Lucene search
+L

26478 matches found

CNNVD
CNNVD
added 2025/11/21 12:00 a.m.11 views

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from insufficient path authentication, which could result in an application accessing sensitive user data. The followin...

5.5CVSS6AI score0.00167EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/11/21 12:00 a.m.13 views

Apple Safari和Apple macOS 安全漏洞

Apple Safari and Apple macOS are both products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems. apple macOS is a specialized operating system developed specifically for Mac computers. A security vulnerability exists in...

4.3CVSS5.9AI score0.00225EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/11/21 12:00 a.m.12 views

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices. apple macOS is a specialized operating system developed for Mac computers. apple iPadOS is an operating system for iPad tablet computers. A security vulnerability exists in several Apple products that originates from an out-of-bounds...

4.3CVSS5.7AI score0.00196EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:00 a.m.6 views

TencentOS Server 3: firefox (TSSA-2023:0181)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0181 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

9.8CVSS7.6AI score0.0093EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:00 a.m.7 views

Google Chrome < 124.0.6367.78 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 124.0.6367.78. It is, therefore, affected by multiple vulnerabilities as referenced in the 202404stable-channel-update-for-desktop24 advisory. - Use after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a...

9CVSS6.9AI score0.08951EPSS
SaveExploits2References7
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:00 a.m.4 views

Google Chrome < 88.0.4324.104 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 88.0.4324.104. It is, therefore, affected by multiple vulnerabilities as referenced in the 202101stable-channel-update-for-desktop19 advisory. - Inappropriate implementation in DevTools in Google Chrome prior to...

9.6CVSS7.9AI score0.23406EPSS
SaveExploits4References53
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:00 a.m.15 views

TencentOS Server 4: pcs (TSSA-2025:0255)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0255 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

7.5CVSS6.9AI score0.00742EPSS
SaveExploits0References2
OSV
OSV
added 2025/11/19 8:15 p.m.9 views

CVE-2025-36371

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 are impacted by obtaining an information vulnerability in the database plan cache implementation. A user with access to the database plan cache could see information they do not have authority to view...

6.5CVSS5.8AI score0.00266EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/19 7:19 p.m.9 views

CVE-2025-37158

A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution RCE on the affected system...

8.8CVSS7.9AI score0.00658EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/19 7:19 p.m.13 views

CVE-2025-37163

A command injection vulnerability has been identified in the command line interface of the HPE Aruba Networking Airwave Platform. An authenticated attacker could exploit this vulnerability to execute arbitrary operating system commands with elevated privileges on the underlying operating system...

7.2CVSS8.1AI score0.00989EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/19 7:19 p.m.15 views

CVE-2025-37157

A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution RCE on the affected system...

8.8CVSS7.9AI score0.00658EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/19 8:18 a.m.11 views

CVE-2025-8404

Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library. An authenticated attacker with access to the BMC exploit stack buffer via a crafted header and achieve arbitrary code execution of the BMC’s firmware operating system...

5.5CVSS8AI score0.00317EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/11/19 12:00 a.m.13 views

Fortinet FortiWeb Multiple OS Command Injection (FG-IR-25-513)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-25-513 advisory. - An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in FortiWeb may...

7.2CVSS6.3AI score0.5558EPSS
SaveExploits9References2
Tenable Nessus
Tenable Nessus
added 2025/11/19 12:00 a.m.3 views

Photon OS 5.0: Postgresql14 PHSA-2025-5.0-0683

An update of the postgresql14 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0683. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

5.9CVSS5.4AI score0.0034EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/11/19 12:00 a.m.5 views

Photon OS 5.0: Linux PHSA-2025-5.0-0682

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0682. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.8CVSS5.1AI score0.00141EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/19 12:00 a.m.23 views

PT-2025-47520

Name of the Vulnerable Software and Affected Versions IBM i versions 7.2 through 7.6 Description A flaw exists in the database plan cache implementation that could allow a user with database access to view information they are not authorized to see. Recommendations IBM i versions 7.2 through 7.6...

6.5CVSS6.2AI score0.00266EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/11/18 9:32 p.m.11 views

EUVD-2025-198085

A vulnerability in the command line interface of affected devices could allow an authenticated remote attacker to conduct a command injection attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

6.5CVSS7.5AI score0.00889EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/11/18 9:32 p.m.11 views

EUVD-2025-198069

A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution RCE on the affected system...

6.7CVSS7.4AI score0.00658EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/18 8:15 p.m.11 views

CVE-2025-37162

A vulnerability in the command line interface of affected devices could allow an authenticated remote attacker to conduct a command injection attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

8.8CVSS0.00889EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/18 7:23 p.m.23 views

CVE-2025-37162 Authenticated Command Injection Vulnerability Leading to Arbitrary Remote Command Execution

A vulnerability in the command line interface of affected devices could allow an authenticated remote attacker to conduct a command injection attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

6.5CVSS0.00889EPSS
SaveExploits0References1
Rows per page
Query Builder