Lucene search
+L

14194 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 1:03 a.m.17 views

CVE-2010-4590

Cross-site scripting XSS vulnerability in HTTP Access Services HTTP-AS in the Connection Manager in IBM Lotus Mobile Connect LMC before 6.1.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.8AI score0.01053EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:13 a.m.18 views

CVE-2005-4883

Race condition in Philippe Jounin Tftpd32 before 2.80 allows remote attackers to cause a denial of service daemon crash via invalid "connect frames."...

4.3CVSS7AI score0.00745EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/21 5:15 p.m.12 views

CVE-2025-20242

A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise CCE could allow an unauthenticated, remote attacker to read and modify data on an affected device. This vulnerability is due to a lack of proper authentication controls. An attacker could exploit this...

9.1CVSS5.8AI score0.05655EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/21 4:35 p.m.24 views

CVE-2025-20242

A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise CCE could allow an unauthenticated, remote attacker to read and modify data on an affected device. This vulnerability is due to a lack of proper authentication controls. An attacker could exploit this...

6.5CVSS0.05655EPSS
SaveExploits0References1
Cisco
Cisco
added 2025/05/21 4:00 p.m.14 views

Cisco Unified Contact Center Enterprise Cloud Connect Insufficient Access Control Vulnerability

A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise CCE could allow an unauthenticated, remote attacker to read and modify data on an affected device. This vulnerability is due to a lack of proper authentication controls. An attacker could exploit this...

6.5CVSS7.3AI score0.05655EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
added 2025/05/21 8:03 a.m.6 views

Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024144 fixes one issue. The following security issue was fixed: CVE-2024-53156: wifi: ath9k: add range check for connrspepid in htcconnectservice bsc1234847. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods...

8.5CVSS7.7AI score0.00237EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/05/21 12:00 a.m.6 views

RHEL 8 : mod_auth_openidc:2.3 (RHSA-2025:4228)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:4228 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connec...

8.2CVSS6.5AI score0.00571EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/05/21 12:00 a.m.17 views

PT-2025-22392 · Cisco · Cisco Unified Contact Center Enterprise

Name of the Vulnerable Software and Affected Versions: Cisco Unified Contact Center Enterprise CCE affected versions not specified Description: A vulnerability in the Cloud Connect component could allow an unauthenticated, remote attacker to read and modify data on an affected device due to a lac...

9.1CVSS6.4AI score0.05655EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/05/20 11:19 p.m.43 views

CVE-2022-29623

An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted PDF file. NOTE: the Supplier has not verified this vulnerability report...

7.8CVSS7.8AI score0.01296EPSS
SaveExploits1References1
SUSE Linux
SUSE Linux
added 2025/05/20 12:04 p.m.1 views

Security update for the Linux Kernel RT (Live Patch 4 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506001014 fixes several issues. The following security issues were fixed: CVE-2024-53042: ipv4: iptunnel: Fix suspicious RCU usage warning in iptunnelinitflow bsc1233678. CVE-2024-53156: wifi: ath9k: add range check for connrspepid in htcconnectservice...

8.5CVSS7.6AI score0.00265EPSS
SaveExploits0References12
SUSE Linux
SUSE Linux
added 2025/05/20 12:03 p.m.7 views

Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600105 fixes several issues. The following security issues were fixed: CVE-2024-53042: ipv4: iptunnel: Fix suspicious RCU usage warning in iptunnelinitflow bsc1233678. CVE-2024-53156: wifi: ath9k: add range check for connrspepid in htcconnectservice...

8.5CVSS7.7AI score0.00265EPSS
SaveExploits1References16
SUSE Linux
SUSE Linux
added 2025/05/20 12:35 a.m.32 views

Security update for the Linux Kernel (Live Patch 62 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122234 fixes several issues. The following security issues were fixed: CVE-2024-53156: wifi: ath9k: add range check for connrspepid in htcconnectservice bsc1234847. CVE-2024-50115: KVM: nSVM: Ignore nCR34:0 when loading PDPTEs from memory bsc1233019. Patch...

8.5CVSS7.6AI score0.00245EPSS
SaveExploits0References8
CNVD
CNVD
added 2025/05/20 12:00 a.m.6 views

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2025-10674)

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute malicious JavaScript...

6.1CVSS5.8AI score0.00283EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/05/20 12:00 a.m.14 views

IBM App Connect Enterprise Encryption Issue Vulnerability

IBM App Connect Enterprise is an operating system from International Business Machines IBM, Inc. that combines existing industry-trusted IBM Integration Bus technology with IBM App Connect Professional and new cloud native IBM App Connect Enterprise combines existing industry-trusted IBM...

5.5CVSS6.8AI score0.00126EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/05/20 12:00 a.m.12 views

The vulnerability of Adobe Connect’s instant messaging program lies in the insufficient protection of the website structure, which allows attackers to perform cross-site scripting attacks.

The vulnerability of the Adobe Connect instant messaging program is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS5.2AI score0.00348EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/20 12:00 a.m.14 views

The vulnerability of Adobe Connect’s instant messaging program lies in the insufficient protection of the website structure, which allows attackers to perform cross-site scripting attacks.

The vulnerability of the Adobe Connect instant messaging program is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.00264EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2025/05/20 12:00 a.m.11 views

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2025-10675)

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute malicious JavaScript...

6.1CVSS5.8AI score0.00348EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/05/20 12:00 a.m.14 views

The vulnerability of Adobe Connect’s instant messaging program lies in the insufficient protection of the website structure, which allows attackers to perform cross-site scripting attacks.

The vulnerability of the Adobe Connect instant messaging program is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS5.2AI score0.00283EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2025/05/20 12:00 a.m.8 views

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2025-10676)

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute malicious JavaScript...

5.4CVSS5.8AI score0.00264EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/19 3:12 p.m.14 views

Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands are vulnerable to denial of service [CVE-2025-47279]

Summary Node.js module undici is used by IBM App Connect Enterprise Certified Container for HTTP communications. IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands are vulnerable to denial of service. This bulletin provides patch information to addres...

3.1CVSS6.2AI score0.00302EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder