Lucene search
+L

334 matches found

CNNVD
CNNVD
•added 2025/11/20 12:00 a.m.•13 views

IBM Concert 安全漏洞

IBM Concert is a generative artificial intelligence-driven automated application management and monitoring tool based on the watsonx platform, announced by IBM in May 2024 at the IBMThink conference in Boston, USA. IBM Concert suffers from an information disclosure vulnerability that stems from t...

7.5CVSS5.8AI score0.00254EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/11/20 12:00 a.m.•12 views

PT-2025-47632

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 2.0.0 Description IBM Concert versions 1.0.0 through 2.0.0 may reveal sensitive server information through HTTP response headers. This information could potentially assist in launching further attacks against...

5.3CVSS5.2AI score0.00254EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/11/12 12:36 a.m.•15 views

CVE-2025-42884

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI provider.�This could further lead to disclosure or modification of information about the server. There i...

6.5CVSS6.5AI score0.0026EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/17 12:45 p.m.•18 views

CVE-2025-9804

An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs. A low-privileged user may exploit this flaw to perform unauthorized operations, including accessing server-level...

9.6CVSS6.8AI score0.00559EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/16 3:30 p.m.•22 views

EUVD-2025-34754

An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs. A low-privileged user may exploit this flaw to perform unauthorized operations, including accessing server-level...

9.6CVSS6.3AI score0.00559EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/16 1:15 p.m.•20 views

CVE-2025-9804

An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs. A low-privileged user may exploit this flaw to perform unauthorized operations, including accessing server-level...

9.6CVSS0.00559EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/16 12:33 p.m.•6 views

CVE-2025-9804 Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs

An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs. A low-privileged user may exploit this flaw to perform unauthorized operations, including accessing server-level...

9.6CVSS6.5AI score0.00559EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/16 12:33 p.m.•26 views

CVE-2025-9804 Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs

An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs. A low-privileged user may exploit this flaw to perform unauthorized operations, including accessing server-level...

9.6CVSS0.00559EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/16 12:00 a.m.•16 views

PT-2025-42463

Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description An improper access control issue exists in multiple WSO2 products due to insufficient permission enforcement in internal SOAP Admin Services and System REST APIs. This allows a...

9.6CVSS6.5AI score0.00559EPSS
SaveExploits0References11
Microsoft CVE
Microsoft CVE
•added 2025/10/14 2:00 p.m.•16 views

Windows State Repository API Server File Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally...

5.5CVSS6.5AI score0.0045EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•9 views

EUVD-2018-9315

Malware in sbrugna...

7.5CVSS7.6AI score0.01467EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2020-26188

Malware in sbrugna...

4.3CVSS4.8AI score0.00727EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-1999-1241

Malware in sbrugna...

7.5CVSS6.4AI score0.01351EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2018-12578

Malware in sbrugna...

4.3CVSS4.8AI score0.00976EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2021-1336

Malware in sbrugna...

5.3CVSS7.2AI score0.01178EPSS
SaveExploits0References14
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2020-11773

Malware in sbrugna...

5.3CVSS5.6AI score0.0171EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2015-7740

Malware in sbrugna...

7.1CVSS7.3AI score0.00744EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2012-0738

Malware in sbrugna...

3.5CVSS6.4AI score0.00713EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2021-10300

Malware in sbrugna...

8.1CVSS7AI score0.00698EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-6679

Malicious code in bioql PyPI...

4.3CVSS4.9AI score0.00616EPSS
SaveExploits0References4
Rows per page
Query Builder