Lucene search
+L

1164 matches found

Tenable Nessus
Tenable Nessus
added 2025/04/15 12:0 a.m.11 views

RHEL 7 : openstack-neutron (RHSA-2014:1942)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:1942 advisory. OpenStack Networking neutron is a pluggable, scalable, and API-driven system that provisions networking services to virtual machines. Its main functi...

4CVSS5.6AI score0.03936EPSS
SaveExploits0References9
OSV
OSV
added 2025/03/12 9:41 a.m.12 views

CVE-2024-58089 btrfs: fix double accounting race when btrfs_run_delalloc_range() failed

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double accounting race when btrfsrundelallocrange failed BUG When running btrfs with block size 4K smaller than page size 64K, aarch64, there is a very high chance to crash the kernel at generic/750, with the following...

7.8CVSS5.7AI score
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2013-4184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks CVE-2013-4184 Note that Nessus relies on the presence of the package as reported by...

5.5CVSS5.7AI score0.00504EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2021-29499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SIF is an open source implementation of the Singularity Container Image Format. The siftool new command and func siftool.New produce predictable UUID identifier...

7.5CVSS7.1AI score0.00958EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/02/05 10:38 p.m.16 views

CVE-2022-36045

NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. It utilizes web sockets for instant interactions and real-time notifications. utils.generateUUID, a helper function available in essentially all versions of NodeBB as far back as v1.0.1 and...

9.8CVSS6.9AI score0.01073EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/05 9:40 p.m.10 views

CVE-2022-24781

Geon is a board game based on solving questions about the Pythagorean Theorem. Malicious users can obtain the uuid from other users, spoof that uuid through the browser console and become co-owners of the target session. This issue is patched in version 1.1.0. No known workaround exists...

7.1CVSS6.6AI score0.0094EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/03 8:57 a.m.4 views

SUSE-SU-2025:20057-1 Security update for rust-keylime

This update for rust-keylime fixes the following issues: - Update vendored crates CVE-2024-43806, bsc1229952, bsc1230029 rustix 0.37.25 rustix 0.38.34 shlex 1.3.0 - Update to version 0.2.6+13: Enable test functional/iak-idevid-persisted-and-protected builddeps: bump uuid from 1.7.0 to 1.10.0...

7.5CVSS6AI score0.00949EPSS
SaveExploits0References6
SUSE Linux
SUSE Linux
added 2025/02/03 8:57 a.m.4 views

Security update for rust-keylime

This update for rust-keylime fixes the following issues: Update vendored crates CVE-2024-43806, bsc1229952, bsc1230029 rustix 0.37.25 rustix 0.38.34 shlex 1.3.0 Update to version 0.2.6+13: Enable test functional/iak-idevid-persisted-and-protected builddeps: bump uuid from 1.7.0 to 1.10.0 builddep...

7.5CVSS7.7AI score0.00949EPSS
SaveExploits0References10
OSV
OSV
added 2025/01/24 3:45 p.m.10 views

CVE-2025-22607 Coolify Vulnerable to GitHub / GitLab OAuth Secrets Leak

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization allows any authenticated user to fetch the details page for any GitHub / GitLab configuration on a Coolify instance by only knowing the UU...

5.7CVSS6.7AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/05 12:0 a.m.5 views

PT-2025-5656 · Avif · Avif

Name of the Vulnerable Software and Affected Versions: avif affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the avifImageAddUUIDProperty function, as indicated by the crash state. Technical details about the issue include the...

7.4AI score
SaveExploits0References2
OSV
OSV
added 2024/12/27 2:15 p.m.12 views

UBUNTU-CVE-2024-53216

In the Linux kernel, the following vulnerability has been resolved: nfsd: release svcexpkey/svcexport with rcuwork The last reference for cachehead can be reduced to zero in cshow and eshowusing rcureadlock and rcureadunlock. Consequently, svcexportput and expkeyput will be invoked, leading to tw...

7.8CVSS6.5AI score0.00222EPSS
SaveExploits0References10
NVD
NVD
added 2024/12/20 9:15 p.m.48 views

CVE-2024-56335

vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwardenrs. In affected versions an attacker is capable of updating or deleting groups from an organization given a few conditions: 1. The attacker has a user account in the server. 2. The attacker's...

7.6CVSS0.0034EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/20 8:15 p.m.37 views

CVE-2024-56335 Privilege escalation allows organization groups to be updated/deleted if their UUID is known in vaultwarden

vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwardenrs. In affected versions an attacker is capable of updating or deleting groups from an organization given a few conditions: 1. The attacker has a user account in the server. 2. The attacker's...

7.6CVSS0.0034EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/20 8:15 p.m.10 views

CVE-2024-56335 Privilege escalation allows organization groups to be updated/deleted if their UUID is known in vaultwarden

vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwardenrs. In affected versions an attacker is capable of updating or deleting groups from an organization given a few conditions: 1. The attacker has a user account in the server. 2. The attacker's...

7.6CVSS7.4AI score0.0034EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/20 8:15 p.m.89 views

CVE-2024-56335

Vaultwarden (unofficial Bitwarden server in Rust) is affected by CVE-2024-56335 when ORG_GROUPS_ENABLED is enabled. An account with admin/owner rights in an unrelated organization, who also has a user account on the server, can update or delete groups in a target organization if they know the tar...

7.6CVSS7.7AI score0.0034EPSS
SaveExploits0References1Affected Software1
FreeBSD
FreeBSD
added 2024/12/20 12:0 a.m.4 views

Vaultwarden -- Admin organization permissions

The Vaultwarden project reports: Admins from any organization were able to modify or delete groups in any other organization if they know the group's uuid...

7.2AI score
SaveExploits0References1
OSV
OSV
added 2024/12/18 6:19 p.m.10 views

GHSA-HVM9-WC8J-MGRC TShock Security Escalation Exploit

Impact An issue with the way OTAPI manages client connections results in stale UUIDs remaining on RemoteClient instances after a player disconnects. Because of this, if the following conditions are met a player may assume the login state of a previously connected player: 1. The server has UUID...

8.9CVSS6.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2024/12/18 6:19 p.m.22 views

TShock Security Escalation Exploit

Impact An issue with the way OTAPI manages client connections results in stale UUIDs remaining on RemoteClient instances after a player disconnects. Because of this, if the following conditions are met a player may assume the login state of a previously connected player: 1. The server has UUID...

6.9AI score
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/12/18 12:0 a.m.5 views

PT-2024-40331 · Tshock +1 · Tshock +1

Name of the Vulnerable Software and Affected Versions: TShock versions prior to 5.2.1 OTAPI affected versions not specified Description: An issue with OTAPI's management of client connections leads to stale UUIDs remaining on RemoteClient instances after a player disconnects. This can cause a...

8.9CVSS7AI score
SaveExploits0References4
Veeam
Veeam
added 2024/12/17 12:0 a.m.95 views

"Failed to convert [Not Settable] to UUID."

Challenge Veeam Backup & Replication task interacting with Proxmox VE host fails with: Failed to convert Not Settable to UUID Cause This occurs when the Proxmox VE host has an empty bios UUID, or the reported bios UUID value is unparsable. Solution 1. Remove workers if any from the Veeam Backup &...

7AI score
SaveExploits0Affected Software1
Rows per page
Query Builder