Lucene search
+L

21277 matches found

CNVD
CNVD
added 2025/05/14 12:00 a.m.18 views

IBM Maximo Application Suite Elevation of Privilege Vulnerability

IBM Maximo Application Suite is a single platform for intelligent asset management, monitoring, maintenance, computer vision, security and reliability from International Business Machines IBM. An elevation of privilege vulnerability exists in IBM Maximo Application Suite, which stems from...

8.8CVSS7AI score0.00328EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/13 7:55 a.m.28 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to transformers-4.46.3-py3-none-any.whl CVE-2024-12720

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to transformers-4.46.3-py3-none-any.whl CVE-2024-12720. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-12720 DESCRIPTION: A Regular Expression Denial of Service...

8.8CVSS7.7AI score0.07262EPSS
SaveExploits6Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/13 7:38 a.m.13 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.17-py3-none-any.whl CVE-2024-56374

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.17-py3-none-any.whl CVE-2024-56374. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-56374 DESCRIPTION: An issue was discovered in Django 5.1 before...

7.5CVSS6.9AI score0.01923EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/13 7:22 a.m.21 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to netty-common-4.1.117.Final.jar CVE-2025-25193

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to netty-common-4.1.117.Final.jar CVE-2025-25193. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2025-25193 DESCRIPTION: Netty, an asynchronous, event-driven network...

5.5CVSS6.9AI score0.00391EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/13 7:21 a.m.7 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to gunicorn-22.0.0-py3-none-any.whl CVE-2024-6827

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to gunicorn-22.0.0-py3-none-any.whl CVE-2024-6827. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-6827 DESCRIPTION: Gunicorn version 21.2.0 does not properly...

7.5CVSS6.9AI score0.00777EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/05/13 12:00 a.m.13 views

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

7.8CVSS8AI score0.00545EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/10 7:08 p.m.35 views

CVE-2025-27695

Dell Wyse Management Suite, versions prior to WMS 5.1 contain an Authentication Bypass by Spoofing vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure...

4.9CVSS6.7AI score0.00697EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/10 5:59 p.m.8 views

Malicious code in solana-test-suite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 637014df713a194c727be0c3c8a6883b80fa29c7e66be089dd3bb82e49b915b4 Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

8.1AI score
SaveExploits0References2
OSV
OSV
added 2025/05/10 5:59 p.m.12 views

MAL-2025-4240 Malicious code in solana-test-suite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 637014df713a194c727be0c3c8a6883b80fa29c7e66be089dd3bb82e49b915b4 Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

8AI score
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/09 9:04 a.m.14 views

Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jit_module_from_flatbuffer.

Summary Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jitmodulefromflatbuffer.This bulletin contains information regarding the vulnerability and its fixture...

5.5CVSS6.1AI score0.00274EPSS
SaveExploits2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/09 9:02 a.m.15 views

Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch

Summary Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.This bulletin contains information regarding the vulnerability and its fixture...

5.5CVSS5.4AI score0.00256EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/09 9:01 a.m.15 views

Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch

Summary Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.This bulletin contains information regarding the vulnerability and its fixture...

7.5CVSS6.1AI score0.00428EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/09 9:00 a.m.24 views

Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability.

Summary Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. .This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...

8.8CVSS7AI score0.07262EPSS
SaveExploits6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:00 a.m.17 views

The vulnerability of the IBM Maximo Application Suite, a platform for managing corporate assets based on artificial intelligence, relates to the unlimited download of dangerous files. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the IBM Maximo Application Suite, a platform for managing corporate assets based on artificial intelligence, lies in its ability to allow unlimited uploading of sensitive files. Exploiting this vulnerability could enable an attacker operating remotely to gain unauthorized...

6.5CVSS5.5AI score0.00278EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2025/05/08 7:16 p.m.43 views

CVE-2025-27695

Dell Wyse Management Suite, versions prior to WMS 5.1 contain an Authentication Bypass by Spoofing vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure...

4.9CVSS0.00697EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/08 7:16 p.m.13 views

CVE-2025-27695

Dell Wyse Management Suite, versions prior to WMS 5.1 contain an Authentication Bypass by Spoofing vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure...

4.9CVSS5.8AI score0.00697EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/08 7:06 p.m.11 views

CVE-2025-27695

Dell Wyse Management Suite, versions prior to WMS 5.1 contain an Authentication Bypass by Spoofing vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure...

4.9CVSS6.9AI score0.00697EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/08 7:06 p.m.62 views

CVE-2025-27695

Summary: CVE-2025-27695 affects Dell Wyse Management Suite prior to version 5.1, with an Authentication Bypass by Spoofing vulnerability that can lead to Information Disclosure when a high-privileged attacker gains remote access. Root cause: bypass of authentication allowing unauthorized access t...

4.9CVSS4.9AI score0.00697EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/05/08 7:06 p.m.40 views

CVE-2025-27695

Dell Wyse Management Suite, versions prior to WMS 5.1 contain an Authentication Bypass by Spoofing vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure...

4.9CVSS0.00697EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/08 3:33 p.m.17 views

Security Bulletin: IBM Maximo Application Suite uses Python-3.11 which is vulnerable to CVE-2024-4032.

Summary IBM Maximo Application Suite uses Python-3.11 which is vulnerable to CVE-2024-4032. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-4032 DESCRIPTION: An unspecified error with ipaddress considers some not globally...

7.5CVSS6.5AI score0.01079EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder