Lucene search
K

28676 matches found

CNNVD
CNNVD
added 2025/10/09 12:0 a.m.2 views

Newforma Project Center Server 安全漏洞

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. A code execution vulnerability exists in Newforma Project Center...

9.8CVSS7.7AI score0.00842EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.2 views

Newforma Project Center Server 安全漏洞

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. A directory traversal vulnerability exists in Newforma Project...

9.8CVSS6.3AI score0.0037EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.2 views

Newforma Project Center Server 安全漏洞

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. An information IELTS vulnerability exists in Newforma Project...

5.3CVSS6.5AI score0.00073EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.2 views

Newforma Project Center Server 安全漏洞

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. A code execution vulnerability exists in Newforma Project Center...

9.8CVSS7.1AI score0.00492EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.3 views

Newforma Project Center Server 安全漏洞

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. A security vulnerability exists in Newforma Project Center Serve...

9.8CVSS6.3AI score0.00351EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.17 views

Newforma Project Center Server 安全漏洞

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. An information disclosure vulnerability exists in Newforma Proje...

6CVSS5.9AI score0.00299EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.3 views

Newforma Project Center Server 安全漏洞

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. Newforma Project Center suffers from a cross-site scripting...

5.5CVSS5.9AI score0.00196EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.3 views

Newforma Project Center Server 安全漏洞

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. An information disclosure vulnerability exists in Newforma Proje...

8.2CVSS6AI score0.00345EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.2 views

Newforma Project Center Server 安全漏洞

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. An open redirection vulnerability exists in Newforma Project...

6.1CVSS6.3AI score0.00194EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.3 views

Newforma Project Center Server 安全漏洞

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. An information disclosure vulnerability exists in Newforma Proje...

8.2CVSS6AI score0.00345EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.2 views

Newforma Project Center Server 安全漏洞

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. A security bypass vulnerability exists in Newforma Project Cente...

9.8CVSS6.3AI score0.00351EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.5 views

PT-2025-41466

Name of the Vulnerable Software and Affected Versions Newforma Info Exchange affected versions not specified Description Newforma Info Exchange accepts serialized .NET data via the /remoteweb/remote.rem API endpoint without proper validation. This allows a remote, unauthenticated attacker to...

9.8CVSS7.5AI score0.00842EPSS
Exploits0References12
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.5 views

PT-2025-41467

Name of the Vulnerable Software and Affected Versions Newforma Project Center Server NPCS affected versions not specified Description Newforma Project Center Server NPCS allows a remote, unauthenticated attacker to execute arbitrary code with 'NT AUTHORITYNetworkService' privileges. This is...

9.8CVSS7.6AI score0.00772EPSS
Exploits0References9
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.1 views

Newforma Project Center Server 安全漏洞

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. A code execution vulnerability exists in Newforma Project Center...

9.8CVSS7.7AI score0.00772EPSS
Exploits0References3
OSV
OSV
added 2025/10/08 7:20 a.m.2 views

MAL-2025-48091 Malicious code in vercel-v0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b3f5d72ec9c31838366e2e5e38f08021d40aa495b4424e97ff5b580a24467d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/10/08 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-54291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project...

6.9CVSS5.7AI score0.00349EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/10/08 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-54290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in image export API in Canonical LXD before 6.5 and 5.21.4 on Linux allows network attackers to determine project existence without...

6.9CVSS5.5AI score0.00318EPSS
Exploits1References3
OSV
OSV
added 2025/10/07 10:14 p.m.2 views

GHSA-3F6C-7FW2-PPM4 vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class

Summary A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows...

7.1CVSS6.5AI score0.00226EPSS
Exploits0References6
NVD
NVD
added 2025/10/07 8:15 p.m.5 views

CVE-2025-6242

A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an...

7.1CVSS0.00226EPSS
Exploits0References2
OSV
OSV
added 2025/10/07 5:24 p.m.2 views

GHSA-WR9H-G72X-MWHM vLLM is vulnerable to timing attack at bearer auth

Summary The API key support in vLLM performed validation using a method that was vulnerable to a timing attack. This could potentially allow an attacker to discover a valid API key using an approach more efficient than brute force. Details...

7.5CVSS7AI score0.00538EPSS
Exploits1References6
Rows per page
Query Builder