Lucene search
+L

19030 matches found

EUVD
EUVD
added 2025/10/03 8:07 p.m.15 views

EUVD-2025-9057

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00657EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2025-11885

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.01805EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/03 12:00 a.m.12 views

Nvidia Nsight Graphics < 2025.3 DLL Hijacking

The version of Nvidia Nsight Graphics installed on the remote Windows host is affected by a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering,...

7.8CVSS5.1AI score0.00154EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/02 9:19 p.m.5 views

GHSA-3G72-CHJ4-2228 Canonical LXD Vulnerable to Privilege Escalation via WebSocket Connection Hijacking in Operations API

Impact LXD's operations API includes secret values necessary for WebSocket connections when retrieving information about running operations. These secret values are used for authentication of WebSocket connections for terminal and console sessions. Therefore, attackers with only read permissions...

7.4CVSS7.7AI score0.00207EPSS
SaveExploits1References4
OSV
OSV
added 2025/10/02 10:15 a.m.3 views

DEBIAN-CVE-2025-54289

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

8.1CVSS5.7AI score0.00207EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/02 10:15 a.m.6 views

UBUNTU-CVE-2025-54289

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

8.1CVSS6AI score0.00207EPSS
SaveExploits1References3
CVE
CVE
added 2025/10/02 9:23 a.m.36 views

CVE-2025-54289

CVE-2025-54289 : Privilege escalation in Canonical LXD

8.1CVSS7AI score0.00207EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2025/10/02 9:23 a.m.14 views

CVE-2025-54289 Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

7.4CVSS0.00207EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2025/10/02 9:23 a.m.16 views

CVE-2025-54289

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

8.1CVSS5.7AI score0.00207EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2025/10/02 9:23 a.m.11 views

CVE-2025-54289

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

8.1CVSS7.3AI score0.00207EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2025/10/02 9:23 a.m.3 views

CVE-2025-54289 Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

7.4CVSS6.9AI score0.00207EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/02 9:23 a.m.6 views

CVE-2025-54289 Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

7.4CVSS6.2AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/10/02 12:17 a.m.7 views

CVE-2025-59684

DigiSign DigiSigner ONE 1.0.4.60 allows DLL Hijacking...

8.8CVSS7AI score0.00563EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/10/02 12:00 a.m.11 views

PT-2025-40332

Name of the Vulnerable Software and Affected Versions Canonical LXD versions prior to 6.5 Canonical LXD version 5.21 through 5.21.4 Description A privilege escalation issue exists in the operations API of Canonical LXD. An attacker with read permissions can hijack terminal or console sessions and...

8.1CVSS6.8AI score0.00207EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2025/10/02 12:00 a.m.8 views

GE S2020/S2020G Fast Switch 61850 Improper Neutralization of Input During Web Page Generation (CVE-2019-18267)

An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript in a specially crafted HTTP request that may be reflected back in the HTTP response. The device is also vulnerable to a stored cross-site...

5.4CVSS5.7AI score0.01553EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/01 10:15 p.m.45 views

CVE-2025-23355

NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and denial of service...

7.8CVSS0.00154EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/01 10:15 p.m.14 views

CVE-2025-23355

NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and denial of service...

7.8CVSS5.8AI score0.00154EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/01 9:19 p.m.55 views

CVE-2025-23355

CVE-2025-23355 affects NVIDIA Nsight Graphics for Windows, via a vulnerability in the ngfx component that could enable a DLL hijacking attack leading to code execution, privilege escalation, data tampering, and denial of service. Affected product scope is NVIDIA Nsight Graphics for Windows; the u...

7.8CVSS6.8AI score0.00154EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/01 9:19 p.m.9 views

CVE-2025-23355

NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and denial of service...

6.7CVSS6.8AI score0.00154EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/10/01 9:19 p.m.48 views

CVE-2025-23355

NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and denial of service...

6.7CVSS0.00154EPSS
SaveExploits0References3
Rows per page
Query Builder