Lucene search
+L

15955 matches found

Positive Technologies
Positive Technologies
•added 2025/03/18 12:00 a.m.•19 views

PT-2025-11637

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description Vulnerabilities in the command line interface could allow an authenticated remote attacker to expose sensitive information. Successful exploitation could allow an attacker to gain unauthorized...

6CVSS5.9AI score0.00197EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/03/18 12:00 a.m.•15 views

MB Connect Line mbCONNECT24 has a security vulnerability

MB Connect Line mbCONNECT24 is a set of remote service portals from MB Connect Line, Germany. The product supports remote access, data logging and alarming. A security vulnerability exists in MB Connect Line mbCONNECT24 versions prior to 2.16.2, which stems from a configuration file on a client...

7.1CVSS5.7AI score0.00116EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/03/18 12:00 a.m.•33 views

SiPass IP access controller Command Execution Unauthorized Access

The vulnerability of the command-line interface of SiPass IP access controllers is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands and gain unauthorized access to protected information...

8.2CVSS7.3AI score0.00178EPSS
SaveExploits0References2Affected Software2
Rockylinux
Rockylinux
•added 2025/03/17 8:16 p.m.•20 views

nmstate bug fix and enhancement update

An update is available for nmstate. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Nmstate is a library with an accompanying command line tool that manages host...

7.3AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2025/03/17 4:11 p.m.•16 views

Important: Red Hat Security Advisory: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as havin...

7.5CVSS7.1AI score0.01044EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/03/17 2:15 p.m.•22 views

CVE-2024-54027

A Use of Hard-coded Cryptographic Key vulnerability CWE-321 in FortiSandbox version 4.4.6 and below, version 4.2.7 and below, version 4.0.5 and below, version 3.2.4 and below, version 3.1.5 and below, version 3.0.7 to 3.0.5 may allow a privileged attacker with super-admin profile and CLI access t...

4.4CVSS5.4AI score0.00158EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2025/03/17 1:35 a.m.•32 views

Important: Red Hat Security Advisory: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

7.5CVSS7.1AI score0.01044EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/03/16 2:48 a.m.•9 views

SUSE CVE-2025-1736

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when user-supplied headers are sent, the insufficient validation of the end-of-line characters may prevent certain headers from being sent or lead to certain headers be misinterpreted...

7.3CVSS6AI score0.00554EPSS
SaveExploits0References15
Fedora
Fedora
•added 2025/03/15 2:52 a.m.•24 views

[SECURITY] Fedora 40 Update: xen-4.18.4-2.fc40

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

7.5CVSS6AI score0.00864EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/03/14 5:59 p.m.•26 views

CVE-2025-20146

A vulnerability in the Layer 3 multicast feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause a line card to reset,...

8.6CVSS7.7AI score0.0054EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/14 5:57 p.m.•33 views

CVE-2025-20142

A vulnerability in the IPv4 access control list ACL feature and quality of service QoS policy feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers could allow an...

8.6CVSS7.5AI score0.00549EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:00 a.m.•11 views

An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.

...

5.5CVSS5.9AI score0.00216EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/03/14 2:57 a.m.•16 views

SUSE CVE-2025-25204

gh is GitHub's official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool gh attestation verify causes it to return a zero exit status when no attestations are present. This behavior is incorrect:...

6.3CVSS6.6AI score0.00406EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2025/03/14 12:00 a.m.•20 views

UBUNTU-CVE-2025-1736

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when user-supplied headers are sent, the insufficient validation of the end-of-line characters may prevent certain headers from being sent or lead to certain headers be misinterpreted...

7.3CVSS6AI score0.00554EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/03/13 6:53 p.m.•24 views

CVE-2025-24049

Improper neutralization of special elements used in a command 'command injection' in Azure Command Line Integration CLI allows an unauthorized attacker to elevate privileges locally...

8.4CVSS7.9AI score0.0043EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/03/13 5:02 p.m.•25 views

CVE-2025-27493

A vulnerability has been identified in SiPass integrated AC5102 ACC-G2 All versions V6.4.9, SiPass integrated ACC-AP All versions V6.4.9. Affected devices improperly sanitize user input for specific commands on the telnet command line interface. This could allow an authenticated local administrat...

9.3CVSS7.4AI score0.00178EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/13 12:00 a.m.•13 views

PT-2025-13020

Name of the Vulnerable Software and Affected Versions Exim versions 4.96 through 4.98.1 Description A use-after-free in Exim could allow users with command-line access to escalate privileges. This issue affects nearly 50% of mail servers worldwide, posing a significant risk to system integrity. T...

8.1CVSS7.9AI score0.00534EPSS
SaveExploits0References63
BDU FSTEC
BDU FSTEC
•added 2025/03/13 12:00 a.m.•21 views

FortiSandbox Command Line Unauthorized Access

The vulnerability of the command-line interface of the FortiSandbox threat detection and removal system is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

4.6CVSS6.6AI score0.00158EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/03/13 12:00 a.m.•29 views

Microsoft Azure Command Line Privilege Escalation

The vulnerability of the Command Line Interface CLI of the Microsoft Azure platform is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to increase their privileges...

8.4CVSS8AI score0.0043EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/03/13 12:00 a.m.•22 views

FortiSandbox CLI Privilege Escalation

The vulnerability of the CLI component of the FortiSandbox threat detection and mitigation system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS6.5AI score0.00145EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder