Lucene search
+L

4001 matches found

CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•21 views

Hitachi Ops Center Analyzer viewpoint 安全漏洞

Hitachi Ops Center Analyzer viewpoint is an application from Hitachi, Ltd. It provides visibility and data analysis of heterogeneous IT resources across the complete data path of an application. A security vulnerability exists in Hitachi Ops Center Analyzer viewpoint versions prior to 10.0.0-00...

6.5CVSS6.8AI score0.00267EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/16 12:00 a.m.•5 views

CVE-2025-1531: Use of Default Credentials

Authentication credentials leakage vulnerability in Hitachi Ops Center Analyzer viewpoint.This issue affects Hitachi Ops Center Analyzer viewpoint: from 10.0.0-00 before 11.0.4-00...

6.5CVSS5.8AI score0.00267EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/05/07 12:00 a.m.•21 views

The vulnerability in the web-based interface of UserGate Next-Generation Firewall (NGFW), the unified management center UserGate Management Center (UGMC), the log collection system UserGate Log Analyzer (LogAn), and the event tracking and analysis tool UserGate Security Information and Event Management (SIEM) allows a perpetrator to execute injection requests and trigger built-in database functions.

The vulnerability in the web-based interface of the UserGate Next-Generation Firewall NGFW, the unified management center UserGate Management Center UGMC, and the log collection system UserGate Log Analyzer LogAn is related to insufficient validation of input data. Exploiting this vulnerability...

4.1CVSS5.6AI score
SaveExploits0Affected Software4
IBM Security Bulletins
IBM Security Bulletins
•added 2025/04/29 2:15 a.m.•32 views

Security Bulletin: Rational Asset Analyzer is affected by two WebSphere Application Server vulnerabilities. (CVE-2021-23450, CVE-1999-0001)

Summary WebSphere Application Server Liberty used by Rational Asset Analyzer is vulnerable to remote code execution due to Dojo. This has been addressed. Vulnerability Details CVEID:CVE-2021-23450 DESCRIPTION: Dojo could allow a remote attacker to execute arbitrary code on the system, caused by a...

9.8CVSS9.5AI score0.30367EPSS
SaveExploits2Affected Software1
RedhatCVE
RedhatCVE
•added 2025/04/26 5:16 a.m.•19 views

CVE-2025-28059

An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to retain access to system resources due to improper session invalidation and stale token handling. When an administrator deletes a user account, the backend fails to terminate active sessions and revoke...

7.5CVSS6.8AI score0.00819EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/04/23 2:38 a.m.•14 views

SUSE CVE-2025-22098

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmpdp: Fix a deadlock in zynqmpdpignorehpdset Instead of attempting the same mutex twice, lock and unlock it. This bug has been detected by the Clang thread-safety analyzer...

5.5CVSS6.4AI score0.00151EPSS
SaveExploits0References3
NVD
NVD
•added 2025/04/22 5:15 a.m.•14 views

CVE-2024-46899

Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentials leakage vulnerability.This issue affects Hitachi Ops Center Common Services: from 10.0.0-00 before 11.0.0-04; Hitachi Ops Center Analyzer viewpoint OVF: from 10.0.0-00 before...

7.1CVSS0.00306EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/22 4:12 a.m.•13 views

CVE-2024-46899 Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF

Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentials leakage vulnerability.This issue affects Hitachi Ops Center Common Services: from 10.0.0-00 before 11.0.0-04; Hitachi Ops Center Analyzer viewpoint OVF: from 10.0.0-00 before...

7.1CVSS7.5AI score0.00306EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/22 4:12 a.m.•28 views

CVE-2024-46899 Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF

Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentials leakage vulnerability.This issue affects Hitachi Ops Center Common Services: from 10.0.0-00 before 11.0.0-04; Hitachi Ops Center Analyzer viewpoint OVF: from 10.0.0-00 before...

7.1CVSS0.00306EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/22 4:12 a.m.•73 views

CVE-2024-46899

Hitachi Ops Center: CVE-2024-46899 is linked to an authentication credentials leakage affecting two components. Affected products are Hitachi Ops Center Common Services and Hitachi Ops Center Analyzer viewpoint OVF, both versions 10.0.0-00 through 11.0.0-04. Root cause is improper handling of aut...

7.1CVSS7.1AI score0.00306EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/22 12:00 a.m.•5 views

CVE-2024-46899: Use of Default Credentials

Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentials leakage vulnerability.This issue affects Hitachi Ops Center Common Services: from 10.0.0-00 before 11.0.0-04; Hitachi Ops Center Analyzer viewpoint OVF: from 10.0.0-00 before...

7.1CVSS7AI score0.00306EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/18 5:15 p.m.•16 views

CVE-2025-28059

An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to retain access to system resources due to improper session invalidation and stale token handling. When an administrator deletes a user account, the backend fails to terminate active sessions and revoke...

7.5CVSS5.8AI score0.00819EPSS
SaveExploits0References2
NVD
NVD
•added 2025/04/18 5:15 p.m.•27 views

CVE-2025-28059

An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to retain access to system resources due to improper session invalidation and stale token handling. When an administrator deletes a user account, the backend fails to terminate active sessions and revoke...

7.5CVSS0.00819EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/04/18 12:00 a.m.•9 views

CVE-2025-28059

An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to retain access to system resources due to improper session invalidation and stale token handling. When an administrator deletes a user account, the backend fails to terminate active sessions and revoke...

7AI score0.00819EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/18 12:00 a.m.•20 views

PT-2025-17319

Name of the Vulnerable Software and Affected Versions: Nagios Network Analyzer version 2024R1.0.3 Description: The issue arises from improper session invalidation and stale token handling, allowing deleted users to retain access to system resources. When a user account is deleted by an...

7.5CVSS6.3AI score0.00819EPSS
SaveExploits0References8
CVE
CVE
•added 2025/04/18 12:00 a.m.•81 views

CVE-2025-28059

An access control vulnerability exists in Nagios Network Analyzer version 2024R1.0.3 due to improper session invalidation and stale token handling . When an administrator deletes a user account, the backend fails to terminate active sessions or revoke associated API tokens , allowing deleted user...

7.5CVSS6.8AI score0.00819EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/04/18 12:00 a.m.•35 views

CVE-2025-28059

An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to retain access to system resources due to improper session invalidation and stale token handling. When an administrator deletes a user account, the backend fails to terminate active sessions and revoke...

0.00819EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/18 12:00 a.m.•5 views

CVE-2025-28059: Insufficient Session Expiration

An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to retain access to system resources due to improper session invalidation and stale token handling. When an administrator deletes a user account, the backend fails to terminate active sessions and revoke...

7.5CVSS5.8AI score0.00819EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/18 12:00 a.m.•18 views

Nagios Network Analyzer 安全漏洞

Nagios Network Analyzer is an enterprise solution for monitoring and analyzing network traffic from Nagios, Inc. A security vulnerability exists in Nagios Network Analyzer version 2024R1.0.3, which stems from session failure and improper token handling, and could lead to unauthorized access to...

7.5CVSS6.7AI score0.00819EPSS
SaveExploits0References2
CVE
CVE
•added 2025/04/17 6:01 p.m.•197 views

CVE-2021-47671

The Linux kernel contains a memory leak vulnerability in the can: etas_es58x component within the es58x_rx_err_msg() function. The flaw occurs when can->do_set_mode() fails, causing the function to return directly without calling netif_rx(skb) , thereby failing to free the skb previously alloc...

3.3CVSS6.4AI score0.00182EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder