Lucene search
+L

5101 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-23516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah = 2.2.0, 2.19.1 uses recursion...

7.5CVSS6.7AI score0.01104EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2022-21341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. Supported versions that are affected...

5.3CVSS6.6AI score0.03765EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2019-2978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u231, 8u221,...

4.3CVSS6.7AI score0.03284EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2021-35578

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE:...

5.3CVSS6.7AI score0.06218EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-30698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that...

5.6CVSS6.7AI score0.0059EPSS
SaveExploits0References2
Redos
Redos
added 2025/08/18 12:0 a.m.5 views

ROS-20250818-05

Wireshark computer network traffic analyzer vulnerability related to insufficient validation of user data in GQUIC dissector. of user data in the GQUIC dissector. Exploitation of the vulnerability could allow an attacker, acting remotely to cause a denial of service...

6.5CVSS6.6AI score0.01001EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/08/17 8:29 a.m.14 views

CVE-2025-7641

The Assistant for NextGEN Gallery plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation in the /wp-json/nextgenassistant/v1.0.0/control REST endpoint in all versions up to, and including, 1.0.9. This makes it possible for unauthenticated...

7.5CVSS7.2AI score0.00531EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-50104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and...

2.7CVSS6.3AI score0.00423EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/08/13 2:0 p.m.6 views

Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.1CVSS6.3AI score0.00407EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/08/12 2:50 p.m.5 views

CVE-2025-5456

A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a remote unauthenticated attacker to trigger a...

7.5CVSS7.5AI score0.01068EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/08/12 9:40 a.m.1 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the ASN1ObjectIdentifier. An attacker can cause excessive resource consumption by submitting specially crafted ASN.1 Object Identifiers, potentially leading to service disruption...

6.3CVSS6.9AI score0.00541EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/08/12 12:0 a.m.18 views

The vulnerability of the software for deploying and executing AI models developed by NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) relates to buffer overflows in dynamic memory. This vulnerability allows attackers to cause system failures, gain unauthorized access to protected information, and execute arbitrary code.

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause service failures, gain unauthorized access...

10CVSS6.6AI score0.0196EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/11 12:0 a.m.13 views

The vulnerability of the DEVICE_PING command in the monitoring and control software for solar energy systems, Tigo Cloud Connect Advanced (CCA), allows a hacker to gain unauthorized access to protected information, execute arbitrary commands, or cause service interruptions.

The vulnerability of the DEVICEPING command in the monitoring and management tool for solar energy systems, Tigo Cloud Connect Advanced CCA, is related to the lack of data cleaning at the control level during the processing of the final endpoint /cgi-bin/mobileapi. Exploiting this vulnerability c...

9CVSS5.8AI score0.15849EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/11 12:0 a.m.15 views

The vulnerability of the mlx5 driver for the RDMA subsystem of Linux operating systems allows a hacker to escalate their privileges, execute arbitrary code, or cause service failures.

The vulnerability of the mlx5 driver for the RDMA subsystem of Linux operating systems relates to the ability to access memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, or cause service failures...

7.8CVSS6.8AI score0.00153EPSS
SaveExploits0References18Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/08/11 12:0 a.m.11 views

The vulnerability in the kernel module drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35hwseq.c kernel of the Linux operating system is related to improper checking of power conditions and hardware states. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS5.9AI score0.00154EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/08/11 12:0 a.m.11 views

The vulnerability of the `cifs_signal_cifsd_for_reconnect()` function in the `fs/smb/client/cifsglob.h` and `fs/smb/client/connect.c` files, which are part of the SMB client support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the cifssignalcifsdforreconnect function in the fs/smb/client/cifsglob.h and fs/smb/client/connect.c files, which are part of the SMB client support in Linux kernel, is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a...

6.2CVSS6.1AI score0.00211EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/08/11 12:0 a.m.15 views

The vulnerability of the `update-ldcache` function in software for creating and running NVIDIA Container Toolkit containers and NVIDIA GPU Operator resource management software allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability in the update-ldcache function of software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, arises from an improper definition of symbolic references before accessing files. Exploiting this vulnerabili...

8.5CVSS7.8AI score0.00684EPSS
SaveExploits0References3Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/08/11 12:0 a.m.14 views

The vulnerability of the kmem_cachedestroy() function in the dswstate.c module of Linux kernel allows a hacker to cause a service failure.

The vulnerability of the kmemcacheDestroy function in the dswstate.c module of Linux kernel systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00167EPSS
SaveExploits0References17Affected Software8
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2022-21265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.27 and prior. Easily...

5.5CVSS6.5AI score0.01478EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-35584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: ndbcluster/plugin DDL. Supported versions that are affected are 8.0.26 and prior...

4.3CVSS6.5AI score0.00978EPSS
SaveExploits0References2
Rows per page
Query Builder