Lucene search
K

23 matches found

EUVD
EUVD
added 2026/03/29 6:30 p.m.2 views

EUVD-2026-17041

In Sofia on Xiongmai DVR/NVR AHB7008T-MH-V2 and NBD7024H-P 4.03.R11 devices, root OS command injection can occur via shell metacharacters in the HostName value via an authenticated DVRIP protocol TCP port 34567 request to the NetWork.NetCommon configuration handler, because system is used...

8.8CVSS5.9AI score0.00094EPSS
Exploits0References3
Packet Storm News
Packet Storm News
added 2025/11/13 12:0 a.m.4 views

OpenSCAP Libraries 1.3.13

The openscap project is a set of open source libraries that support the SCAP Security Content Automation Protocol set of standards from NIST. It supports CPE, CCE, CVE, CVSS, OVAL, and XCCDF...

6.9AI score
Exploits0
Packet Storm News
Packet Storm News
added 2025/04/07 12:0 a.m.3 views

OpenSCAP Libraries 1.3.12

The openscap project is a set of open source libraries that support the SCAP Security Content Automation Protocol set of standards from NIST. It supports CPE, CCE, CVE, CVSS, OVAL, and XCCDF...

6.9AI score
Exploits0
Fedora
Fedora
added 2024/10/19 10:49 p.m.24 views

[SECURITY] Fedora 41 Update: containers-common-0.60.4-4.fc41

This package contains common configuration files and documentation for contai ner tools ecosystem, such as Podman, Buildah and Skopeo. It is required because the most of configuration files and docs come from pro jects which are vendored into Podman, Buildah, Skopeo, etc. but they are not packag ...

8.2CVSS7.3AI score0.01561EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2022/12/13 12:0 a.m.2 views

PT-2022-17467 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a denial of service in the Modem component due to a reachable assertion while processing the common config procedure. This affects various Qualcomm...

7.5CVSS7.4AI score0.00446EPSS
Exploits0References3
OSV
OSV
added 2022/09/22 12:0 a.m.27 views

GHSA-G43X-PCC9-F472 Jenkins Compuware Common Configuration Plugin vulnerable to Improper Restriction of XML External Entity Reference

Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to change the contents of the Topaz Workbench CLI home directory on agents to have Jenkins parse a crafted file that uses...

7.1CVSS9.3AI score0.01328EPSS
Exploits0References7
CVE
CVE
added 2022/09/21 3:45 p.m.83 views

CVE-2022-41226

CVE-2022-41226 affects Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier. The connected sources confirm the root cause is that the plugin’s XML parser is not configured to mitigate XML External Entity (XXE) attacks. This can enable XXE in parsing XML data, with the documented impli...

9.8CVSS9.4AI score0.01328EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2022/09/21 12:0 a.m.1 views

Jenkins Compuware Common Configuration Plugin 代码问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

9.8CVSS8.4AI score0.01328EPSS
Exploits0References3
vulnersOsv
vulnersOsv
added 2022/05/14 3:57 a.m.0 views

appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0 <=2.8), com.compuware.jenkins:compuware-common-configuration (>=1.0.6 <=1.0.11) +83 more potentially affected by CVE-2016-3726 via org.jenkins-ci.main:jenkins-core (>=1.652 <=2.29)

org.jenkins-ci.main:jenkins-core MAVEN version =1.652, =1.0, =1.0.6, =2.0.0, =2.0, =1.0.2, =1.0.0, =0.1.0, =0.1.0, =2.30.2, =1.2.0, =1.1.0, =0.17, =1.1.7, =1.2, =1.7 and more Source cves: CVE-2016-3726 Source advisory: OSV:GHSA-RX4R-GXPC-H85X...

7.4CVSS6.7AI score0.00081EPSS
Exploits1
Hacker One
Hacker One
added 2014/02/19 12:0 a.m.113 views

Internet Bug Bounty: moderate: mod_deflate denial of service

A resource consumption flaw was found in moddeflate. If request body decompression was configured using the "DEFLATE" input filter, a remote attacker could cause the server to consume significant memory and/or CPU resources. The use of request body decompression is not a common configuration...

4.3CVSS5.5AI score0.41327EPSS
Exploits0
CVE
CVE
added 2000/02/04 5:0 a.m.31 views

CVE-1999-0631

CVE-1999-0631 is rejected/not used per the initial description.

6.6AI score
Exploits0
CVE
CVE
added 2000/02/04 5:0 a.m.39 views

CVE-1999-0634

This CVE entry is rejected/not used and does not represent an active vulnerability.

6.6AI score
Exploits0
CVE
CVE
added 2000/02/04 5:0 a.m.38 views

CVE-1999-0645

CVE-1999-0645 is rejected/not used per the Initial Description.

6.6AI score
Exploits0
CVE
CVE
added 2000/02/04 5:0 a.m.35 views

CVE-1999-0643

This CVE entry is rejected/not used per the Initial Description.

6.6AI score
Exploits0
CVE
CVE
added 2000/02/04 5:0 a.m.39 views

CVE-1999-0644

CVE-1999-0644 entry is rejected/not used and does not represent an active vulnerability.

6.6AI score
Exploits0
CVE
CVE
added 2000/02/04 5:0 a.m.34 views

CVE-1999-0623

CVE-1999-0623 is rejected/not used; this entry does not represent an active vulnerability.

6.6AI score
Exploits0
ATTACKERKB
ATTACKERKB
added 1999/01/01 5:0 a.m.1 views

CVE-1999-0631

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...

5.4AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 1999/01/01 5:0 a.m.1 views

CVE-1999-0614

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...

5.3AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 1999/01/01 5:0 a.m.2 views

CVE-1999-0634

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...

5.4AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 1999/01/01 5:0 a.m.0 views

CVE-1999-0658

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...

5.4AI score
Exploits0References1
Rows per page
Query Builder