Lucene search
+L

1504 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 6:45 p.m.11 views

CVE-2021-40837

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-0101 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the...

5.3CVSS6.9AI score0.00657EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 5:43 a.m.15 views

CVE-2013-1202

Cisco ACE A23.6 allows log retention DoS...

7.5CVSS7.2AI score0.01044EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:03 a.m.15 views

CVE-2010-2823

Unspecified vulnerability in the deep packet inspection feature on the Cisco Application Control Engine ACE 4710 appliance with software before A32.6 allows remote attackers to cause a denial of service device reload via crafted HTTP packets, related to HTTP, RTSP, and SIP inspection, aka Bug ID...

7.8CVSS6.9AI score0.01758EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/22 1:15 a.m.30 views

CVE-2025-3884

Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cloudera Hue. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

7.5CVSS0.01711EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/22 12:49 a.m.116 views

CVE-2025-3884

CVE-2025-3884 concerns Cloudera Hue’s Ace Editor, where a directory-traversal flaw arises from inadequate validation of a user-supplied path before file operations. The issue could allow remote, unauthenticated attackers to disclose sensitive information within the service account context on affe...

7.5CVSS6AI score0.01711EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/05/22 12:49 a.m.10 views

CVE-2025-3884 Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability

Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cloudera Hue. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

7.5CVSS7AI score
SaveExploits0References3
Cvelist
Cvelist
added 2025/05/22 12:49 a.m.63 views

CVE-2025-3884 Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability

Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cloudera Hue. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

7.5CVSS0.01711EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/22 12:00 a.m.12 views

Cloudera Hue 路径遍历漏洞

Cloudera Hue is a web-based, open source interactive query editor for visualizing and sharing data from Cloudera, Inc. A path traversal vulnerability exists in Cloudera Hue that stems from Ace Editor not properly validating user-supplied paths, which could lead to information disclosure...

7.5CVSS7.3AI score0.01711EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 11:55 p.m.21 views

CVE-2009-0621

Cisco ACE 4710 Application Control Engine Appliance before A18a uses default 1 usernames and 2 passwords for a the administrator, b web management, and c device management, which makes it easier for remote attackers to perform configuration changes to the Device Manager and other components, or...

10CVSS7AI score0.01839EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 9:11 p.m.13 views

CVE-2007-5025

Unspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 allows attackers to have an unknown impact via an unspecified manipulation of "images stored in virtual machines downloaded by the user."...

9.3CVSS6.8AI score0.01157EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:37 p.m.14 views

CVE-2009-0622

Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.2 and Cisco ACE 4710 Application Control Engine Appliance before A18a allows remote authenticated users to execute arbitrary operating-system commands through a command...

9CVSS7.6AI score0.0147EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:37 p.m.19 views

CVE-2009-0623

Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.3 and Cisco ACE 4710 Application Control Engine Appliance before A32.1 allows remote attackers to cause a denial of service device reload via a crafted SSH packet...

7.8CVSS6.8AI score0.01265EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:37 p.m.14 views

CVE-2009-0625

Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.2 and Cisco ACE 4710 Application Control Engine Appliance before A18.0 allows remote attackers to cause a denial of service device reload via a crafted SNMPv3 packet...

7.8CVSS6.8AI score0.01681EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:37 p.m.20 views

CVE-2009-0620

Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.1 uses default 1 usernames and 2 passwords for a the administrator and b web management, which makes it easier for remote attackers to perform configuration changes or obtain operating-system access...

10CVSS7AI score0.01839EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:14 p.m.19 views

CVE-2009-0742

The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive information...

7.8CVSS7AI score0.01061EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/05/13 12:00 a.m.15 views

The vulnerability of the Ace Editor web interactive query editor in Hue allows a hacker to read arbitrary files.

The vulnerability of the Ace Editor web interactive query editor in Hue is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to read arbitrary files by sending specially crafted HTTP requests...

7.8CVSS7.3AI score0.01711EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2025/05/09 3:48 p.m.5 views

MAL-2025-3961 Malicious code in ace-tools (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/09 3:48 p.m.5 views

Malicious code in ace-tools (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

6.9AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2025/04/23 12:00 a.m.27 views

(0Day) Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cloudera Hue. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Ace Editor web application. The issue results from the lack of proper validatio...

7.5CVSS6.2AI score0.01711EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2025/03/19 12:00 a.m.89 views

KLA81713 ACE vulnerability in Google Chrome

Use after free vulnerability was found in Google Chrome. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories Stable Channel Update for Desktop Related products Google-Chrome CVE list CVE-2025-2476 critical Solution Update to the...

8.8CVSS9.5AI score0.01042EPSS
SaveExploits0References3
Rows per page
Query Builder