Lucene search
+L

8275 matches found

NVD
NVD
added 2025/09/05 7:15 a.m.9 views

CVE-2025-48395

An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI. This security issue has been fixed in the latest version of NMC G2 which is available on the Eaton download center...

4.7CVSS0.00287EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/05 7:5 a.m.37 views

CVE-2025-48395

CVE-2025-48395 affects Eaton NMC G2. The issue allows an attacker with authenticated privileged access to modify the contents of a non-sensitive file by traversing a path in the CLI’s limited shell. Root cause: path traversal in the restricted CLI shell. Impact is limited to file contents modific...

4.7CVSS6AI score0.00287EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/05 7:5 a.m.14 views

CVE-2025-48395

An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI. This security issue has been fixed in the latest version of NMC G2 which is available on the Eaton download center...

4.7CVSS0.00287EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/05 12:0 a.m.14 views

PT-2025-36115

Name of the Vulnerable Software and Affected Versions: NMC G2 affected versions not specified Description: An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI. Recommendations: At the moment,...

4.7CVSS6AI score0.00287EPSS
SaveExploits0References6
Microsoft CVE
Microsoft CVE
added 2025/09/04 6:53 a.m.14 views

iommu/amd: Avoid stack buffer overflow from kernel cmdline

...

7.8CVSS6.8AI score0.00394EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2025/09/04 2:50 a.m.7 views

Glib: glib crash after long command line

...

7.5CVSS7AI score0.00432EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 2:34 a.m.11 views

Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet.

...

10CVSS7AI score0.03103EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/03 9:48 p.m.6 views

Apache Subversion: Command line argument injection on Windows platforms

...

8.2CVSS7AI score0.00605EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2025/09/02 11:11 a.m.479 views

Exploit for Inefficient Regular Expression Complexity in Jqueryvalidation Jquery_Validation

PoC exploit for CVE-2022-31147, a path traversal flaw in matthia...

7.5CVSS7.2AI score0.0204EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2025/09/01 12:0 a.m.11 views

The vulnerability of the CLI loader component in Grub allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the GRUB loader’s CLI component is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.2CVSS6.3AI score0.00354EPSS
SaveExploits0References7Affected Software4
RedhatCVE
RedhatCVE
added 2025/08/31 12:20 a.m.13 views

CVE-2025-38676

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length...

6CVSS6.4AI score0.00394EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2025/08/30 6:21 p.m.10 views

CVE-2023-47799

Mahara before 22.10.4 and 23.x before 23.04.4 allows information disclosure if the experimental HTML bulk export is used via the administration interface or via the CLI, and the resulting export files are given to the account holders. They may contain images of other account holders because the...

7.5CVSS6.4AI score0.00407EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:19 p.m.7 views

CVE-2025-20295

A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read or create a file or overwrite any file on the file system of the underlying operating system of an affected device, including system files. This vulnerabili...

6CVSS6.6AI score0.00185EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2025/08/29 2:50 p.m.10 views

CVE-2025-54080

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

5.5CVSS6.3AI score0.00142EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/29 12:0 a.m.11 views

Ubuntu 25.04 : Linux kernel (Azure) vulnerabilities (USN-7721-1)

"The remote Ubuntu 25.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7721-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in th...

9.8CVSS7.4AI score0.11689EPSS
SaveExploits5References107
NCSC
NCSC
added 2025/08/28 8:36 a.m.20 views

Vulnerabilities fixed in Cisco NX-OS Software

Cisco has fixed vulnerabilities in Cisco NX-OS Software Specifically for Nexus 3000 and 9000 Series Switches. The vulnerabilities are in several features of the Cisco NX-OS Software. A vulnerability in the command-line interface CLI allows authenticated local malicious actors to perform command...

7.4CVSS7.1AI score0.03166EPSS
SaveExploits0References4
NVD
NVD
added 2025/08/27 5:15 p.m.6 views

CVE-2025-20292

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device. This...

4.4CVSS0.03166EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/27 5:15 p.m.6 views

CVE-2025-20295

A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read or create a file or overwrite any file on the file system of the underlying operating system of an affected device, including system files. This vulnerabili...

6CVSS0.00185EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/27 4:23 p.m.29 views

CVE-2025-20294 Cisco UCS Manager Software Command Injection Vulnerability

Multiple vulnerabilities in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with administrative privileges to perform command injection attacks on an affected system and elevate privileges to root. These vulnerabilities are du...

6.5CVSS0.0121EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/27 4:23 p.m.4 views

CVE-2025-20294 Cisco UCS Manager Software Command Injection Vulnerability

Multiple vulnerabilities in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with administrative privileges to perform command injection attacks on an affected system and elevate privileges to root. These vulnerabilities are du...

6.5CVSS7.9AI score0.0121EPSS
SaveExploits0References1
Rows per page
Query Builder