Lucene search
+L

29 matches found

NVD
NVD
•added 2025/10/07 2:15 p.m.•18 views

CVE-2025-57564

CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...

8.2CVSS0.00368EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/07 12:00 a.m.•10 views

CVE-2025-57564

CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...

6.2AI score0.00368EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/07 12:00 a.m.•20 views

PT-2025-41008

Name of the Vulnerable Software and Affected Versions CubeAPM version nightly-2025-08-01-1 Description The software allows unauthenticated attackers to inject arbitrary log entries into production systems. This is possible through the /api/logs/insert/elasticsearch/ bulk API endpoint, which accep...

8.2CVSS7AI score0.00368EPSS
SaveExploits0References6
CVE
CVE
•added 2025/10/07 12:00 a.m.•41 views

CVE-2025-57564

The CubeAPM platform, specifically version nightly-2025-08-01-1 , is vulnerable to an unauthenticated log injection flaw. The issue stems from the /api/logs/insert/elasticsearch/_bulk endpoint, which fails to perform input validation or require authentication when accepting bulk log data. Remote ...

8.2CVSS6.2AI score0.00368EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/10/05 2:56 a.m.•19 views

SUSE CVE-2023-53548

In the Linux kernel, the following vulnerability has been resolved: net: usbnet: Fix WARNING in usbnetstartxmit/usbsubmiturb The syzbot fuzzer identified a problem in the usbnet driver: usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 0 PID: 754 at drivers/usb/core/urb.c:504...

5.5CVSS6AI score0.00156EPSS
SaveExploits0References20
osv_ubuntu
osv_ubuntu
•added 2025/10/04 4:15 p.m.•25 views

UBUNTU-CVE-2023-53548

In the Linux kernel, the following vulnerability has been resolved: net: usbnet: Fix WARNING in usbnetstartxmit/usbsubmiturb The syzbot fuzzer identified a problem in the usbnet driver: usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 0 PID: 754 at drivers/usb/core/urb.c:504...

5.5CVSS6.1AI score0.00156EPSS
SaveExploits0References11
osv_cve
osv_cve
•added 2025/10/04 3:16 p.m.•24 views

CVE-2023-53548 net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb

In the Linux kernel, the following vulnerability has been resolved: net: usbnet: Fix WARNING in usbnetstartxmit/usbsubmiturb The syzbot fuzzer identified a problem in the usbnet driver: usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 0 PID: 754 at drivers/usb/core/urb.c:504...

6.4AI score
SaveExploits0References11
CVE
CVE
•added 2025/10/04 3:16 p.m.•58 views

CVE-2023-53548

CVE-2023-53548 affects the Linux kernel USB networking stack, specifically the usbnet driver. The issue arises when usbnet trusts the bulk endpoint addresses reported by the probe routine in the driver_info structure and does not verify that the endpoints exist and have the correct type/direction...

5.5CVSS6AI score0.00156EPSS
SaveExploits0References8Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2020/01/03 12:00 a.m.•32 views

Cisco Data Center Network Manager getConfigTemplateFileName SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.4AI score0.46935EPSS
SaveExploits10References1
Rows per page
Query Builder