Lucene search
+L

3419 matches found

Cvelist
Cvelist
added 2025/04/03 12:0 a.m.16 views

CVE-2024-47215

An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side. It involves attaching an invalid GTM SS preview header to events, causing them to be retried indefinitely. As a result, the performance of forwarding events to GTM SS overall can be affected latency,...

0.00393EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.11 views

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS Evolved operating systems allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS Evolved operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS5.5AI score0.00142EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/04/01 12:0 a.m.24 views

ASB-A-335387175

In multiple locations, there is a possible way to mislead the user into enabling malicious phone calls forwarding due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

7.3CVSS7.3AI score0.00076EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/03/31 8:31 a.m.312 views

Exploit for CVE-2025-1974

CVE-2025-1974: Kubernetes Ingress Nginx Controller 취약점 분석 및 Po...

9.8CVSS8AI score0.99098EPSS
SaveExploits20
RedhatCVE
RedhatCVE
added 2025/03/30 1:38 p.m.24 views

CVE-2025-2911

Unauthorised access to the call forwarding service system in MeetMe products in versions prior to 2024-09 allows an attacker to identify multiple users and perform brute force attacks via extensions...

5.3CVSS7.2AI score0.00298EPSS
SaveExploits0References3
NVD
NVD
added 2025/03/28 1:15 p.m.10 views

CVE-2025-2911

Unauthorised access to the call forwarding service system in MeetMe products in versions prior to 2024-09 allows an attacker to identify multiple users and perform brute force attacks via extensions...

5.3CVSS0.00298EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/28 12:32 p.m.5 views

CVE-2025-2908 Insufficiently Protected Credentials vulnerability in MeetMe products

The exposure of credentials in the call forwarding configuration module in MeetMe products in versions prior to 2024-09 allows an attacker to gain access to some important assets via configuration files...

8.5CVSS7.2AI score0.00172EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/28 12:32 p.m.56 views

CVE-2025-2908

CVE-2025-2908 concerns MeetMe products with a vulnerability in the call forwarding configuration module where credentials can be exposed via configuration files in versions prior to 2024-09. This is supported by multiple sources in the connected set (NVD/Red Hat/CIRC L/NVD entries). Impact stated...

8.5CVSS7.2AI score0.00172EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/28 12:32 p.m.36 views

CVE-2025-2908 Insufficiently Protected Credentials vulnerability in MeetMe products

The exposure of credentials in the call forwarding configuration module in MeetMe products in versions prior to 2024-09 allows an attacker to gain access to some important assets via configuration files...

8.5CVSS0.00172EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/28 12:0 a.m.4 views

MeetMe 安全漏洞

MeetMe is a dating software from MeetMe, Inc. A security vulnerability exists in versions prior to MeetMe 2024-09, which stems from a call forwarding configuration module credential disclosure that could allow access to critical assets via configuration files...

8.5CVSS6.6AI score0.00172EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/28 12:0 a.m.5 views

MeetMe 安全漏洞

MeetMe is a dating software from MeetMe, Inc. A security vulnerability exists in versions prior to MeetMe 2024-09 that stems from unauthorized access to the Call Forwarding Service system, which could be brute force attacked via an extension number...

5.3CVSS6.6AI score0.00298EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/21 12:0 a.m.10 views

The vulnerability of the mlx5_eswitch_offloads_single_fdb_add_one() function in the drivers/net/ethernet/mellanox/mlx5/core/eswitch.h module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mlx5eswitchoffloadssinglefdbaddone function in the drivers/net/ethernet/mellanox/mlx5/core/eswitch.h module of the Linux kernel is related to insufficient resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.5CVSS6.1AI score0.00183EPSS
SaveExploits0References11Affected Software2
SUSE CVE
SUSE CVE
added 2025/03/14 2:57 a.m.7 views

SUSE CVE-2025-27090

Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the...

5.3CVSS6.8AI score0.00603EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/13 12:0 a.m.20 views

Siemens SCALANCE X-200RNA Switch Devices Improper Authentication (CVE-2016-1908)

The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues ...

9.8CVSS7AI score0.13736EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/03/10 9:4 a.m.5 views

CVE-2025-27253

A CWE-15 "External Control of System or Configuration Setting" in GE Vernova UR IED family devices from version 7.0 up to 8.60 allows an attacker to provide input that establishes a TCP connection through a port forwarding. The lack of the IP address and port validation may allow the attacker to...

6.1CVSS6.5AI score0.0022EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/10 9:4 a.m.61 views

CVE-2025-27253

CVE-2025-27253 affects GE Vernova UR IED family devices (versions 7.0–8.60). The vulnerability is CWE-15: External Control of System or Configuration Setting, caused by improper input validation that allows an attacker to provide input which establishes a TCP connection via port forwarding. Lack ...

6.1CVSS6.5AI score0.0022EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/10 12:0 a.m.6 views

GE Vernova UR IED 输入验证错误漏洞

The GE Vernova UR IED is a series of protection relays from GE Vernova, USA. An input validation error vulnerability exists in GE Vernova UR IED versions 7.0 through 8.60, which stems from improper input validation and allows an attacker to establish a TCP connection via port forwarding...

6.1CVSS6.7AI score0.0022EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2024-21885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs ar...

7.8CVSS6.7AI score0.0142EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.25 views

Linux Distros Unpatched Vulnerability : CVE-2021-36368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an...

3.7CVSS6.4AI score0.01677EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.28 views

Linux Distros Unpatched Vulnerability : CVE-2016-1908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decision...

9.8CVSS6.9AI score0.13736EPSS
SaveExploits0References2
Rows per page
Query Builder