Lucene search
+L

806 matches found

OSV
OSV
added 2025/08/15 3:4 p.m.4 views

CVE-2025-54989 Firebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability

Firebird is a relational database. Prior to versions 3.0.13, 4.0.6, and 5.0.3, there is an XDR message parsing NULL pointer dereference denial-of-service vulnerability in Firebird. This specific flaw exists within the parsing of xdr message from client. It leads to NULL pointer dereference and Do...

5.3CVSS6.3AI score0.00547EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/08/15 12:0 a.m.4 views

Firebird 代码问题漏洞

Firebird is an open source cross-platform relational database management system from the Firebird Foundation that provides multiple ANSI SQL-92 capabilities. A code issue vulnerability exists in Firebird versions prior to 3.0.13, prior to 4.0.6, and prior to 5.0.3, which stems from a null pointer...

7.5CVSS6.8AI score0.00547EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-38201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service xdrsetpagebase slab-out-of-bounds access by performing...

7.5CVSS6.2AI score0.03365EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/30 12:0 a.m.8 views

The vulnerability of the network traffic analysis, network detection, and response tool Palo Alto Networks Cortex XDR Agent, related to the handling of the zero pointer, allows attackers to trigger a service failure.

The vulnerability of the Palo Alto Networks Cortex XDR Agent, which is used for network traffic analysis, network detection, and response, relates to the handling of the zero pointer. Exploiting this vulnerability could allow attackers to trigger service failures...

5.5CVSS5.5AI score0.00161EPSS
Exploits0References2Affected Software1
Trellix
Trellix
added 2025/07/17 12:0 a.m.22 views

Detecting and Visualizing Lateral Movement Attacks with Trellix XDR

Detecting and Visualizing Lateral Movement Attacks with Trellix Helix Connect By Maulik Maheta and Adithya Chandra · July 17, 2025 Executive summary This blog marks the third installment in our series on detecting and visualizing lateral movement attacks with Trellix Helix Connect. A lateral...

6.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/06/15 12:21 a.m.5 views

CVE-2025-4228

An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root...

4.6CVSS6.9AI score0.00179EPSS
Exploits0References1
NVD
NVD
added 2025/06/13 12:15 a.m.11 views

CVE-2025-4228

An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root...

4.6CVSS0.00179EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/12 11:41 p.m.4 views

CVE-2025-4228 Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability

An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root...

4.6CVSS7.5AI score0.00179EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/12 11:41 p.m.21 views

CVE-2025-4228 Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability

An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root...

4.6CVSS0.00179EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/06/11 12:0 a.m.6 views

PT-2025-25360 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Broker Vm

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Broker VM affected versions not specified Description: An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex XDR Broker VM allows an authenticated administrative user to execute certain fil...

4.6CVSS6.5AI score0.00179EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2025/05/21 12:0 a.m.10 views

The vulnerability of the Broker VM platform’s security layer, Cortex XDR, arises from improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of the Broker VM platform’s security platform, Cortex XDR, is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.4CVSS5.9AI score0.00404EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/16 7:8 p.m.16 views

CVE-2025-0132

A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM. The attacker must have network access to the Broker VM to exploit this issue...

6.9CVSS7.1AI score0.00391EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/16 7:7 p.m.19 views

CVE-2025-0134

A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM...

6.5CVSS7.9AI score0.00404EPSS
Exploits0References3
NVD
NVD
added 2025/05/14 7:15 p.m.13 views

CVE-2025-0134

A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM...

6.5CVSS0.00404EPSS
Exploits0References1
NVD
NVD
added 2025/05/14 7:15 p.m.12 views

CVE-2025-0132

A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM. The attacker must have network access to the Broker VM to exploit this issue...

6.9CVSS0.00391EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/14 6:7 p.m.23 views

CVE-2025-0134 Cortex XDR Broker VM: Authenticated Code Injection Vulnerability in Broker VM

A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM...

6.5CVSS0.00404EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/14 6:7 p.m.8 views

CVE-2025-0134 Cortex XDR Broker VM: Authenticated Code Injection Vulnerability in Broker VM

A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM...

6.5CVSS7.9AI score0.00404EPSS
Exploits0References1
CVE
CVE
added 2025/05/14 6:7 p.m.39 views

CVE-2025-0134

CVE-2025-0134 describes a code-injection vulnerability in Palo Alto Networks Cortex XDR Broker VM. An authenticated user can execute arbitrary code with root privileges on the host operating system running the Broker VM. Connected sources corroborate an authenticated-code-injection flaw affecting...

6.5CVSS7.5AI score0.00404EPSS
Exploits0References1
CVE
CVE
added 2025/05/14 6:7 p.m.38 views

CVE-2025-0132

CVE-2025-0132 affects Palo Alto Networks Cortex XDR Broker VM, exposing a missing authentication flaw that allows an unauthenticated attacker with network access to disable certain internal services on the Broker VM. The CVE is documented with a CVSS 4.0 base vector (AV:N/AC:L/PR:N/UI:N/SI:N/VI:L...

6.9CVSS6.8AI score0.00391EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/14 6:7 p.m.12 views

CVE-2025-0132 Cortex XDR Broker VM: Unauthenticated User Can Disable Internal Services

A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM. The attacker must have network access to the Broker VM to exploit this issue...

6.9CVSS7.1AI score0.00391EPSS
Exploits0References1
Rows per page
Query Builder