Lucene search
+L

6481 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/10 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-21873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.31 and prior. Easily...

4.9CVSS6.5AI score0.0086EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2021-2374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.25 and prior. Difficult to exploit...

4.1CVSS6.7AI score0.00456EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-7519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be triggered. This issue can lead...

6.7CVSS7.2AI score0.00184EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-2088

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.22 and prior. Easily exploitable...

4.9CVSS6.7AI score0.00468EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:00 a.m.8 views

CBL Mariner 2.0 Security Update: mysql (CVE-2025-50079)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-50079 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions th...

4.9CVSS6.5AI score0.00564EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:00 a.m.7 views

Azure Linux 3.0 Security Update: polkit (CVE-2025-7519)

The version of polkit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-7519 advisory. - A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an...

6.7CVSS6.3AI score0.00184EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:00 a.m.7 views

CBL Mariner 2.0 Security Update: polkit (CVE-2025-7519)

The version of polkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-7519 advisory. - A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an...

6.7CVSS6.3AI score0.00184EPSS
SaveExploits0References2
NVD
NVD
added 2025/08/06 9:15 p.m.38 views

CVE-2025-51054

Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privilege JWT token without prior authentication via sending an empty HTTP POST request to the /autologin/ API endpoint...

6.5CVSS0.00408EPSS
SaveExploits2References1
OSV
OSV
added 2025/08/06 9:15 p.m.7 views

CVE-2025-51054

Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privilege JWT token without prior authentication via sending an empty HTTP POST request to the /autologin/ API endpoint...

6.5CVSS5.9AI score0.00408EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2025/08/06 12:00 a.m.21 views

PT-2025-32218 · Unknown · Vedo Suite

Name of the Vulnerable Software and Affected Versions: Vedo Suite version 2024.17 Description: Vedo Suite 2024.17 is susceptible to an incorrect access control issue. This allows remote attackers to obtain a valid, high-privilege JWT JSON Web Token without authentication by sending an empty HTTP...

6.5CVSS6.8AI score0.00408EPSS
SaveExploits2References6
Cvelist
Cvelist
added 2025/08/06 12:00 a.m.45 views

CVE-2025-51054

Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privilege JWT token without prior authentication via sending an empty HTTP POST request to the /autologin/ API endpoint...

0.00408EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2025/08/05 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2022-21608

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.7.39 and prior and 8.0.30 and...

4.9CVSS6.5AI score0.01472EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/05 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-21203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and...

4.9CVSS6.7AI score0.00895EPSS
SaveExploits0References3
CVE
CVE
added 2025/08/04 2:42 p.m.42 views

CVE-2025-30098

Dell PowerProtect Data Domain (DD OS) is affected by CVE-2025-30098: an Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in the DDSH CLI. A high-privilege attacker with local access could exploit this to execute arbitrary commands with root pr...

6.7CVSS7.1AI score0.00439EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/08/04 2:32 p.m.14 views

CVE-2025-30096

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...

6.7CVSS0.00439EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/01 11:09 a.m.7 views

OESA-2025-1918 polkit security update

polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. Security Fixes: A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be triggere...

6.7CVSS7.9AI score0.00184EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/01 11:09 a.m.6 views

OESA-2025-1916 polkit security update

polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. Security Fixes: A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be triggere...

6.7CVSS7.9AI score0.00184EPSS
SaveExploits0References2
CVE
CVE
added 2025/07/31 10:02 a.m.36 views

CVE-2025-41688

CVE-2025-41688 describes a high-privilege RCE via an undocumented method that escapes the LUA sandbox, enabling execution of arbitrary OS commands. Reported impact includes total system compromise with network access as the attack vector and no user interaction required. Affected products noted i...

7.2CVSS7.3AI score0.0064EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/07/31 10:02 a.m.17 views

CVE-2025-41688 High Privilege RCE via LUA Sandbox Escape

A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox...

7.2CVSS0.0064EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/07/31 10:02 a.m.6 views

CVE-2025-41688 High Privilege RCE via LUA Sandbox Escape

A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox...

7.2CVSS7.5AI score0.0064EPSS
SaveExploits0References2
Rows per page
Query Builder