Lucene search
+L

1328 matches found

CNNVD
CNNVD
added 2025/11/04 12:0 a.m.9 views

MantisBT 授权问题漏洞

MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. An authorization issue vulnerability exists in MantisBT 2.27.1 and earlier versions, which stems from insufficient...

5.3CVSS6.5AI score0.00246EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/11/03 12:0 a.m.8 views

PT-2025-44805

Name of the Vulnerable Software and Affected Versions MantisBT versions 2.27.1 and below Description Mantis Bug Tracker MantisBT is an open source issue tracker. Insufficient access-level checks allow a non-admin user with access to the manage config columns page.php page to retrieve the columns...

5.3CVSS6.7AI score0.00246EPSS
SaveExploits1References8
AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.6 views

Astra Linux – Vulnerability in open-vm-tools

VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper with local files to trigger insecure file operations within that VM...

6.1CVSS6.6AI score0.00256EPSS
SaveExploits0References3
NVD
NVD
added 2025/10/30 10:15 p.m.10 views

CVE-2025-34273

Nagios Log Server versions prior to 2024R2.0.3 contain an incorrect authorization vulnerability that allows non-administrator users to delete global dashboards. The application did not correctly enforce authorization checks for the global dashboard deletion workflow, enabling lower-privileged use...

7.1CVSS0.00958EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/30 10:15 p.m.9 views

CVE-2025-34273

Nagios Log Server versions prior to 2024R2.0.3 contain an incorrect authorization vulnerability that allows non-administrator users to delete global dashboards. The application did not correctly enforce authorization checks for the global dashboard deletion workflow, enabling lower-privileged use...

6.5CVSS5.8AI score0.00958EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/10/30 9:24 p.m.4 views

CVE-2025-34273 Nagios Log Server < 2024R2.0.3 Non-Admin Dashboard Deletion

Nagios Log Server versions prior to 2024R2.0.3 contain an incorrect authorization vulnerability that allows non-administrator users to delete global dashboards. The application did not correctly enforce authorization checks for the global dashboard deletion workflow, enabling lower-privileged use...

7.1CVSS6.4AI score0.00958EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/30 9:24 p.m.23 views

CVE-2025-34273

CVE-2025-34273 concerns Nagios Log Server prior to 2024R2.0.3, where an incorrect authorization check in the global dashboard deletion workflow allows non-administrator users to delete dashboards, potentially affecting other users and the monitoring UI. Affected product: Nagios Log Server; vulner...

7.1CVSS6.4AI score0.00958EPSS
SaveExploits0References3Affected Software1
CISA KEV Catalog
CISA KEV Catalog
added 2025/10/30 12:0 a.m.38 views

Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this...

7.8CVSS6.9AI score0.0788EPSS
SaveIn wildExploits3
Positive Technologies
Positive Technologies
added 2025/10/15 12:0 a.m.18 views

PT-2025-42234

Name of the Vulnerable Software and Affected Versions Dahua embedded products affected versions not specified Description A security issue exists in Dahua embedded products. An attacker gaining normal user credentials can potentially access data restricted to administrator privileges, including...

6.8CVSS6.2AI score0.00282EPSS
SaveExploits1References8
Microsoft KB
Microsoft KB
added 2025/10/14 2:0 p.m.17 views

September 9, 2025—KB5065432 (OS Build 20348.4171)

None None...

9.8CVSS6.8AI score0.18834EPSS
SaveExploits5
RedHat Linux
RedHat Linux
added 2025/10/07 5:31 p.m.8 views

open-vm-tools: Local privilege escalation in open-vm-tools

A flaw was found in VMWare open-vm-tools. A malicious actor with non-administrative privileges on a guest Virtual Machine VM could exploit this vulnerability to gain root privileges on the VM. The issue lies in the service-discovery plugin logic, which can execute attacker-controlled binaries fro...

7.8CVSS5.8AI score0.0788EPSS
SaveExploits3References7
RedHat Linux
RedHat Linux
added 2025/10/07 5:29 p.m.8 views

open-vm-tools: Local privilege escalation in open-vm-tools

A flaw was found in VMWare open-vm-tools. A malicious actor with non-administrative privileges on a guest Virtual Machine VM could exploit this vulnerability to gain root privileges on the VM. The issue lies in the service-discovery plugin logic, which can execute attacker-controlled binaries fro...

7.8CVSS5.8AI score0.0788EPSS
SaveExploits3References7
RedHat Linux
RedHat Linux
added 2025/10/07 7:59 a.m.7 views

open-vm-tools: Local privilege escalation in open-vm-tools

A flaw was found in VMWare open-vm-tools. A malicious actor with non-administrative privileges on a guest Virtual Machine VM could exploit this vulnerability to gain root privileges on the VM. The issue lies in the service-discovery plugin logic, which can execute attacker-controlled binaries fro...

7.8CVSS5.8AI score0.0788EPSS
SaveExploits3References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2019-6098

Malware in sbrugna...

4.3CVSS4.6AI score0.00915EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2021-19539

Malware in sbrugna...

7.7CVSS6.3AI score0.00779EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-25244

Malware in sbrugna...

7.8CVSS7.6AI score0.00376EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-4983

Malware in sbrugna...

6.5CVSS6.5AI score0.00968EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-18819

Malware in sbrugna...

7.8CVSS7.7AI score0.0025EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2016-9483

Malware in sbrugna...

4.3CVSS5AI score0.00684EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2018-11878

Malware in sbrugna...

9CVSS9.2AI score0.02524EPSS
SaveExploits0References3
Rows per page
Query Builder