Lucene search
+L

11 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-1578

Malicious code in bioql PyPI...

8.2CVSS7.6AI score0.00863EPSS
SaveExploits0References7
NVD
NVD
•added 2025/08/29 9:15 p.m.•12 views

CVE-2025-58066

nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which allow non-NTS traffic are affected by a denial of service vulnerability, where an attacker can induce a message storm between two NTP...

5.3CVSS0.00333EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 10:21 a.m.•10 views

CVE-2019-18658

In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service DoS via a special file such as /dev/urandom, via...

9.8CVSS7.2AI score0.01745EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/25 12:00 a.m.•12 views

Inaba Denki Sangyo CHOCO TEI WATCHER mini 安全漏洞

Inaba Denki Sangyo CHOCO TEI WATCHER mini is a series of surveillance cameras from Inaba Denki Sangyo. A security vulnerability exists in Inaba Denki Sangyo CHOCO TEI WATCHER mini, which stems from client-only authentication, and could lead to an attacker obtaining the product's login password...

7.5CVSS9.1AI score0.00805EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/31 12:00 a.m.•2 views

CVE-2023-40186: Out-of-bounds Write

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdiCreateSurface function. This issue affects FreeRDP based clients only. FreeRDP proxies...

9.8CVSS7AI score0.01357EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2023/01/18 12:30 a.m.•71 views

Component takeover in Oracle Data Provider for .NET

Vulnerability in the Oracle Data Provider for .NET component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCPS to compromise Oracle Data Provider for .NET. Successful...

7.5CVSS7.1AI score0.00594EPSS
SaveExploits0References5Affected Software2
Github Security Blog
Github Security Blog
•added 2022/05/24 10:01 p.m.•39 views

Helm Unsafe Link Following

In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service DoS via a special file such as /dev/urandom, via...

9.8CVSS7.2AI score0.01745EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/12 12:00 a.m.•2 views

CVE-2019-18658: Improper Link Resolution Before File Access

In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service DoS via a special file such as /dev/urandom, via...

9.8CVSS7.2AI score0.01745EPSS
SaveExploits0References2
OSV
OSV
•added 2019/07/11 8:15 p.m.•12 views

UBUNTU-CVE-2019-0053

Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via t...

7.8CVSS7.5AI score0.00587EPSS
SaveExploits2References6
CVE
CVE
•added 2007/01/17 2:00 a.m.•67 views

CVE-2007-0277

CVE-2007-0277 concerns Oracle Database client-only 10.1.0.4 with an unspecified vulnerability tied to the Export component (expdp/impdp). The connected documents collectively indicate the issue has unknown impact and attack vectors, with no concrete exploit details or remediation/version informat...

6.8CVSS5.9AI score0.00378EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/17 12:00 a.m.•4 views

CVE-2007-0277: Undefined Security Weakness

Unspecified vulnerability in Oracle Database client-only 10.1.0.4 has unknown impact and attack vectors related to the Export component and expdp or impdp, aka DB11...

6.8CVSS5.8AI score0.00378EPSS
SaveExploits0References1
Rows per page
Query Builder