Lucene search
+L

441 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/21 12:00 a.m.•3 views

CVE-2026-34284: Improper Access Control

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human workflow 11g+. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

6.1CVSS5.7AI score0.00245EPSS
SaveExploits0References4
Fedora
Fedora
•added 2026/04/16 11:42 p.m.•17 views

[SECURITY] Fedora 44 Update: libksysguard-6.6.4-1.fc44

KSysGuard library provides API to read and manage processes running on the system...

5.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/04/01 12:00 a.m.•12 views

The vulnerability of microprogrammed software in Dell’s iDRAC9 and iDRAC10 embedded access controllers, related to improper management of processes, allows a intruder to execute arbitrary code.

The vulnerability of microprogrammed software in embedded access controllers of Dell’s iDRAC9 and iDRAC10 lies in improper management of processes. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

5.5CVSS6.1AI score0.00276EPSS
SaveExploits0References2Affected Software2
Tenable Nessus
Tenable Nessus
•added 2026/01/22 12:00 a.m.•57 views

Oracle Business Process Management Suite (12.2.1.4.0) (January 2026 CPU)

The version of Oracle Business Process Management Suite installed on the remote host is affected by a vulnerability, as referenced in the January 2026 CPU advisory: - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Composer Apache Commo...

9.8CVSS7AI score0.88976EPSS
SaveExploits7References4
Tenable Nessus
Tenable Nessus
•added 2026/01/20 12:00 a.m.•12 views

MiracleLinux 7 : squid-3.5.20-17.el7.10 (AXSA:2024-7673:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7673:03 advisory. squid: denial of service in HTTP header parser CVE-2024-25617 squid: denial of service in HTTP request parsing CVE-2023-50269 squid: Buffer over-rea...

8.6CVSS6.7AI score0.88144EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/01/09 12:00 a.m.•16 views

TIM BPM Suite和TIM FLOW 安全漏洞

TIM BPM Suite and TIM FLOW are both business process management software from TIM Germany. A security vulnerability exists in TIM BPM Suite,TIM FLOW 9.1.2 and earlier versions, which originates from SQL injection and could lead to unauthorized access to the database...

5.4CVSS7.7AI score0.00213EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/09 12:00 a.m.•14 views

TIM BPM Suite和TIM FLOW 安全漏洞

TIM BPM Suite and TIM FLOW are both business process management software from TIM Germany. A security vulnerability exists in TIM BPM Suite and TIM FLOW versions prior to 9.1.2, which originates from a specially crafted HTTP request and could result in elevated privileges...

6.5CVSS6.7AI score0.00311EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/26 3:02 a.m.•11 views

CVE-2025-15098 YunaiV yudao-cloud Business Process Management BpmSyncHttpRequestTrigger server-side request forgery

A vulnerability was determined in YunaiV yudao-cloud up to 2025.11. This affects the function BpmHttpCallbackTrigger/BpmSyncHttpRequestTrigger of the component Business Process Management. Executing manipulation of the argument url/header/body can lead to server-side request forgery. The attack m...

6.5CVSS6.1AI score0.00292EPSS
SaveExploits0References5
CVE
CVE
•added 2025/12/26 3:02 a.m.•36 views

CVE-2025-15098

The CVE-2025-15098 occurs in YunaiV yudao-cloud (Business Process Management) affecting the BpmHttpCallbackTrigger/BpmSyncHttpRequestTrigger components. A server-side request forgery (SSRF) can be exploited by manipulating the url/header/body arguments, with remote attacker capability and public ...

6.5CVSS6.1AI score0.00292EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/12/26 3:02 a.m.•53 views

CVE-2025-15098 YunaiV yudao-cloud Business Process Management BpmSyncHttpRequestTrigger server-side request forgery

A vulnerability was determined in YunaiV yudao-cloud up to 2025.11. This affects the function BpmHttpCallbackTrigger/BpmSyncHttpRequestTrigger of the component Business Process Management. Executing manipulation of the argument url/header/body can lead to server-side request forgery. The attack m...

6.5CVSS0.00292EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/12/26 3:02 a.m.•20 views

EUVD-2025-205414

A vulnerability was determined in YunaiV yudao-cloud up to 2025.11. This affects the function BpmHttpCallbackTrigger/BpmSyncHttpRequestTrigger of the component Business Process Management. Executing manipulation of the argument url/header/body can lead to server-side request forgery. The attack m...

6.5CVSS6.1AI score0.00292EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/12/26 12:00 a.m.•16 views

yudao-cloud 代码问题漏洞

yudao-cloud is a backend management system for YunaiV individual developers. A code issue vulnerability exists in yudao-cloud version 2025.11 and earlier, which stems from the incorrect manipulation of the url/header/body parameters by the BpmHttpCallbackTrigger/BpmSyncHttpRequestTrigger function...

6.5CVSS6.5AI score0.00292EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/26 12:00 a.m.•5 views

CVE-2025-15098: Server-Side Request Forgery (SSRF)

A vulnerability was determined in YunaiV yudao-cloud up to 2025.11. This affects the function BpmHttpCallbackTrigger/BpmSyncHttpRequestTrigger of the component Business Process Management. Executing manipulation of the argument url/header/body can lead to server-side request forgery. The attack m...

6.5CVSS6.1AI score0.00292EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/11/26 12:00 a.m.•18 views

The vulnerability of the NIM server for the IBM AIX and IBM VIOS operating systems allows attackers to execute arbitrary commands.

The vulnerability of the NIM server for the IBM AIX and IBM VIOS operating systems is related to improper process management. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

10CVSS6.4AI score0.0067EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
•added 2025/11/12 12:00 a.m.•12 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a task-lock contention condition that could lead to process management errors...

6.6AI score0.00142EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/11/12 12:00 a.m.•14 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a kfd process reference leak that could lead to process management errors...

5.8AI score0.00172EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2014-4141

Malware in sbrugna...

4.3CVSS5.3AI score0.0143EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2013-1839

Malware in sbrugna...

5.5CVSS5.5AI score0.00376EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2007-5491

Malware in sbrugna...

7.5CVSS6.4AI score0.0187EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2019-12345

Malware in sbrugna...

8.2CVSS8.3AI score0.02014EPSS
SaveExploits0References3
Rows per page
Query Builder