Lucene search
+L

16022 matches found

Positive Technologies
Positive Technologies
•added 2025/10/12 12:00 a.m.•7 views

PT-2025-42786

Name of the Vulnerable Software and Affected Versions Reolink Video Doorbell WiFi DB 566128M5MP W affected versions not specified Description The Reolink Video Doorbell WiFi DB 566128M5MP W allows root shell access through an unsecured UART/serial console. An attacker with physical access can...

7.2CVSS6.2AI score0.00314EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2025/10/10 4:20 p.m.•17 views

CVE-2025-59992

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Secure Console page that, when visited by another user, enables the attacker to execute commands with the target's...

6.1CVSS6.9AI score0.00222EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2025/10/10 11:42 a.m.•14 views

From Detection to Patch: Fortra Reveals Full Timeline of CVE-2025-10035 Exploitation

Fortra on Thursday revealed the results of its investigation into CVE-2025-10035, a critical security flaw in GoAnywhere Managed File Transfer MFT that's assessed to have come under active exploitation since at least September 11, 2025. The company said it began its investigation on September 11...

10CVSS7.2AI score0.99799EPSS
SaveExploits3
The Hacker News
The Hacker News
•added 2025/10/10 11:42 a.m.•12 views

From Detection to Patch: Fortra Reveals Full Timeline of CVE-2025-10035 Exploitation

Fortra on Thursday revealed the results of its investigation into CVE-2025-10035, a critical security flaw in GoAnywhere Managed File Transfer MFT that's assessed to have come under active exploitation since at least September 11, 2025. The company said it began its investigation on September 11...

10CVSS6.3AI score0.99799EPSS
SaveExploits3
RedHat Linux
RedHat Linux
•added 2025/10/09 6:48 p.m.•20 views

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.17.2 security update

Important: Red Hat OpenShift GitOps v1.17.2 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-7180: Redis HA Proxy pod fails to start with Security Context error GITOPS-7331: operator controller logs error when console link is disabled...

7.5CVSS6.8AI score0.08927EPSS
SaveExploits3References8
EUVD
EUVD
•added 2025/10/09 6:30 p.m.•18 views

EUVD-2025-33374

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Secure Console page that, when visited by another user, enables the attacker to execute commands with the target's...

6.1CVSS6.5AI score0.00222EPSS
SaveExploits0References2
OSV
OSV
•added 2025/10/09 5:16 p.m.•16 views

CVE-2025-59992

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Secure Console page that, when visited by another user, enables the attacker to execute commands with the target's...

5.1CVSS6AI score0.00222EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/09 5:16 p.m.•32 views

CVE-2025-59992

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Secure Console page that, when visited by another user, enables the attacker to execute commands with the target's...

6.1CVSS0.00222EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/09 4:12 p.m.•6 views

CVE-2025-59992 Junos Space: Secure Console page is vulnerable to reflected cross-site script injection

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Secure Console page that, when visited by another user, enables the attacker to execute commands with the target's...

6.1CVSS6.1AI score0.00222EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/09 4:12 p.m.•33 views

CVE-2025-59992

Juniper Junos Space is affected by CVE-2025-59992: an improper neutralization of input during web page generation enables cross-site scripting on the Secure Console page. The vulnerability allows an attacker to inject script tags that, when a different user visits the page, can execute commands w...

6.1CVSS6.1AI score0.00222EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/10/09 4:12 p.m.•35 views

CVE-2025-59992 Junos Space: Secure Console page is vulnerable to reflected cross-site script injection

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Secure Console page that, when visited by another user, enables the attacker to execute commands with the target's...

6.1CVSS0.00222EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•18 views

PT-2025-41428

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 24.1R4 Description An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue exists in Juniper Networks Junos Space. This allows an attacker to inject script tags...

6.1CVSS6.6AI score0.00222EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•6 views

CVE-2025-59992: Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Secure Console page that, when visited by another user, enables the attacker to execute commands with the target's...

6.1CVSS6.1AI score0.00222EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2025/10/08 12:26 p.m.•25 views

Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Data Management Console( CVE-2022-1471,CVE-2024-22259,CVE-2020-8565, CVE-2019-11250,CVE-2023-44487,CVE-2022-46175, CVE-2024-22243)

Summary SnakeYaml Constructor Deserialization Remote Code Execution. Spring-web-6.0.11, k8s.io-client-go, k8s.io-Apimachinery-v0.25.1, json5-1.0.1, spring-web-6.0.11 open source libraries are used by IBM Db2 Data Management Console . This bulletin describes the upgrades necessary to address the...

9.8CVSS7.4AI score0.99999EPSS
SaveExploits33Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-1999-1257

Malware in sbrugna...

7.2CVSS6.4AI score0.0034EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-1999-0810

Malware in sbrugna...

5CVSS6.4AI score0.01552EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2014-9809

Malware in sbrugna...

9.4CVSS6.4AI score0.04654EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2019-13719

Malware in sbrugna...

4CVSS4.7AI score0.0034EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2009-4569

Malware in sbrugna...

5CVSS6.4AI score0.0144EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2000-0664

Malware in sbrugna...

5CVSS6.4AI score0.0724EPSS
SaveExploits2References6
Rows per page
Query Builder