Lucene search
+L

12783 matches found

Tenable Nessus
Tenable Nessus
added 2025/12/08 12:0 a.m.12 views

Paessler PRTN Network Monitor < 18.2.39 Multiple Vulnerabilities

The version of Paessler PRTG Network Monitor installed on the remote host is prior to 18.2.39. It is, therefore, affected by multiple vulnerabilities: - An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with...

9CVSS7.8AI score0.87173EPSS
SaveExploits12References3
Tenable Nessus
Tenable Nessus
added 2025/12/08 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2023-53747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vcscreen: reload load of struct vcdata pointer in vcswrite to avoid UAF After a call to consoleunlock in vcswrite the vcdata struct can be freed by...

7.8CVSS5.5AI score0.00136EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/12/05 9:34 p.m.18 views

CVE-2025-66238

DCIM dcTrack allows an attacker to misuse certain remote access features. An authenticated user with access to the appliance's virtual console could exploit these features to redirect network traffic, potentially accessing restricted services or data on the host machine...

7.4CVSS6.8AI score0.00334EPSS
SaveExploits0References1
Fedora
Fedora
added 2025/12/05 2:11 a.m.10 views

[SECURITY] Fedora 43 Update: CuraEngine-5.4.0-10.fc43

CuraEngine is a C++ console application for 3D printing G-code generation. It has been made as a better and faster alternative to the old Skeinforge engine. This is just a console application for G-code generation. For a full graphical application look at cura with is the graphical frontend for...

6.9AI score
SaveExploits0
EUVD
EUVD
added 2025/12/05 12:31 a.m.6 views

EUVD-2025-201312

DCIM dcTrack allows an attacker to misuse certain remote access features. An authenticated user with access to the appliance's virtual console could exploit these features to redirect network traffic, potentially accessing restricted services or data on the host machine...

7.4CVSS6.3AI score0.00334EPSS
SaveExploits0References3
NVD
NVD
added 2025/12/04 10:15 p.m.6 views

CVE-2025-66238

DCIM dcTrack allows an attacker to misuse certain remote access features. An authenticated user with access to the appliance's virtual console could exploit these features to redirect network traffic, potentially accessing restricted services or data on the host machine...

7.4CVSS0.00334EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/04 9:10 p.m.5 views

CVE-2025-66238 Sunbird DCIM dcTrack and Power IQ Authentication Bypass Using an Alternate Path or Channel

DCIM dcTrack allows an attacker to misuse certain remote access features. An authenticated user with access to the appliance's virtual console could exploit these features to redirect network traffic, potentially accessing restricted services or data on the host machine...

7.4CVSS6.5AI score0.00334EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/04 9:10 p.m.21 views

CVE-2025-66238

CVE-2025-66238 affects Sunbird DCIM dcTrack. An authenticated user with access to the appliance’s virtual console can misuse remote access features to redirect network traffic, potentially accessing restricted services or data on the host. The Red Hat/NVD/CISA entries corroborate a high-severity ...

7.4CVSS6.5AI score0.00334EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/04 12:0 a.m.5 views

Adobe Experience Manager (AEM) Felix Console Default Credentials

The remote Adobe Experience Manager AEM Felix Console is configured with default or predictable credentials, which could allow an attacker to gain unauthorized access to the application and potentially compromise the underlying system. No source data...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/04 12:0 a.m.12 views

Adobe Experience Manager (AEM) Groovy Console

The remote Adobe Experience Manager AEM expose a Groovy console that allows users to execute arbitrary Groovy scripts on the server. This can lead to remote code execution and complete compromise of the AEM instance and the underlying server. No source data...

8.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/12/04 12:0 a.m.11 views

PT-2025-49148

Name of the Vulnerable Software and Affected Versions DCIM dcTrack affected versions not specified Description An authenticated user with access to the appliance's virtual console could misuse certain remote access features to redirect network traffic. This could potentially allow access to...

7.4CVSS6.3AI score0.00334EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2025/12/03 5:21 p.m.320 views

Exploit for CVE-2025-55182

GitHub CVE Scanner 🔍 Quickly scan GitHub repositories for c...

10CVSS7.8AI score0.99616EPSS
SaveExploits395
OSV
OSV
added 2025/12/03 2:35 p.m.42 views

BIT-ACTIVEMQ-2020-13947

An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0...

6.1CVSS5.9AI score0.78972EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/12/02 7:22 a.m.10 views

CVE-2025-65952

Console is a network used to control Gorilla Tag mods' users and other users on the network. Prior to version 2.8.0, a path traversal vulnerability exists where complicated combinations of backslashes and periods can be used to escape the Gorilla Tag path and write to unwanted directories. This...

8.7CVSS6.8AI score0.00414EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/02 1:21 a.m.8 views

GHSA-VJR8-56P3-FMQQ Keycloak unable to restrict access to the admin console

A flaw was found in Keycloak. The Keycloak guides recommend to not expose /admin path to the outside in case the installation is using a proxy. The issue occurs at least via ha-proxy, as it can be tricked to using relative/non-normalized paths to access the /admin application path relative to...

3.7CVSS5.8AI score0.0038EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2025/12/02 1:21 a.m.12 views

Keycloak unable to restrict access to the admin console

A flaw was found in Keycloak. The Keycloak guides recommend to not expose /admin path to the outside in case the installation is using a proxy. The issue occurs at least via ha-proxy, as it can be tricked to using relative/non-normalized paths to access the /admin application path relative to...

3.7CVSS6.2AI score0.0038EPSS
SaveExploits0References7Affected Software1
HPE Security Bulletins
HPE Security Bulletins
added 2025/12/02 12:0 a.m.7 views

HPESBNW04974 rev.1 - HPE Unified OSS Console Assurance Monitoring (UOCAM), Multiple Vulnerabilities

Potential Security Impact: Local: Authentication Bypass, Authorized User, Code Execution, Input Validation; Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Unified OSS Console - Prior to v3.1.17 CVSS Scores: | CVE | CVSS Vector | Base Score | | ---...

10CVSS6.7AI score0.87218EPSS
SaveExploits9
VulnCheck KEV
VulnCheck KEV
added 2025/11/28 12:0 a.m.7 views

VulnCheck KEV: CVE-2025-5605

An authentication bypass vulnerability exists in the Management Console of multiple WSO2 products. A malicious actor with access to the console can manipulate the request URI to bypass authentication and access certain restricted resources, resulting in partial information disclosure. The known...

5.3CVSS5.8AI score0.00799EPSS
SaveIn wildExploits0References17
RedhatCVE
RedhatCVE
added 2025/11/26 4:56 p.m.11 views

CVE-2025-12766

An Insecure Direct Object Reference IDOR vulnerability in the Management Console of BlackBerry® AtHoc® OnPrem version 7.21 could allow an attacker to potentially gain unauthorized knowledge about other organizations hosted on the same Interactive Warning System IWS...

5CVSS6.9AI score0.00188EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/25 11:15 p.m.21 views

CVE-2025-65952

Console is a network used to control Gorilla Tag mods' users and other users on the network. Prior to version 2.8.0, a path traversal vulnerability exists where complicated combinations of backslashes and periods can be used to escape the Gorilla Tag path and write to unwanted directories. This...

8.7CVSS0.00414EPSS
SaveExploits0References3
Rows per page
Query Builder