Lucene search
+L

347 matches found

Positive Technologies
Positive Technologies
added 2026/06/23 12:0 a.m.25 views

PT-2026-51604

Name of the Vulnerable Software and Affected Versions Fortra File Integrity Monitoring FIM versions prior to 9.4.0.1 Description A stored cross-site scripting XSS issue exists in the Asset View UI component. An authenticated user with sufficient privileges to create or modify affected node or...

5.5CVSS5.6AI score0.00145EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/23 12:0 a.m.24 views

PT-2026-51605

Name of the Vulnerable Software and Affected Versions Fortra File Integrity Monitoring FIM versions prior to 9.4.0 Description An issue exists where incorrect or elevated effective permissions may be assigned to users created by the tetool import command while the software is running. This occurs...

4.4CVSS5.7AI score0.00101EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/06/11 11:53 a.m.12 views

dotnet: .NET: Local file tampering via link following vulnerability

A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issu...

6.2CVSS5.8AI score0.00388EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/06/11 11:52 a.m.20 views

dotnet: .NET: Local file tampering via link following vulnerability

A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issu...

6.2CVSS5.8AI score0.00388EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/06/02 6:12 p.m.24 views

Important: Red Hat Security Advisory: OpenShift File Integrity Operator bug fix and enhancement update

An updated OpenShift File Integrity Operator image that fixes various bugs and adds new enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog. The OpenShift File Integrity Operator v1.4.0 is now available. See the documentation for bug fix information:...

10CVSS7.2AI score0.01945EPSS
SaveExploits1References4
OSV
OSV
added 2026/04/16 9:10 p.m.9 views

GHSA-WQQ3-WFMP-V85G Mojic: Observable Timing Discrepancy in HMAC Verification

Summary The CipherEngine in Mojic v2.1.3 uses a standard equality operator !== to verify the HMAC-SHA256 integrity seal during the decryption phase. This creates an Observable Timing Discrepancy CWE-208, allowing a potential attacker to bypass the file integrity check via a timing attack. Details...

4.7CVSS6AI score0.00108EPSS
SaveExploits0References3
Apple
Apple
added 2026/03/24 12:0 a.m.45 views

About the security content of macOS Sequoia 15.7.5

About the security content of macOS Sequoia 15.7.5 This document describes the security content of macOS Sequoia 15.7.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

8.4CVSS7.2AI score0.01515EPSS
SaveExploits2References1Affected Software1
Apple
Apple
added 2026/02/11 12:0 a.m.128 views

About the security content of macOS Tahoe 26.3

About the security content of macOS Tahoe 26.3 This document describes the security content of macOS Tahoe 26.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

7.8CVSS6.9AI score0.01319EPSS
SaveExploits5References1Affected Software1
UbuntuCve
UbuntuCve
added 2026/02/09 11:16 p.m.9 views

CVE-2026-25934

go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discovered in go-git whereby data integrity values for .pack and .idx files were not properly verified. This resulted in go-git potentially consuming corrupted files, which would like...

4.3CVSS7.1AI score0.00136EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/09 10:13 p.m.6 views

CVE-2026-25934

go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discovered in go-git whereby data integrity values for .pack and .idx files were not properly verified. This resulted in go-git potentially consuming corrupted files, which would like...

4.3CVSS5.5AI score0.00136EPSS
SaveExploits0References3Affected Software1
Packet Storm News
Packet Storm News
added 2026/02/03 12:0 a.m.13 views

AIDE 0.19.3

AIDE Advanced Intrusion Detection Environment is a free replacement for Tripwiretm. It generates a database that can be used to check the integrity of files on server. It uses regular expressions for determining which files get added to the database. You can use several message digest algorithms ...

5.5AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/07 9:10 a.m.16 views

CVE-2019-12804

In Hunesion i-oneNet version 3.0.7 3.0.53 and 4.0.4 4.0.16, due to the lack of update file integrity checking in the upgrade process, an attacker can craft malicious file and use it as an update...

7.8CVSS6.8AI score0.00398EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2025/12/17 4:35 p.m.13 views

Low: Red Hat Security Advisory: OpenShift File Integrity Operator bug fix and enhancement update

An updated OpenShift File Integrity Operator image that fixes various bugs and adds new enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog. The OpenShift File Integrity Operator v1.3.8 is now available. See the documentation for bug fix information:...

6.4CVSS7.3AI score0.0022EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/13 6:30 p.m.8 views

EUVD-2025-203250

ShineLan-X contains a set of credentials for an FTP server was found within the firmware, allowing testers to establish an insecure FTP connection with the server. This may allow an attacker to replace legitimate files being deployed to devices with their own malicious versions, since the firmwar...

9.4CVSS6.4AI score0.00312EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/11 12:16 p.m.10 views

CVE-2025-44016

A vulnerability in TeamViewer DEX Client former 1E client - Content Distribution Service NomadBranch.exe prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via a crafted request. By providing a valid hash for a malicious file, an attacker can cause the...

8.8CVSS6.3AI score0.00294EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/11 12:16 p.m.10 views

CVE-2025-44016

A vulnerability in TeamViewer DEX Client former 1E client - Content Distribution Service NomadBranch.exe prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via a crafted request. By providing a valid hash for a malicious file, an attacker can cause the...

8.8CVSS0.00294EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/11 11:24 a.m.9 views

EUVD-2025-202680

A vulnerability in TeamViewer DEX Client former 1E client - Content Distribution Service NomadBranch.exe prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via a crafted request. By providing a valid hash for a malicious file, an attacker can cause the...

8.8CVSS7.2AI score0.00294EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.12 views

TeamViewer DEX Client 安全漏洞

TeamViewer DEX Client is a digital employee experience and endpoint management software from TeamViewer Germany. A security vulnerability exists in TeamViewer DEX Client versions prior to 25.11 that stems from a specially crafted request to bypass file integrity validation, which could lead to th...

8.8CVSS7.2AI score0.00294EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.14 views

PT-2025-50591

Name of the Vulnerable Software and Affected Versions TeamViewer DEX Client versions prior to 25.11 Description A flaw exists in the TeamViewer DEX Client Content Distribution Service NomadBranch.exe that allows attackers to circumvent file integrity checks. By supplying a valid hash for a...

8.8CVSS7.3AI score0.00294EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2025/11/21 9:19 p.m.13 views

Important: Red Hat Security Advisory: OpenShift File Integrity Operator bug fix and enhancement update

An updated OpenShift File Integrity Operator image that fixes various bugs and adds new enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog. The OpenShift File Integrity Operator v1.3.7 is now available. See the documentation for bug fix information:...

9.1CVSS7AI score0.74866EPSS
SaveExploits7References7
Rows per page
Query Builder