Lucene search
+L

5664 matches found

Positive Technologies
Positive Technologies
added 2025/08/21 12:00 a.m.14 views

PT-2025-34268 · Solarwinds · N-Central

Name of the Vulnerable Software and Affected Versions: N-central versions prior to 2025.2 Description: An authenticated user can read, write, and modify syslog configurations across customers on an N-central server. Recommendations: Update to version 2025.2 or later...

8.3CVSS7.1AI score0.00274EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/08/21 12:00 a.m.10 views

N‑able N-Central 安全漏洞

N-able N-Central is a powerful, customizable remote monitoring and management platform from N-able. A security vulnerability exists in N-able N-Central versions prior to 2025.2 that originates from an authenticated user being able to read and write modify syslog configuration...

8.3CVSS6.6AI score0.00274EPSS
SaveExploits0References2
NVD
NVD
added 2025/08/20 1:15 a.m.10 views

CVE-2024-12223

Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions in their security context...

9.3CVSS0.00334EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/20 12:44 a.m.21 views

CVE-2024-12223 Stored Cross-site Scripting (XSS) in Nutanix Prism Central

Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions in their security context...

9.3CVSS0.00334EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/20 12:44 a.m.54 views

CVE-2024-12223

CVE-2024-12223 corresponds to a stored cross-site scripting (XSS) vulnerability in Nutanix Prism Central. The issue affects Prism Central versions prior to 2024.3.1 and stems from the Events component, allowing an attacker to hijack a victim user’s session and execute actions in their security co...

9.3CVSS6.3AI score0.00334EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/20 12:44 a.m.7 views

CVE-2024-12223 Stored Cross-site Scripting (XSS) in Nutanix Prism Central

Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions in their security context...

9.3CVSS6.3AI score0.00334EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/20 12:00 a.m.8 views

Nutanix Prism Central 跨站脚本漏洞

Nutanix Prism Central is a centralized management console from Nutanix USA. A security vulnerability exists in Nutanix Prism Central versions prior to 2024.3.1 that stems from a stored cross-site scripting vulnerability in the Events component that could lead to session hijacking...

9.3CVSS5.8AI score0.00334EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/20 12:00 a.m.12 views

PT-2025-33891 · Nutanix · Prism Central

Name of the Vulnerable Software and Affected Versions: Prism Central versions prior to 2024.3.1 Description: Prism Central is susceptible to a stored cross-site scripting attack through the Events component. This allows an attacker to hijack a victim user’s session and perform actions within that...

9.3CVSS6.4AI score0.00334EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2025/08/20 12:00 a.m.175 views

CVE-2021-44515

Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For Enterprise builds 10.1.2128.0 through 10.1.2137.2,...

10CVSS9.6AI score0.99871EPSS
SaveIn wildExploits2References4
GithubExploit
GithubExploit
added 2025/08/17 5:56 p.m.188 views

Exploit for Deserialization of Untrusted Data in N-Able N-Central

CVE-2025-8875 & CVE-2025-8876 How does this detection met...

9.4CVSS6.2AI score0.03303EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/08/16 3:26 p.m.7 views

CVE-2025-8876

Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1...

9.4CVSS7.3AI score0.03303EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.6 views

N-able N-central < 2024.6 HF2 / 2025.x < 2025.3.1 Multiple Vulnerabilities

The version of N-able N-central installed on the remote host is prior to 2024.6 HF2 or 2025.x prior to 2025.3.1. It is, therefore, affected by multiple vulnerabilities: - Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code. CVE-2025-8875 - Improper...

9.4CVSS6.1AI score0.03303EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2023-4408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DNS message parsing code in named includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but...

7.5CVSS6.8AI score0.01338EPSS
SaveExploits0References3
OSV
OSV
added 2025/08/14 6:52 p.m.4 views

MAL-2025-14254 Malicious code in alb-um-availa-ble-zip-mp3-file-central-market-ilx22-uynmjv (npm)

The package alb-um-availa-ble-zip-mp3-file-central-market-ilx22-uynmjv was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.6 views

Malicious code in alb-um-availa-ble-zip-mp3-file-central-market-ilx22-uynmjv (npm)

The package alb-um-availa-ble-zip-mp3-file-central-market-ilx22-uynmjv was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 3:15 p.m.8 views

CVE-2025-8876

Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1...

8.8CVSS5.8AI score0.03303EPSS
SaveExploits1References2
NVD
NVD
added 2025/08/14 3:15 p.m.12 views

CVE-2025-8876

Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1...

9.4CVSS0.03303EPSS
SaveExploits1References2
OSV
OSV
added 2025/08/14 3:15 p.m.7 views

CVE-2025-8875

Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1...

7.8CVSS5.8AI score0.01668EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/08/14 2:56 p.m.7 views

CVE-2025-8875 Insecure Deserialization Vulnerability

Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1...

9.4CVSS7.3AI score0.01668EPSS
SaveExploits1References1
CVE
CVE
added 2025/08/14 2:56 p.m.66 views

CVE-2025-8875

CVE-2025-8875 – N-able N-central : A deserialization of untrusted data vulnerability in N-central allows local code execution on versions prior to 2025.3.1. Impact includes potential high confidentiality, integrity, and availability impacts per CVSS 3.1/4.0 vectors (LOCAL access, low privileges, ...

9.4CVSS7.3AI score0.01668EPSS
SaveIn wildExploits1References2Affected Software1
Rows per page
Query Builder