CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

34740 matches found

OSV•added 2025/12/09 4:17 p.m.•14 views

CVE-2024-56837

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.17.0, RUGGEDCOM ROX MX5000RE All versions V2.17.0, RUGGEDCOM ROX RX1400 All versions V2.17.0, RUGGEDCOM ROX RX1500 All versions V2.17.0, RUGGEDCOM ROX RX1501 All versions V2.17.0, RUGGEDCOM ROX RX1510 All versions V2.17.0...

8.6CVSS5.7AI score0.00517EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:17 p.m.•13 views

CVE-2024-56835

8.8CVSS0.00507EPSS

SaveExploits0References1

OSV•added 2025/12/09 11:38 a.m.•13 views

BIT-APACHE-2025-58098 Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...

Apache HTTP Server 2.4.65 and earlier with Server Side Includes SSI enabled and modcgid but not modcgi passes the shell-escaped query string to exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue...

8.3CVSS6.8AI score0.01424EPSS

SaveExploits0References3

CVE•added 2025/12/09 10:44 a.m.•23 views

CVE-2024-56837

Siemens RUGGEDCOM ROX II family devices (ROX II) prior to v2.17.0 are affected by a code-injection vulnerability caused by insufficient validation during installation and loading of certain configuration files. Several sources document that an attacker could exploit this to spawn a reverse shell ...

8.6CVSS8.9AI score0.00517EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2025/12/09 10:44 a.m.•5 views

CVE-2024-56837

8.6CVSS8.9AI score0.00517EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 10:44 a.m.•34 views

CVE-2024-56837

8.6CVSS0.00517EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 10:44 a.m.•37 views

CVE-2024-56836

7.7CVSS0.00433EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 10:44 a.m.•5 views

CVE-2024-56836

7.7CVSS8.9AI score0.00433EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•26 views

CVE-2024-56836

The CVE-2024-56836 issue affects Siemens RUGGEDCOM ROX II devices (MX5000/MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000) with versions before 2.17.0. According to connected documents, the vulnerability arises during Dynamic DNS configuration where additional con...

8.8CVSS8.9AI score0.00433EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2025/12/09 10:44 a.m.•4 views

CVE-2024-56835

8.8CVSS9AI score0.00507EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 10:44 a.m.•27 views

CVE-2024-56835

8.8CVSS0.00507EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•25 views

CVE-2024-56835

CVE-2024-56835 affects Siemens RUGGEDCOM ROX II family (MX5000/MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000) prior to v2.17.0. The DHCP Server configuration file is subject to code injection, enabling an attacker to spawn a reverse shell and gain root access. C...

8.8CVSS9AI score0.00507EPSS

SaveExploits0References1Affected Software1

RedhatCVE•added 2025/12/09 9:33 a.m.•11 views

CVE-2025-27020

Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system . This issue affects MTC-9: from R22.1.1.0275 before R23.0...

9.8CVSS7.8AI score0.00502EPSS

SaveExploits0References1

RedhatCVE•added 2025/12/09 9:33 a.m.•15 views

CVE-2025-27019

Remote shell service RSH in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse shell.This issue affects MTC-9: from R22.1.1.0275 before R23.0...

9.8CVSS6.9AI score0.00426EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 8:13 a.m.•38 views

CVE-2025-41693 Authenticated Denial-of-Service via SSH

A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected...

4.3CVSS0.00515EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 8:13 a.m.•5 views

CVE-2025-41693 Authenticated Denial-of-Service via SSH

4.3CVSS6.9AI score0.00515EPSS

SaveExploits0References1

CVE•added 2025/12/09 8:13 a.m.•21 views

CVE-2025-41693

CVE-2025-41693 affects PHOENIX CONTACT FL SWITCH (industrial Ethernet switch). Technical details across sources indicate the SSH feature can be abused by a low-privileged remote attacker to execute commands after login. The vulnerability leads to a persistent process that consumes resources and d...

4.3CVSS6.9AI score0.00515EPSS

SaveExploits0References1Affected Software1

OSV•added 2025/12/09 8:05 a.m.•19 views

MAL-2025-192386 Malicious code in telcoo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c96937a82adce2ecc6628245fd858587131511b4145c04f577ec25d8fa846577 Running the module starts a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-12-evil-rce...

7.5AI score

SaveExploits0References1

OSSF Malicious Packages•added 2025/12/09 8:05 a.m.•10 views

Malicious code in telcoo (PyPI)

7.6AI score

SaveExploits0References1

Microsoft CVE•added 2025/12/09 8:00 a.m.•7 views

Windows Shell Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Shell allows an authorized attacker to elevate privileges locally...

7.8CVSS7.1AI score0.0025EPSS

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by