Lucene search
+L

1587 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:42 a.m.13 views

CVE-2022-26838

Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticated attacker to cause a denial-of-service DoS condition...

6.5CVSS6.6AI score0.00961EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:53 a.m.14 views

CVE-2020-10620

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an attacker with network access to directly communicate with SoftPAC, including, for example, stopping the service remotely...

9.8CVSS6.9AI score0.01214EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/07 7:24 a.m.5 views

CVE-2025-0980 JSON RPC authentication bypass in Nokia SR Linux

Nokia SR Linux is vulnerable to an authentication vulnerability allowing unauthorized access to the JSON-RPC service. When exploited, an invalid validation allows JSON RPC access without providing valid authentication credentials...

6.7AI score0.00144EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.8 views

PT-2026-1935

Name of the Vulnerable Software and Affected Versions RustFS versions 1.0.0-alpha.13 through 1.0.0-alpha.77 Description RustFS is a distributed object storage system built in Rust. A malformed gRPC GetMetrics request can cause the get metrics function to fail during deserialization of metric...

6.9CVSS6.8AI score0.00284EPSS
SaveExploits1References5
NVD
NVD
added 2026/01/02 9:16 p.m.24 views

CVE-2026-21452

MessagePack for Java is a serializer implementation for Java. A denial-of-service vulnerability exists in versions prior to 0.9.11 when deserializing .msgpack files containing EXT32 objects with attacker-controlled payload lengths. While MessagePack-Java parses extension headers lazily, it later...

7.5CVSS0.00559EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2025/12/15 12:0 a.m.3 views

Vulnerability of the MySQL Server component: The DML mechanism of the MySQL database management system’s server allows a hacker to trigger a service failure.

The vulnerability of the MySQL Server component relates to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.5CVSS7AI score0.00448EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/12/15 12:0 a.m.4 views

The vulnerability of the MySQL Server component of the database management system allows a hacker to cause a service failure.

The vulnerability of the MySQL Server database management system component lies in its unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

6.8CVSS7AI score0.00545EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/12/11 12:0 a.m.11 views

The vulnerability of the Consul and Consul Enterprise service configuration tool, which involves unlimited distribution of resources, allows a perpetrator to cause service failures.

The vulnerability of the Consul and Consul Enterprise service configuration tools is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

6.8CVSS5.8AI score0.00393EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/12/11 12:0 a.m.7 views

The vulnerability of the Consul and Consul Enterprise service configuration tool, which involves unlimited distribution of resources, allows a perpetrator to cause service failures.

The vulnerability of the Consul and Consul Enterprise service configuration tools is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

6.8CVSS5.8AI score0.00396EPSS
SaveExploits0References4Affected Software3
RedhatCVE
RedhatCVE
added 2025/12/10 2:32 a.m.8 views

CVE-2025-42874

SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input validation and improper handling of remote method calls. Exploitation does not require user interaction and could lead to...

7.9CVSS7.7AI score0.00419EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/09 4:17 p.m.7 views

CVE-2025-42874

SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input validation and improper handling of remote method calls. Exploitation does not require user interaction and could lead to...

7.9CVSS0.00419EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/09 2:14 a.m.45 views

CVE-2025-42874 Denial of service (DOS) in SAP NetWeaver (remote service for Xcelsius)

SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input validation and improper handling of remote method calls. Exploitation does not require user interaction and could lead to...

7.9CVSS0.00419EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/09 2:14 a.m.15 views

CVE-2025-42874

SAP NetWeaver remote service for Xcelsius is affected by CVE-2025-42874. The vulnerability arises from insufficient input validation and improper handling of remote method calls, allowing an attacker with network access and high privileges to execute arbitrary code on the affected system. Exploit...

7.9CVSS7.5AI score0.00419EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/09 2:14 a.m.4 views

CVE-2025-42874 Denial of service (DOS) in SAP NetWeaver (remote service for Xcelsius)

SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input validation and improper handling of remote method calls. Exploitation does not require user interaction and could lead to...

7.9CVSS7.5AI score0.00419EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.7 views

PT-2025-49764

SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input validation and improper handling of remote method calls. Exploitation does not require user interaction and could lead to...

7.9CVSS7.8AI score0.00419EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2025/12/09 12:0 a.m.7 views

ownCloud < 10.15.3 Multiple Vulnerabilities

ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; if description...

9.1CVSS7.8AI score0.00362EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/12/09 12:0 a.m.34 views

CVE-2025-65573

Cross Site Request Forgery CSRF vulnerability in AllskyTeam AllSky v2024.12.0606 allows remote attackers to cause a denial of service via function handleinterfacePOSTandstatus...

0.00289EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2025/12/08 12:0 a.m.8 views

TLS Supported Groups

This plugin detects which TLS supported groups entries are supported by the remote service. TRUSTED...

5.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/12/08 12:0 a.m.13 views

Post-quantum X509 Signature Algorithms

This plugin detects which post-quantum TLS signature algorithms are supported by the remote service. TRUSTED...

5.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/12/05 12:0 a.m.4 views

The vulnerability of the Item_direct_view_ref::derived_field_transformer_for_where function in the MariaDB database management system allows a attacker to cause a service failure.

The vulnerability of the Itemdirectviewref::derivedfieldtransformerforwhere function in the MariaDB database management system is related to improper behavior. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

6.8CVSS6.6AI score0.00441EPSS
SaveExploits0References9Affected Software13
Rows per page
Query Builder