Lucene search
+L

35022 matches found

CNNVD
CNNVD
added 2025/10/14 12:00 a.m.10 views

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce, which could be exploited by an attacker to bypass security measures and gain unauthorized...

6.5CVSS6.7AI score0.004EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.23 views

PT-2025-41982

An authenticated command injection vulnerability exists in the command line interface binary of AOS-10 GW and AOS-8 Controllers/Mobility Conductor operating system. Exploitation of this vulnerability requires physical access to the hardware controllers. A successful attack could allow an...

6.2CVSS7.7AI score0.00677EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/14 12:00 a.m.13 views

Hewlett Packard Enterprise ArubaOS 安全漏洞

Hewlett Packard Enterprise ArubaOS HPE ArubaOS is a networked wireless operating system from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise ArubaOS that originates from an authenticated command injection in the CLI binary, which could lead to the...

7.2CVSS7.5AI score0.01257EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/14 12:00 a.m.9 views

HPE Aruba Networking EdgeConnect OS 安全漏洞

HPE Aruba Networking EdgeConnect OS is an operating system from HPE America. A security vulnerability exists in HPE Aruba Networking EdgeConnect OS that originates from the presence of authenticated command injections in the CLI binary file, which could lead to the execution of arbitrary commands...

7.2CVSS7AI score0.01257EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.16 views

PT-2025-42207

Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse...

5.4CVSS5.4AI score0.00222EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/13 9:30 a.m.10 views

EUVD-2025-34050

SOOP-CLM developed by PiExtract has a Hidden Functionality vulnerability, allowing privileged remote attackers to exploit a hidden functionality to execute arbitrary code on the server...

8.6CVSS7.5AI score0.00541EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/13 9:30 a.m.10 views

EUVD-2025-34045

SOOP-CLM developed by PiExtract has a Server-Side Request Forgery vulnerability, allowing privileged remote attackers to read server files or probe internal network information...

6.9CVSS6.5AI score0.00334EPSS
SaveExploits0References3
NVD
NVD
added 2025/10/13 8:15 a.m.16 views

CVE-2025-11673

SOOP-CLM developed by PiExtract has a Hidden Functionality vulnerability, allowing privileged remote attackers to exploit a hidden functionality to execute arbitrary code on the server...

8.6CVSS0.00541EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/13 7:44 a.m.26 views

CVE-2025-11674 PiExtract|SOOP-CLM - Server-Side Request Forgery

SOOP-CLM developed by PiExtract has a Server-Side Request Forgery vulnerability, allowing privileged remote attackers to read server files or probe internal network information...

6.9CVSS0.00334EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/13 7:44 a.m.4 views

CVE-2025-11674 PiExtract|SOOP-CLM - Server-Side Request Forgery

SOOP-CLM developed by PiExtract has a Server-Side Request Forgery vulnerability, allowing privileged remote attackers to read server files or probe internal network information...

6.9CVSS6.6AI score0.00334EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/13 7:35 a.m.4 views

CVE-2025-11673 PiExtract |SOOP-CLM - Hidden Functionality

SOOP-CLM developed by PiExtract has a Hidden Functionality vulnerability, allowing privileged remote attackers to exploit a hidden functionality to execute arbitrary code on the server...

8.6CVSS7.7AI score0.00541EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/13 7:35 a.m.23 views

CVE-2025-11673

CVE-2025-11673 affects PiExtract SOOP-CLM. The connected sources describe a Hidden Functionality vulnerability that allows a privileged remote attacker to exploit hidden functionality to execute arbitrary code on the server. The entries list high-impact scores (CVSS 3.1/3.1 base 7.2; CVSS 4.0/4.0...

8.6CVSS7.7AI score0.00541EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2025/10/13 2:18 a.m.8 views

vim: Vim path traversial

A path traversal flaw was found in Vim. Successful exploitation can lead to overwriting sensitive files or placing executable code in privileged locations, depending on the permissions of the process editing the archive...

4.1CVSS7.4AI score0.00243EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2025/10/13 2:18 a.m.5 views

vim: Vim path traversal

A path traversal flaw was found in Vim. Successful exploitation can lead to overwriting sensitive files or placing executable code in privileged locations, depending on the permissions of the process editing the archive...

4.1CVSS7.4AI score0.0076EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/10/13 12:00 a.m.14 views

PT-2025-41774

Name of the Vulnerable Software and Affected Versions SOOP-CLM affected versions not specified Description SOOP-CLM developed by PiExtract is subject to a Server-Side Request Forgery issue. This allows attackers with sufficient privileges to remotely access server files and gather details about t...

6.9CVSS6.4AI score0.00334EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/10/13 12:00 a.m.11 views

PiExtract SOOP-CLM 安全漏洞

PiExtract SOOP-CLM is a cost-effective, enterprise-grade, centralized log management solution from China Xinyan PiExtract. A security vulnerability exists in PiExtract SOOP-CLM that stems from the presence of hidden functionality that could lead to the execution of arbitrary code by a privileged...

8.6CVSS7.3AI score0.00541EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/13 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-11561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the integration of Active Directory and the System Security Services Daemon SSSD on Linux systems. In default configurations, the Kerberos...

8.8CVSS7.6AI score0.00756EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/10/11 7:23 a.m.10 views

CVE-2025-21065

Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices...

6.6CVSS7.2AI score0.00174EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/11 7:23 a.m.9 views

CVE-2025-21047

Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs...

5.2CVSS6.4AI score0.00176EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/10 8:01 p.m.11 views

EUVD-2025-33776

Emlog is an open source website building system. Emlog Pro versions 2.5.19 and earlier are vulnerable to Cross‑Site Request Forgery CSRF on the password change endpoint. An attacker can trick a logged‑in administrator into submitting a crafted POST request to change the admin password without...

8.1CVSS6.5AI score0.00201EPSS
SaveExploits1References1
Rows per page
Query Builder