Lucene search
K

27 matches found

CNVD
CNVD
added 2025/10/17 12:0 a.m.6 views

ZTE ZXCDN Struts Remote Code Execution Vulnerability

ZTE ZXCDN is a unified network management platform from China's ZTE Corporation ZTE. ZTE ZXCDN suffers from a Struts remote code execution vulnerability, which can be exploited by an attacker to remotely execute commands with non-root privileges...

9.8CVSS6.5AI score0.00731EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/10/15 1:45 p.m.6 views

CVE-2025-46581

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

9.8CVSS8.5AI score0.00731EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/14 8:54 a.m.5 views

CVE-2025-46581 ZTE ZXCDN product has a Struts RCE Vulnerability

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

9.8CVSS0.00731EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/14 8:54 a.m.4 views

CVE-2025-46581 ZTE ZXCDN product has a Struts RCE Vulnerability

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

9.8CVSS8.2AI score0.00731EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.2 views

ZTE ZXCDN 安全漏洞

ZTE ZXCDN is a unified network management platform from ZTE Corporation ZTE, China. A security vulnerability exists in ZTE ZXCDN, which originates from an Apache Struts remote code execution vulnerability that could lead to remote command execution with non-root privileges...

9.8CVSS8AI score0.00731EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.2 views

PT-2025-41861

Name of the Vulnerable Software and Affected Versions ZTE ZXCDN product affected versions not specified Description The ZTE ZXCDN product is susceptible to a remote code execution RCE issue stemming from a flaw in the Struts framework. An attacker who does not need to be authenticated can execute...

9.8CVSS7.7AI score0.00731EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-38173

Malicious code in bioql PyPI...

7.4CVSS6.4AI score0.00402EPSS
Exploits0References10
Cvelist
Cvelist
added 2025/08/27 4:23 p.m.5 views

CVE-2025-20292 Cisco NXOS Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device. This...

4.4CVSS0.01876EPSS
Exploits0References1
Cisco
Cisco
added 2025/08/27 4:0 p.m.5 views

Cisco NX-OS Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device. This...

4.4CVSS7.5AI score0.01876EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/08/27 12:0 a.m.2 views

PT-2025-34890 · Cisco · Cisco Nx-Os

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an...

4.4CVSS6.7AI score0.01876EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/02/05 9:1 p.m.7 views

CVE-2022-46410

An issue was discovered in Veritas NetBackup Flex Scale through 3.0. An attacker with non-root privileges may escalate privileges to root by using specific commands...

8.8CVSS7AI score0.00568EPSS
Exploits0References1
OSV
OSV
added 2023/11/17 11:6 a.m.3 views

OESA-2023-1833 open-vm-tools security update

The project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and libraries of...

7.5CVSS6.8AI score0.00667EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2023/11/15 11:19 p.m.3 views

open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper

A flaw was found in open-vm-tools. This flaw allows a malicious actor with non-root privileges to hijack the /dev/uinput file descriptor, allowing them to simulate user inputs...

7.4CVSS5.7AI score0.00402EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/11/15 9:26 p.m.3 views

open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper

A flaw was found in open-vm-tools. This flaw allows a malicious actor with non-root privileges to hijack the /dev/uinput file descriptor, allowing them to simulate user inputs...

7.4CVSS5.7AI score0.00402EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/11/15 8:38 p.m.4 views

open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper

A flaw was found in open-vm-tools. This flaw allows a malicious actor with non-root privileges to hijack the /dev/uinput file descriptor, allowing them to simulate user inputs...

7.4CVSS5.7AI score0.00402EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2023/11/15 12:0 a.m.24 views

RHEL 9 : open-vm-tools (RHSA-2023:7277)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7277 advisory. The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualizati...

7.5CVSS6.7AI score0.00667EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2023/11/15 12:0 a.m.23 views

RHEL 9 : open-vm-tools (RHSA-2023:7276)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7276 advisory. The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualizati...

7.5CVSS6.7AI score0.00667EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2023/10/31 12:0 a.m.23 views

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Open VM Tools vulnerabilities (USN-6463-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6463-1 advisory. It was discovered that Open VM Tools incorrectly handled SAML tokens. A remote attacker Guest Operations privileges could...

7.5CVSS6.6AI score0.00667EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2023/10/30 1:43 p.m.51 views

CVE-2023-34059

A flaw was found in open-vm-tools. This flaw allows a malicious actor with non-root privileges to hijack the /dev/uinput file descriptor, allowing them to simulate user inputs...

7.4CVSS7.1AI score0.00402EPSS
Exploits0References3
OSV
OSV
added 2023/10/27 5:15 a.m.2 views

DEBIAN-CVE-2023-34059

open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs...

7CVSS6.2AI score0.00402EPSS
Exploits0References1
Rows per page
Query Builder