Lucene search
+L

1903 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2025/03/06 1:33 p.m.20 views

Security Bulletin: QRadar Pulse application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities (CVE-2024-52798, CVE-2024-47764)

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM has released a new version which addresses the vulnerabilities. Vulnerability Details CVEID:CVE-2024-52798 DESCRIPTION: path-to-regexp turns path strings int...

8.7CVSS7AI score0.00792EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2022-4964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set. CVE-2022-4964 Note that Nessus relies on the...

5.5CVSS5.6AI score0.00279EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/02/27 12:00 a.m.7 views

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in Linux kernel, which stems from a post-release reuse of the pps driver...

7.8CVSS6.3AI score0.00256EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/02/26 12:00 a.m.8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a PCM substream pointer not being checked for null pointers before dereferencing...

5.5CVSS5.5AI score0.00264EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/02/05 5:21 p.m.7 views

CVE-2019-11539

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin...

8CVSS6.5AI score0.98544EPSS
SaveExploits12References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:20 p.m.10 views

CVE-2019-11540

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4 and 8.3RX before 8.3R7.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2 and 5.4RX before 5.4R7.1, an unauthenticated, remote attacker can conduct a session hijacking attack...

9.8CVSS6.8AI score0.08259EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:20 p.m.14 views

CVE-2019-11508

In Pulse Secure Pulse Connect Secure PCS before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an authenticated attacker via the admin web interface can exploit Directory Traversal to execute arbitrary code on the appliance...

8.6CVSS7.4AI score0.14953EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:17 p.m.16 views

CVE-2019-11541

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.2RX before 8.2R12.1, users using SAML authentication with the Reuse Existing NC Pulse Session option may see authentication leaks...

8.3CVSS7AI score0.03989EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/01/21 12:00 a.m.12 views

The vulnerability of the remember() function in the Laravel Pulse performance monitoring and application usage analysis tool allows a hacker to execute arbitrary code.

The vulnerability of the remember function in the Laravel Pulse performance monitoring and application usage analysis tool is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS6AI score0.29497EPSS
SaveExploits3References3Affected Software1
Veracode
Veracode
added 2024/12/16 5:55 a.m.22 views

Remote Code Execution (RCE)

laravel/pulse is vulnerable to Remote Code Execution RCE. The vulnerability is due to insufficient input validation in the remember method of the Laravel\Pulse\Livewire\Concerns\RemembersQueries trait, allows arbitrary callables to be executed without properly validating their parameters or...

8.8CVSS8.2AI score0.29497EPSS
SaveExploits3References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/12/16 12:00 a.m.20 views

PT-2025-9958

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue was related to the ASoC: soc-pcm component, where the soc pcm ret function was used in the .prepare callback, ignoring...

5.5CVSS7.1AI score0.0018EPSS
SaveExploits0
Snyk
Snyk
added 2024/12/13 8:35 p.m.10 views

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the remember method of the RemembersQueries trait. An attacker can execute arbitrary code by invoking any function or static method where the callable has no parameters or lacks strict parameter types. PoC...

8.8CVSS7.9AI score0.29497EPSS
SaveExploits3References2
Github Security Blog
Github Security Blog
added 2024/12/13 8:35 p.m.27 views

Laravel Pulse Allows Remote Code Execution via Unprotected Query Method

A vulnerability has been discovered in Laravel Pulse that could allow remote code execution through the public remember method in the Laravel\Pulse\Livewire\Concerns\RemembersQueries trait. This method is accessible via Livewire components and can be exploited to call arbitrary callables within t...

8.8CVSS8.9AI score0.29497EPSS
SaveExploits3References4Affected Software1
OSV
OSV
added 2024/12/13 8:35 p.m.20 views

GHSA-8VWH-PR89-4MW2 Laravel Pulse Allows Remote Code Execution via Unprotected Query Method

A vulnerability has been discovered in Laravel Pulse that could allow remote code execution through the public remember method in the Laravel\Pulse\Livewire\Concerns\RemembersQueries trait. This method is accessible via Livewire components and can be exploited to call arbitrary callables within t...

8.7CVSS8.9AI score0.29497EPSS
SaveExploits3References4
NVD
NVD
added 2024/12/13 4:15 p.m.20 views

CVE-2024-55661

Laravel Pulse is a real-time application performance monitoring tool and dashboard for Laravel applications. A vulnerability has been discovered in Laravel Pulse prior to version 1.3.1 that could allow remote code execution through the public remember method in the...

8.8CVSS0.29497EPSS
SaveExploits3References2
Cvelist
Cvelist
added 2024/12/13 4:04 p.m.32 views

CVE-2024-55661 Laravel Pulse Allows Remote Code Execution via Unprotected Query Method

Laravel Pulse is a real-time application performance monitoring tool and dashboard for Laravel applications. A vulnerability has been discovered in Laravel Pulse prior to version 1.3.1 that could allow remote code execution through the public remember method in the...

8.7CVSS0.29497EPSS
SaveExploits3References2
OSV
OSV
added 2024/12/13 4:04 p.m.17 views

CVE-2024-55661 Laravel Pulse Allows Remote Code Execution via Unprotected Query Method

Laravel Pulse is a real-time application performance monitoring tool and dashboard for Laravel applications. A vulnerability has been discovered in Laravel Pulse prior to version 1.3.1 that could allow remote code execution through the public remember method in the...

8.7CVSS8.2AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/12/13 4:04 p.m.23 views

CVE-2024-55661 Laravel Pulse Allows Remote Code Execution via Unprotected Query Method

Laravel Pulse is a real-time application performance monitoring tool and dashboard for Laravel applications. A vulnerability has been discovered in Laravel Pulse prior to version 1.3.1 that could allow remote code execution through the public remember method in the...

8.7CVSS8.1AI score0.29497EPSS
SaveExploits3References2
CVE
CVE
added 2024/12/13 4:04 p.m.109 views

CVE-2024-55661

CVE-2024-55661 affects Laravel Pulse prior to 1.3.1. The vulnerability is triggered via the remember(callable $query, string $key = '') method in Laravel\Pulse\Livewire\Concerns\RemembersQueries, which allows an authenticated dashboard user to invoke arbitrary callables (functions or static metho...

8.8CVSS7.7AI score0.29497EPSS
SaveExploits3References2Affected Software1
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.13 views

Laravel Pulse 安全漏洞

Laravel Pulse is an open source real-time application performance monitoring tool and dashboard for Laravel applications from The Laravel Framework. A security vulnerability exists in Laravel Pulse versions prior to 1.3.1, which stems from vulnerability to a remote code execution attack that can ...

8.8CVSS7.7AI score0.29497EPSS
SaveExploits3References3
Rows per page
Query Builder