Lucene search
+L

6215 matches found

RedhatCVE
RedhatCVE
added 2026/02/04 3:15 a.m.7 views

CVE-2025-57529

YouDataSum CPAS Audit Management System =v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthenticated attackers to execute arbitrary SQL commands via crafted input to the parameter. Successful exploitation could...

9.8CVSS6.2AI score0.00555EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2026/02/04 3:15 a.m.7 views

CVE-2025-12679

A vulnerability in Brocade SANnav before 2.4.0b prints the Password-Based Encryption PBE key in plaintext in the system audit log file. The vulnerability could allow a remote authenticated attacker with access to the audit logs to access the pbe key. Note: The vulnerability is only triggered duri...

7.1CVSS8.4AI score0.00148EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/04 3:15 a.m.10 views

CVE-2025-12773

A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs. The vulnerability could allow a remote authenticated attacker with access to the audit logs to access the Brocade...

7.1CVSS8.4AI score0.0033EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/03 10:16 p.m.8 views

CVE-2020-37074

Remote Desktop Audit 2.3.0.157 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code during the Add Computers Wizard file import process. Attackers can craft a malicious payload file to trigger a structured exception handler SEH bypass and execute shellcode when...

9.8CVSS0.00337EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/02/03 10:1 p.m.34 views

CVE-2020-37074 Remote Desktop Audit 2.3.0.157 - Buffer Overflow (SEH)

Remote Desktop Audit 2.3.0.157 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code during the Add Computers Wizard file import process. Attackers can craft a malicious payload file to trigger a structured exception handler SEH bypass and execute shellcode when...

9.8CVSS0.00337EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/03 10:1 p.m.16 views

CVE-2020-37074

CVE-2020-37074 affects Remote Desktop Audit 2.3.0.157. The vulnerability is a buffer overflow in the Add Computers Wizard file import process that can be triggered by a crafted payload, bypasses SEH, and allows arbitrary code execution (shellcode) on import of computer lists. Documented impact in...

9.8CVSS6.3AI score0.00337EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/02/03 10:1 p.m.4 views

CVE-2020-37074 Remote Desktop Audit 2.3.0.157 - Buffer Overflow (SEH)

Remote Desktop Audit 2.3.0.157 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code during the Add Computers Wizard file import process. Attackers can craft a malicious payload file to trigger a structured exception handler SEH bypass and execute shellcode when...

9.8CVSS6.2AI score0.00337EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/03 10:1 p.m.10 views

CVE-2020-37074

Remote Desktop Audit 2.3.0.157 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code during the Add Computers Wizard file import process. Attackers can craft a malicious payload file to trigger a structured exception handler SEH bypass and execute shellcode when...

9.8CVSS6.3AI score0.00337EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/02/03 6:16 p.m.9 views

CVE-2025-57529

YouDataSum CPAS Audit Management System =v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthenticated attackers to execute arbitrary SQL commands via crafted input to the parameter. Successful exploitation could...

9.8CVSS6.3AI score0.00555EPSS
SaveExploits3References2
NVD
NVD
added 2026/02/03 6:16 p.m.7 views

CVE-2025-57529

YouDataSum CPAS Audit Management System =v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthenticated attackers to execute arbitrary SQL commands via crafted input to the parameter. Successful exploitation could...

9.8CVSS0.00555EPSS
SaveExploits3References2
OSV
OSV
added 2026/02/03 1:15 a.m.8 views

CVE-2025-12773

A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs. The vulnerability could allow a remote authenticated attacker with access to the audit logs to access the Brocade...

6.5CVSS5.8AI score0.0033EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/03 1:15 a.m.17 views

CVE-2025-12773

A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs. The vulnerability could allow a remote authenticated attacker with access to the audit logs to access the Brocade...

7.1CVSS0.0033EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/03 12:38 a.m.20 views

CVE-2025-12773

CVE-2025-12773 involves a vulnerability in the Brocade SANnav product where the script update-reports-purge-settings.sh logs can include the SANnav database password in system audit logs on versions before 2.4.0a. The issue allows a remote authenticated attacker with audit-log access to retrieve ...

7.1CVSS5.5AI score0.0033EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/03 12:38 a.m.4 views

CVE-2025-12773 Plain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0a

A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs. The vulnerability could allow a remote authenticated attacker with access to the audit logs to access the Brocade...

7.1CVSS5.5AI score0.0033EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/02/03 12:38 a.m.8 views

EUVD-2025-206663

A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs. The vulnerability could allow a remote authenticated attacker with access to the audit logs to access the Brocade...

7.1CVSS5.5AI score0.0033EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/03 12:38 a.m.4 views

CVE-2025-12773

A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs. The vulnerability could allow a remote authenticated attacker with access to the audit logs to access the Brocade...

7.1CVSS8.4AI score0.0033EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/02/03 12:38 a.m.37 views

CVE-2025-12773 Plain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0a

A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs. The vulnerability could allow a remote authenticated attacker with access to the audit logs to access the Brocade...

7.1CVSS0.0033EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/03 12:0 a.m.28 views

CVE-2025-57529

The CVE-2025-57529 entry concerns YouDataSum CPAS Audit Management System

9.8CVSS6.2AI score0.00555EPSS
SaveExploits3References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/03 12:0 a.m.13 views

PT-2026-5734

A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs. The vulnerability could allow a remote authenticated attacker with access to the audit logs to access the Brocade...

7.1CVSS8.5AI score0.0033EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/02/03 12:0 a.m.41 views

CVE-2025-57529

YouDataSum CPAS Audit Management System =v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthenticated attackers to execute arbitrary SQL commands via crafted input to the parameter. Successful exploitation could...

0.00555EPSS
SaveExploits3References2
Rows per page
Query Builder