Lucene search
+L

13 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2005-4754

Malware in sbrugna...

1.2CVSS6.4AI score0.00365EPSS
SaveExploits0References4
Veracode
Veracode
•added 2025/09/25 4:43 a.m.•14 views

Information Disclosure

github.com/neuvector/neuvector is vulnerable to information disclosure. The vulnerability is due to passwords in Java command parameters being logged in security event logs when a process rule violation occurs, which allows an attacker to obtain sensitive credentials...

5.3CVSS6.2AI score0.0025EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/17 12:29 p.m.•6 views

CVE-2025-54467 NeuVector process with sensitive arguments lead to leakage

When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation the password will appear in the NeuVector security event log...

5.3CVSS6.8AI score0.0025EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/09/17 12:29 p.m.•40 views

CVE-2025-54467 NeuVector process with sensitive arguments lead to leakage

When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation the password will appear in the NeuVector security event log...

5.3CVSS0.0025EPSS
SaveExploits0References2
OSV
OSV
•added 2025/09/17 12:29 p.m.•17 views

CVE-2025-54467 NeuVector process with sensitive arguments lead to leakage

When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation the password will appear in the NeuVector security event log...

5.3CVSS5.9AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/17 12:00 a.m.•1 views

CVE-2025-54467: Insufficiently Protected Credentials

When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation the password will appear in the NeuVector security event log...

5.3CVSS5.8AI score0.0025EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/21 10:09 p.m.•16 views

CVE-2005-4761

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information passwords or keyphrases in the server log file when the -D option is used...

1.2CVSS6.7AI score0.00365EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/06 10:54 a.m.•48 views

BIT-GRADLE-2021-32751 Arbitrary code execution via specially crafted environment variables

Gradle is a build tool with a focus on build automation. In versions prior to 7.2, start scripts generated by the application plugin and the gradlew script are both vulnerable to arbitrary code execution when an attacker is able to change environment variables for the user running the script. Thi...

8.5CVSS7.5AI score0.02709EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2023/09/18 7:24 a.m.•29 views

CVE-2021-32751

A flaw was found in Gradle, which allows a remote, authenticated attacker to execute arbitrary code on the system caused by a flaw in start and gradlew. By sending specially crafted environment variables, an attacker can execute arbitrary code on the system. Mitigation CI/CD systems using the...

8.5CVSS7.7AI score0.02709EPSS
SaveExploits1References4
GithubExploit
GithubExploit
•added 2021/12/24 4:23 a.m.•720 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4j-CVE-2021-44228-workaround A. Solution Description =====...

10CVSS9.2AI score0.99999EPSS
SaveExploits377
OSV
OSV
•added 2021/07/20 11:15 p.m.•24 views

CVE-2021-32751

Gradle is a build tool with a focus on build automation. In versions prior to 7.2, start scripts generated by the application plugin and the gradlew script are both vulnerable to arbitrary code execution when an attacker is able to change environment variables for the user running the script. Thi...

7.5CVSS7.3AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2006/04/01 2:00 a.m.•33 views

CVE-2005-4761

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information passwords or keyphrases in the server log file when the -D option is used...

6.3AI score0.00365EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/04/01 12:00 a.m.•6 views

CVE-2005-4761: Undefined Security Weakness

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information passwords or keyphrases in the server log file when the -D option is used...

1.2CVSS5.8AI score0.00365EPSS
SaveExploits0References1
Rows per page
Query Builder