Lucene search
K

141 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/13 12:0 a.m.2 views

Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, or 12.1.x. It is, therefore, affected by a vulnerability. A server-side request forgery SSRF vulnerability in the IKEv2 implementation of Palo Alto Networks PAN- OS software allo...

8.3CVSS5.8AI score0.00065EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/21 12:4 p.m.4 views

Security Bulletin: A security vulnerability may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Standard.

Summary A security vulnerability may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Standard CVE-2024-29371. IBM WebSphere Liberty has been updated within IBM CICS TX Standard to address this vulnerability. Vulnerability Details CVEID:CVE-2024-29371 DESCRIPTION: In jose4j before...

7.5CVSS5.6AI score0.00021EPSS
Exploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/21 12:1 p.m.1 views

Security Bulletin: A security vulnerability may affect IBM WebSphere Liberty that is shipped with TXSeries for Multiplatforms (CVE-2024-29371).

Summary A security vulnerability may affect IBM WebSphere Liberty that is shipped with TXSeries for Multiplatforms CVE-2024-29371. IBM WebSphere Liberty has been updated within TXSeries for Multiplatforms to address this vulnerability. Vulnerability Details CVEID:CVE-2024-29371 DESCRIPTION: In...

7.5CVSS5.6AI score0.00021EPSS
Exploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/09 2:42 p.m.4 views

Security Bulletin: Due to the use of JetBrains Kotlin, IBM webMethods BPM is vulnerable to the use of Java API for temporary file and folder creation

Summary IBM webMethods BPM uses JetBrains Kotlin which is vulnerable to the use of Java API for temporary file and folder creation. Vulnerability Details CVEID:CVE-2020-29582 DESCRIPTION: In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An...

5.3CVSS5.8AI score0.00004EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2026/02/16 12:30 p.m.1 views

EUVD-2026-6102

Mattermost versions 11.1.x = 11.1.2, 10.11.x = 10.11.9, 11.2.x = 11.2.1 fail to properly validate login method restrictions which allows an authenticated user to bypass SSO-only login requirements via userID-based authentication. Mattermost Advisory ID: MMSA-2025-00548...

5.4CVSS5.5AI score0.00052EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/16 12:0 a.m.3 views

Mattermost 安全漏洞

Mattermost is an open-source collaboration platform developed by the American company Mattermost. Versions of Mattermost such as 11.1.2 and earlier 11.1.x series as well as 10.11.9 and earlier 10.11.x series have security vulnerabilities. These vulnerabilities stem from improper authentication of...

4.3CVSS5.8AI score0.0004EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/20 12:0 a.m.0 views

IBM ApplinX cross-site scripting vulnerability

IBM ApplinX is a product of American International Business Machines IBM that focuses on converting green-screen interfaces into modern web-based applications. Version 11.1 of IBM ApplinX contains a cross-site scripting vulnerability. This vulnerability arises because authenticated users can embe...

6.4CVSS5.8AI score0.00049EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 9:53 a.m.5 views

CVE-2020-10112

Citrix Gateway 11.1, 12.0, and 12.1 allows Cache Poisoning. NOTE: Citrix disputes this as not a vulnerability. By default, Citrix ADC only caches static content served under certain URL paths for Citrix Gateway usage. No dynamic content is served under these paths, which implies that those cached...

5.8CVSS6.8AI score0.00501EPSS
Exploits3References1
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.1 views

PT-2025-53861

Name of the Vulnerable Software and Affected Versions PHPEMS versions prior to 11.1 Description A race condition exists in the Coupon Handler component of PHPEMS. This issue can be exploited remotely, though the complexity of an attack is considered high and exploitability is difficult. The explo...

3.1CVSS6.1AI score0.00027EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.3 views

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost versions 11.1.0 and prior to 11.1.x, 11.0.5 and prior to 11.0.x, 10.12.3 and prior to 10.12.x, and 10.11.7 and prior to 10.11.x. The vulnerability stems fr...

4.1CVSS6.4AI score0.00029EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.2 views

Ruijie AP_RGOS 安全漏洞

Ruijie APRGOS is a general-purpose network operating system from China's Ruijie Ruijie Corporation. A security vulnerability exists in Ruijie APRGOS version 11.1.x. The vulnerability stems from a command injection in the webaction.do endpoint, which could lead to file disclosure and device outage...

7.2CVSS7.1AI score0.00076EPSS
Exploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2025/11/11 1:30 p.m.4 views

Security Bulletin: Due to the use of Eclipse JGit, IBM webMethods Integration is affected by denial of service, and other security issues.

Summary Eclipse JGit is used by IBM webMethods Integration in repository function CVE-2025-4949 Vulnerability Details CVEID:CVE-2025-4949 DESCRIPTION: In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implemen...

6.8CVSS6.4AI score0.00197EPSS
Exploits1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/10/08 12:0 a.m.2 views

Palo Alto Networks PAN-OS 10.2.x < 10.2.17 / 11.1.x < 11.1.6-h21 / 11.1.7-10.x < 11.1.10-h7 / 11.2.x < 11.2.8 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.2.x prior to 10.2.17, 11.1.x prior to 11.1.6-h21, 11.1.7-10.x prior to 11.1.10-h7, or 11.2.x prior to 11.2.8. It is, therefore, affected by a vulnerability. An improper input neutralization vulnerability in the management w...

7.2CVSS5.9AI score0.00057EPSS
Exploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-19356

Malware in sbrugna...

7.5CVSS6.4AI score0.00107EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-10242

Malware in sbrugna...

4.8CVSS5.1AI score0.0038EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-59686

Malicious code in bioql PyPI...

4.9CVSS5.1AI score0.0002EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/04 2:13 p.m.10 views

CVE-2025-6785 Tesla Model 3 Physical CAN Bus Injection

Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to control remote start functions of the vehicle. Testing completed on Tesla Model 3 vehicles with software version v11.1 2023.20.9...

4.7CVSS6.6AI score0.00045EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/08/21 12:0 a.m.3 views

PT-2025-34282 · Esri · Esri Portal For Arcgis Enterprise Sites

Name of the Vulnerable Software and Affected Versions: Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 through 11.4 Description: A stored Cross-site Scripting issue exists that may allow a remote, authenticated attacker to inject a malicious file containing an XSS script. When loaded, thi...

4.8CVSS5.8AI score0.00041EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/07/18 12:0 a.m.2 views

WordPress plugin Vertical scroll image slideshow gallery cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.4CVSS5.4AI score0.00163EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/06/04 12:0 a.m.1 views

Grafana 11.1.x < 11.5.3+security-01 Cross-site Scripting

According to its self-reported version, the Grafana install hosted on the remote host is 11.1.x earlier than 11.2.8+security-01, or 11.1.x earlier than 11.3.5+security-01, or 11.1.x earlier than 11.4.3+security-01, or 11.1.x earlier than 11.5.3+security-01, or 11.1.x earlier than...

6.8CVSS6.7AI score0.00042EPSS
Exploits0References2
Rows per page
Query Builder