Lucene search
K

95 matches found

Tenable Nessus
Tenable Nessus
added 2026/02/03 12:0 a.m.3 views

openSUSE 15 Security Update : logback (SUSE-SU-2026:0361-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0361-1 advisory. - CVE-2026-1225: ACE vulnerability in configuration file bsc1257094 Tenable has extracted the preceding description block directly from the SUSE security...

1.8CVSS5.3AI score0.00014EPSS
Exploits0References4
SUSE Linux
SUSE Linux
added 2026/02/02 1:20 p.m.3 views

Security update for logback

This update for logback fixes the following issues: CVE-2026-1225: ACE vulnerability in configuration file bsc1257094 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command liste...

6.4CVSS5.2AI score0.00014EPSS
Exploits0References4
OSV
OSV
added 2026/02/02 1:20 p.m.0 views

SUSE-SU-2026:0361-1 Security update for logback

This update for logback fixes the following issues: - CVE-2026-1225: ACE vulnerability in configuration file bsc1257094...

1.8CVSS5.8AI score0.00014EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.1 views

PT-2026-3646

Name of the Vulnerable Software and Affected Versions logback-core versions prior to 1.5.25 Description A configuration file processing issue exists in QOS.CH logback-core, potentially allowing an attacker to instantiate classes already present on the system's class path by manipulating a logback...

1.8CVSS5.4AI score0.00014EPSS
Exploits0References18
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/29 7:24 a.m.5 views

Security Bulletin: Vulnerability in ACE affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in ACE has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerability...

5.9CVSS9.2AI score0.00062EPSS
Exploits0Affected Software2
OpenVAS
OpenVAS
added 2025/10/09 12:0 a.m.4 views

openSUSE Security Advisory (SUSE-SU-2025:03456-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.8AI score0.00062EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2009-0625

Malware in sbrugna...

9CVSS6.2AI score0.00406EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2009-0628

Malware in sbrugna...

7.8CVSS6.2AI score0.00799EPSS
Exploits1References4
Kaspersky
Kaspersky
added 2025/08/28 12:0 a.m.2 views

KLA87209 ACE vulnerability in Microsoft Browser

Use after free vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2025-9478 Related products Microsoft-Edge CVE list CVE-2025-9478 critical Solution Install necessary updates from the Settings and more...

8.8CVSS7.9AI score0.00216EPSS
Exploits1References3
Kaspersky
Kaspersky
added 2025/07/17 12:0 a.m.4 views

KLA85940 ACE vulnerability in Opera

ACE vulnerability was found in Opera. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Opera 120 Related products Opera CVE list CVE-2025-6558 critical Solution Update to the latest version Download Opera Impacts ACE Arbitrary code execution...

8.8CVSS8.1AI score0.00253EPSS
Exploits0References3
Kaspersky
Kaspersky
added 2025/07/15 12:0 a.m.7 views

KLA85873 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Insufficient validation of untrusted input vulnerability in ANGLE can be exploited remotely t...

8.8CVSS8.8AI score0.00253EPSS
Exploits0References3
Kaspersky
Kaspersky
added 2025/03/19 12:0 a.m.29 views

KLA81713 ACE vulnerability in Google Chrome

Use after free vulnerability was found in Google Chrome. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories Stable Channel Update for Desktop Related products Google-Chrome CVE list CVE-2025-2476 critical Solution Update to the...

8.8CVSS9.5AI score0.10649EPSS
Exploits0References3
Kaspersky
Kaspersky
added 2025/01/22 12:0 a.m.13 views

KLA79265 ACE vulnerability in 7-Zip

A remote code execution vulnerability was found in 7-Zip. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2025-0411 Related products 7-Zip CVE list CVE-2025-0411 unknown Solution Update to the latest version Download...

7CVSS8.1AI score0.46723EPSS
Exploits8References3
RedhatCVE
RedhatCVE
added 2024/12/19 11:50 p.m.12 views

CVE-2024-12798

A flaw was found in Logback. This flaw allows a privileged attacker with write access to modify Logback configuration files or inject a malicious environment variable to execute arbitrary code via the JaninoEventEvaluator extension...

5.5CVSS6.7AI score0.00169EPSS
Exploits0References4
NVD
NVD
added 2024/12/19 4:15 p.m.25 views

CVE-2024-12798

ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core upto including version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 in Java applications allows attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

5.9CVSS0.00169EPSS
Exploits0References2
OSV
OSV
added 2024/12/19 4:15 p.m.16 views

CVE-2024-12798

ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core upto including version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 in Java applications allows attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7.5AI score
Exploits0References2
Debian CVE
Debian CVE
added 2024/12/19 3:14 p.m.13 views

CVE-2024-12798

ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core upto including version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 in Java applications allows attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

5.9CVSS7.3AI score0.00169EPSS
Exploits0
Kaspersky
Kaspersky
added 2024/10/09 12:0 a.m.19 views

KLA73912 ACE vulnerability in Mozilla Firefox

Use after free vulnerability was found in Mozilla Firefox ESR. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories MFSA2024-51 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is...

9.8CVSS10AI score0.30808EPSS
Exploits1References4
Kaspersky
Kaspersky
added 2024/10/09 12:0 a.m.14 views

KLA73911 ACE vulnerability in Mozilla Firefox ESR

Use after free vulnerability was found in Mozilla Firefox ESR. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories MFSA2024-51 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is...

9.8CVSS10AI score0.30808EPSS
Exploits1References4
Kaspersky
Kaspersky
added 2024/07/11 12:0 a.m.44 views

KLA70445 ACE vulnerability in Microsoft Mariner

Execute arbitrary code vulnerability was found in Microsoft Mariner. Malicious users can exploit this vulnerability to cause denial of service, bypass security restrictions. Original advisories CVE-2024-6387 Exploitation Public exploits exist for this vulnerability. Malware exists for this...

8.1CVSS8.7AI score0.63835EPSS
Exploits68References4
Rows per page
Query Builder