Lucene search
+L

13047 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2012-2739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger hash...

5CVSS6.7AI score0.0317EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2012-1150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collision...

5CVSS6.9AI score0.0506EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2013-7040

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the abili...

4.3CVSS6.9AI score0.03255EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2012-0840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tables/aprhash.c in the Apache Portable Runtime APR library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions...

5CVSS7.2AI score0.43346EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2025/03/04 12:00 a.m.11 views

The vulnerability in the software installation tool of Acronis Cyber Protect 16 allows a perpetrator to compromise the integrity of the protected information.

The vulnerability in the Acronis Cyber Protect 16 software installation tool is related to the use of an algorithm whose security requirements are not met for the hash function. Exploiting this vulnerability could allow a attacker to compromise the integrity of the protected information...

5.5CVSS5.9AI score0.0011EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2018-14647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks...

7.5CVSS6.5AI score0.10911EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.21 views

Linux Distros Unpatched Vulnerability : CVE-2021-22922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XM...

6.5CVSS6.5AI score0.04332EPSS
SaveExploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/03 1:14 p.m.7 views

Malicious code in 3952955c8e968410 (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
NVD
NVD
added 2025/03/03 11:15 a.m.15 views

CVE-2025-1868

Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vulnerability can be exploited by...

6.9CVSS0.00248EPSS
SaveExploits1References1
CVE
CVE
added 2025/03/03 10:53 a.m.102 views

CVE-2025-1868

CVE-2025-1868 describes an NTLM leakage vulnerability in Famatech’s Advanced IP Scanner and Advanced Port Scanner. When a network scan is initiated, the tools may emit the NTLM hash of the scanning user, enabling an attacker to intercept traffic to a legitimate or fake server to extract the user ...

6.9CVSS6.8AI score0.00248EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/03/03 10:53 a.m.21 views

CVE-2025-1868 Information display on multiple products from Famatech Corp

Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vulnerability can be exploited by...

6.9CVSS0.00248EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/03/03 10:53 a.m.6 views

CVE-2025-1868 Information display on multiple products from Famatech Corp

Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vulnerability can be exploited by...

6.9CVSS6.5AI score0.00248EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.11 views

Famatech Advanced IP Scanner 信息泄露漏洞

Famatech Advanced IP Scanner is a fast, powerful and easy-to-use IP scanner from Famatech. Famatech Advanced IP Scanner suffers from an information disclosure vulnerability that stems from the disclosure of NTLM hashes during network scanning, which could lead to information disclosure...

6.9CVSS6.1AI score0.00248EPSS
SaveExploits1References2
Circl
Circl
added 2025/03/02 11:44 a.m.14 views

CVE-2024-31013

creationtimestamp| type| source ---|---|--- 2025-03-02 11:44:20+00:00| seen| Telegram/yus3Y2YuGUWJmOevY2BezXrptiXLq1RGAGeMKaZUID0PLWGu...

6.1CVSS4.8AI score0.00476EPSS
SaveExploits1
SUSE CVE
SUSE CVE
added 2025/03/01 2:52 a.m.9 views

SUSE CVE-2025-21809

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix peer hash locking vs RCU callback In its address list, afs now retains pointers to and refs on one or more rxrpcpeer objects. The address list is freed under RCU and at this time, it puts the refs on those peers...

5.5CVSS7.6AI score0.00299EPSS
SaveExploits0References3
NVD
NVD
added 2025/02/28 6:15 p.m.10 views

CVE-2025-27408

Manifest offers users a one-file micro back end. Prior to version 4.9.2, Manifest employs a weak password hashing implementation that uses SHA3 without a salt. This exposes user passwords to a higher risk of being cracked if an attacker gains access to the database. Without the use of a salt,...

4.8CVSS0.00152EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/02/28 5:26 p.m.10 views

CVE-2025-27408 Manifest Uses a One-Way Hash without a Salt

Manifest offers users a one-file micro back end. Prior to version 4.9.2, Manifest employs a weak password hashing implementation that uses SHA3 without a salt. This exposes user passwords to a higher risk of being cracked if an attacker gains access to the database. Without the use of a salt,...

4.8CVSS5.1AI score0.00152EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/02/28 5:26 p.m.19 views

CVE-2025-27408 Manifest Uses a One-Way Hash without a Salt

Manifest offers users a one-file micro back end. Prior to version 4.9.2, Manifest employs a weak password hashing implementation that uses SHA3 without a salt. This exposes user passwords to a higher risk of being cracked if an attacker gains access to the database. Without the use of a salt,...

4.8CVSS0.00152EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/28 11:08 a.m.9 views

OESA-2025-1219 abseil-cpp security update

Abseil is an open-source collection of C++ library code designed to augment the C++ standard library. The Abseil library code is collected from Google's own C++ code base, has been extensively tested and used in production, and is the same code we depend on in our daily coding lives. Security...

4.6CVSS7.5AI score0.00604EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/28 4:52 a.m.11 views

CVE-2022-49576

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix data-races around sysctlfibmultipathhashfields. While reading sysctlfibmultipathhashfields, it can be changed concurrently. Thus, we need to add READONCE to its readers. Mitigation To mitigate this issue, prevent module...

4.7CVSS4.4AI score0.00181EPSS
SaveExploits0References4
Rows per page
Query Builder