE CVE-2024-12086

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare wi...

6.5CVSS6.4AI score0.01827EPSS
SaveExploits1References23
CNNVD
CNNVD
added 2025/01/16 12:00 a.m.8 views

PMB platform 信息泄露漏洞

PMB platform is a free document management software from PMB Inc. An information disclosure vulnerability exists in PMB platform versions 4.0.10 through 4.2.13, which stems from the presence of an information disclosure issue that could allow an attacker to upload a file to the environment and...

7.5CVSS6.3AI score0.00497EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/15 9:15 p.m.10 views

CVE-2024-48125

An issue in the AsDB service of HI-SCAN 6040i Hitrax HX-03-19-I allows attackers to enumerate user credentials via crafted GIOP protocol requests...

7.5CVSS0.00373EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/15 12:00 a.m.6 views

CVE-2024-48125

An issue in the AsDB service of HI-SCAN 6040i Hitrax HX-03-19-I allows attackers to enumerate user credentials via crafted GIOP protocol requests...

7.5AI score0.00373EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/15 12:00 a.m.71 views

CVE-2024-48125

CVE-2024-48125 affects the HI-SCAN 6040i Hitrax HX-03-19-I system via the AsDB service. The issue allows an attacker to enumerate user credentials by sending crafted GIOP protocol requests. Documented impact is credential enumeration with a base CVSS v3.1 score of 7.5 (High) and network access wi...

7.5CVSS6.9AI score0.00373EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/15 12:00 a.m.18 views

CVE-2024-48125

An issue in the AsDB service of HI-SCAN 6040i Hitrax HX-03-19-I allows attackers to enumerate user credentials via crafted GIOP protocol requests...

0.00373EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/15 12:00 a.m.7 views

Smiths Detection HI-SCAN 6040i Hitrax HX-03-19-I 安全漏洞

The Smiths Detection HI-SCAN 6040i Hitrax HX-03-19-I is an entry-level X-ray equipment electronic component from Smiths Detection, UK. A security vulnerability exists in the Smiths Detection HI-SCAN 6040i Hitrax HX-03-19-I, which stems from an issue in the AsDB service that allows an attacker to...

7.5CVSS6.8AI score0.00373EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/14 6:15 p.m.12 views

AZL-55685 CVE-2024-12086 affecting package rsync for versions less than 3.4.1-1

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare wi...

6.8CVSS6.9AI score0.01827EPSS
SaveExploits1References1
NVD
NVD
added 2025/01/14 6:15 p.m.9 views

CVE-2024-12086

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare wi...

6.8CVSS0.01827EPSS
SaveExploits1References11
OSV
OSV
added 2025/01/14 6:15 p.m.7 views

ALPINE-CVE-2024-12086

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare wi...

6.8CVSS6.3AI score0.01827EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2025/01/14 5:37 p.m.14 views

CVE-2024-12086

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare wi...

6.8CVSS8AI score0.01827EPSS
SaveExploits1
Cvelist
Cvelist
added 2025/01/14 5:37 p.m.54 views

CVE-2024-12086 Rsync: rsync server leaks arbitrary client files

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare wi...

6.1CVSS0.01827EPSS
SaveExploits1References7
AlpineLinux
AlpineLinux
added 2025/01/14 5:37 p.m.20 views

CVE-2024-12086

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare wi...

6.8CVSS6.9AI score0.01827EPSS
SaveExploits1
Rows per page
Query Builder