Lucene search
+L

277912 matches found

CNNVD
CNNVD
added 2026/01/16 12:00 a.m.14 views

Acer Updater Service code-related vulnerabilities

The Acer Updater Service is a software update tool provided by Acer, a company based in Taiwan, China. Version 1.2.3500.0 of the Acer Updater Service contains a code vulnerability. This vulnerability stems from an issue with the service path, where a service path without quotes was used, which ma...

8.5CVSS5.9AI score0.00163EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/16 12:00 a.m.8 views

CVE-2025-24531

In OpenSC pampkcs11 before 0.6.13, pamsmauthenticate wrongly returns PAMIGNORE in many error situations such as an error triggered by a smartcard before login, allowing authentication bypass...

6.7CVSS6.7AI score0.0024EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.5 views

MiracleLinux 4 : bind-9.8.2-0.47.2.0.1.rc1.AXS4 (AXSA:2016-710:04)

"The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-710:04 advisory. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names ...

7.5CVSS7.5AI score0.25772EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.6 views

MiracleLinux 4 : trousers-0.3.13-2.AXS4 (AXSA:2014-608:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2014-608:01 advisory. Description : TrouSerS is an implementation of the Trusted Computing Group's Software Stack TSS specification. You can use TrouSerS to write applications that...

5CVSS5.5AI score0.10509EPSS
SaveExploits3References2
ATTACKERKB
ATTACKERKB
added 2026/01/16 12:00 a.m.4 views

CVE-2025-56451

Cross site scripting vulnerability in seeyon Zhiyuan A8+ Collaborative Management Software 7.0 via the topValue parameter to the seeyon/main.do endpoint...

6.1CVSS5.1AI score0.00192EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/01/16 12:00 a.m.15 views

PT-2026-3222

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAView affected versions not specified Description DIAView software contains a command injection issue. The software is susceptible to command injection, potentially allowing an attacker to execute arbitrary commands...

9.8CVSS5.8AI score0.0138EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2026/01/16 12:00 a.m.14 views

Delta Electronics DIAView 安全漏洞

Delta Electronics DIAView is an industrial configuration software from Delta Electronics China. Delta Electronics DIAView suffers from an authentication bypass vulnerability, no details of the vulnerability are provided at this time...

9.8CVSS5.8AI score0.00534EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/16 12:00 a.m.13 views

Delta Electronics DIAView 安全漏洞

Delta Electronics DIAView is an industrial configuration software from Delta Electronics, mainly used in SCADA systems. A command injection vulnerability exists in Delta Electronics DIAView, which can be exploited by an attacker to execute arbitrary commands on the system...

9.8CVSS7.4AI score0.0138EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/16 12:00 a.m.8 views

PT-2026-3251

Name of the Vulnerable Software and Affected Versions ConnectWise PSA versions prior to 2026.1 Description ConnectWise PSA versions older than 2026.1 may allow stored script code to execute in a user’s browser. This occurs because Time Entry notes stored in the Time Entry Audit Trail are rendered...

8.7CVSS5.7AI score0.00256EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
added 2026/01/16 12:00 a.m.4 views

CVE-2025-56451

Cross site scripting vulnerability in seeyon Zhiyuan A8+ Collaborative Management Software 7.0 via the topValue parameter to the seeyon/main.do endpoint...

6.1AI score0.00192EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.4 views

MiracleLinux 7 : firefox-45.6.0-1.0.1.el7.AXS7 (AXSA:2016-1195:10)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-1195:10 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed with this...

9.8CVSS7.7AI score0.21147EPSS
SaveExploits12References11
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.4 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003629)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003629 advisory. A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual SDM was mishandled in the development of some or all...

7.8CVSS6.7AI score0.18842EPSS
SaveExploits9References51
Cvelist
Cvelist
added 2026/01/16 12:00 a.m.32 views

CVE-2025-56451

Cross site scripting vulnerability in seeyon Zhiyuan A8+ Collaborative Management Software 7.0 via the topValue parameter to the seeyon/main.do endpoint...

0.00192EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/01/16 12:00 a.m.14 views

Laravel Valet security vulnerabilities

Laravel Valet is an open-source PHP development framework available on https://laravel.com/. There are security vulnerabilities in the version of Laravel Valet from 1.1.4 to 2.0.3. These vulnerabilities stem from allowing users to modify the valet command with root privileges, which could lead to...

8.4CVSS5.8AI score0.0019EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/16 12:00 a.m.23 views

AVEVA Process Optimization security vulnerabilities

AVEVA Process Optimization is a real-time process optimization software developed by the British company AVEVA. AVEVA Process Optimization has a security vulnerability, which arises from the possibility for authenticated attackers to embed OLE objects into graphics, potentially leading to privile...

8.5CVSS5.8AI score0.00202EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.9 views

ScienceLogic SL1 10.1.x < 12.1.3 / 12.2.x < 12.2.3 (CVE-2024-9537)

The version of ScienceLogic SL1 formerly EM7 installed on the remote host is prior to 12.1.3, 12.2.3, or 12.3. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-9537 advisory. - ScienceLogic SL1 is affected by an unspecified vulnerability involving an unspecified...

9.8CVSS5.9AI score0.03826EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.4 views

MiracleLinux 4 : qemu-kvm-0.12.1.2-2.479.AXS4.1 (AXSA:2015-492:05)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2015-492:05 advisory. KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running...

9.3CVSS7.3AI score0.13288EPSS
SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux
added 2026/01/16 12:00 a.m.7 views

Security update for zk (moderate)

openSUSE Security Update: Security update for zk Announcement ID: openSUSE-SU-2026:0016-1 Rating: moderate References: Cross-References: CVE-2025-58181 CVSS scores: CVE-2025-58181 SUSE: 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N Affected Products: openSUSE Backports...

6.9CVSS6.4AI score0.00561EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/01/15 11:25 p.m.3 views

CVE-2021-47795

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access...

8.7CVSS6.2AI score0.02615EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/01/15 11:25 p.m.21 views

CVE-2020-36929

CVE-2020-36929 concerns Brother BRPrint Auditor 3.0.7, which is vulnerable to an unquoted service path in its Windows services BrAuSvc and BRPA_Agent. The underlying issue allows local attackers to inject a malicious executable and escalate privileges on the system. The documented impact is local...

8.5CVSS6.9AI score0.00234EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder