Lucene search
+L

376 matches found

Vulnrichment
Vulnrichment
•added 2026/05/29 11:00 a.m.•21 views

CVE-2025-41281

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute code on the RX Host when a MySQL connector is...

7.5CVSS6.2AI score0.00505EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/29 11:00 a.m.•25 views

CVE-2025-41281

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute code on the RX Host when a MySQL connector is...

7.5CVSS6AI score0.00505EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/29 10:59 a.m.•37 views

CVE-2025-41280

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal Zip Slip in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute code on the RX Host when a MySQL connector is configured and file compression is enabled...

7.5CVSS6AI score0.00146EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/29 12:00 a.m.•33 views

PT-2026-44819

Name of the Vulnerable Software and Affected Versions Waterfall WF-500 RX Host version 7.9.1.0 R2502171040 Description An OS Command Injection issue exists when a MySQL connector is configured. This allows attackers with access to the TX Host to execute arbitrary code on the RX Host due to improp...

7.8CVSS6.6AI score0.00505EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/29 12:00 a.m.•28 views

Waterfall WF-500 操作系统命令注入漏洞

The Waterfall WF-500 is a sending-side host component in the industrial control network unidirectional security gateway developed by the Israeli company Waterfall. Version 7.9.1.0 R2502171040 of the Waterfall WF-500 RX Host contains an operating system command injection vulnerability. This...

7.8CVSS6AI score0.00505EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/29 12:00 a.m.•6 views

CVE-2025-41281: Improper Neutralization of Special Elements used in an OS Command

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute code on the RX Host when a MySQL connector is...

7.8CVSS6.2AI score0.00505EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/29 12:00 a.m.•6 views

CVE-2025-41280: Relative Path Traversal

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal Zip Slip in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute code on the RX Host when a MySQL connector is configured and file compression is enabled...

7.8CVSS6.2AI score0.00146EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/29 12:00 a.m.•32 views

PT-2026-44818

Name of the Vulnerable Software and Affected Versions Waterfall WF-500 RX Host version 7.9.1.0 R2502171040 Description A Relative Path Traversal Zip Slip issue exists, which occurs when an application fails to properly validate the filenames within a compressed archive, potentially allowing files...

7.8CVSS6.2AI score0.00146EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•24 views

Unity Linux 20.1070e Security Update: mysql-connector-java (UTSA-2026-016694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016694 advisory. Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 8.0.15 and prior. Difficult to...

6.3CVSS6.6AI score0.00469EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/12/11 12:00 a.m.•9 views

SUSE: Security Advisory (SUSE-SU-2025:21144-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.00614EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/12/02 12:00 a.m.•16 views

openSUSE 16 Security Update : mysql-connector-java (openSUSE-SU-2025-20089-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2025-20089-1 advisory. - Upgrade to Version 9.3.0 - CVE-2025-30706: Fixed Connector/J vulnerability bsc1241693 - Updatable ResultSet fails with 'Parameter index out of range'....

7.5CVSS7.3AI score0.00614EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
•added 2025/11/27 12:00 a.m.•14 views

Security update for mysql-connector-java (important)

openSUSE security update: security update for mysql-connector-java ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20089-1 Rating: important References: bsc1241693 Cross-References: CVE-2025-30706 CVSS scores: CVE-2025-30706 SUSE : 7.5...

7.7CVSS7.1AI score0.00614EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/26 8:13 a.m.•22 views

SUSE-SU-2025:21144-1 Security update for mysql-connector-java

This update for mysql-connector-java fixes the following issues: - Upgrade to Version 9.3.0 - CVE-2025-30706: Fixed Connector/J vulnerability bsc1241693 - Updatable ResultSet fails with 'Parameter index out of range'. - Fixed Resultset UPDATE methods not checking validity of ResultSet. -...

7.5CVSS7.3AI score0.00614EPSS
SaveExploits0References3
OSV
OSV
•added 2025/11/26 8:12 a.m.•11 views

OPENSUSE-SU-2025:20089-1 Security update for mysql-connector-java

This update for mysql-connector-java fixes the following issues: - Upgrade to Version 9.3.0 - CVE-2025-30706: Fixed Connector/J vulnerability bsc1241693 - Updatable ResultSet fails with 'Parameter index out of range'. - Fixed Resultset UPDATE methods not checking validity of ResultSet. -...

7.5CVSS7.3AI score0.00614EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2016-6542

Malware in sbrugna...

6.8CVSS6.7AI score0.02207EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2020-15541

Malware in sbrugna...

7.5CVSS7.3AI score0.01044EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2009-4796

Malware in sbrugna...

5.8CVSS6.4AI score0.0095EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2020-22668

Malware in sbrugna...

4.7CVSS6.4AI score0.02224EPSS
SaveExploits0References11
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2022-7003

Malicious code in bioql PyPI...

8.8CVSS7.5AI score0.01925EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•25 views

EUVD-2023-0482

Malicious code in bioql PyPI...

8.8CVSS7.8AI score0.01933EPSS
SaveExploits0References3
Rows per page
Query Builder