Lenovo XClarity Controller 安全漏洞

Lenovo XClarity Controller XCC is a server-embedded management engine from Lenovo China, which is used to standardize and automate basic server management tasks. A security vulnerability exists in Lenovo XClarity Controller. An attacker exploited the vulnerability to cause LDAP client password...

CVE-2021-24285

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24285.yaml 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-27...

CVE-2021-24499

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24499.yaml 2024-05-14 02:41:03+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4293 2024-12-30...

CVE-2021-30497

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-30497.yaml 2024-01-16 05:35:28+00:00| seen| https://t.me/arpsyndicate/2829 2024-10-31 00:00:00+00:00| exploited| The Shadowserve...

CVE-2021-20092

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-20092.yaml 2024-11-14 06:09:34+00:00| seen| MISP/85e13e1d-37d1-4f7f-8886-1b21a35cbf2c 2025-02-27 21:02:01+00:00| seen|...

CVE-2021-25899

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-25899.yaml 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-04-28...

AlmaLinux 9 : webkit2gtk3 (ALSA-2023:1918)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:1918 advisory. - A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.7.5 and iPadOS 15.7.5, Safari 16.4.1, iOS 16.4.1 and iPadOS...

CVE-2023-1020

creationtimestamp| type| source ---|---|--- 2023-04-24 22:19:40+00:00| seen| https://t.me/cibsecurity/62747 2023-07-26 14:24:11+00:00| published-proof-of-concept| https://t.me/codeb0ss/958 2025-02-22 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-02-22...

CVE-2023-2246

creationtimestamp| type| source ---|---|--- 2023-04-23 20:38:32+00:00| seen| https://t.me/cibsecurity/62672 2023-05-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51431 2025-09-12 17:40:50+00:00| seen|...

Linux Kernel af_can.c Denial of Service Vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A denial of service vulnerability exists in the Linux Kernel that stems from a null pointer dereference issue found in the CAN protocol in net/can/afcan.c. mlpriv may not be...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-67098)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause unauthorized MySQL Server hangs or frequent repeated crashes...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-65519)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause unauthorized MySQL Server hangs or frequent repeated crashes...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-65514)

Oracle MySQL Server is a relational database from Oracle Corporation. Oracle MySQL Server has a security vulnerability that can be exploited by attackers to cause a takeover of MySQL Server...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-65513)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause unauthorized MySQL Server hangs or frequent repeated crashes...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-67099)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause unauthorized MySQL Server hangs or frequent repeated crashes...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-65518)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by an attacker to cause unauthorized MySQL connector hangs or frequent and repeated crashes, as well as unauthorized update, insert, or delete acces...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-67109)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause unauthorized MySQL Server hangs or frequent repeatable crashes, as well as unauthorized update, insert, or delete access to...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-67094)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause unauthorized MySQL Server hangs or frequent repeated crashes...

Schneider Electric Conext Gateway Input Validation Error Vulnerability

The Schneider Electric Conext Gateway is a range of gateway devices from the French company Schneider Electric. An input validation error vulnerability exists in Schneider Electric Conext Gateway v1.16 Build 004 and prior versions, which stems from the presence of incorrect input validation, and...

CVE-2023-27350

creationtimestamp| type| source ---|---|--- 2023-04-20 20:30:49+00:00| seen| https://t.me/cibsecurity/62536 2023-04-21 00:00:00+00:00| seen| MISP/fe2a6b30-c779-4b47-994a-53cdecd26ed8 2023-04-22 08:22:51+00:00| seen| https://t.me/thehackernews/3271 2023-04-22 09:51:45+00:00| exploited|...