Lucene search
K

67 matches found

EUVD
EUVD
added 2025/12/09 12:31 a.m.1 views

EUVD-2025-201818

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of temporary files without atomic operations which may expose sensitive information to an authenticated user due to race condition attacks...

4.3CVSS5.7AI score0.0003EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/09 12:31 a.m.2 views

EUVD-2025-201834

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user...

6.5CVSS5.8AI score0.00034EPSS
Exploits0References2
OSV
OSV
added 2025/12/08 10:15 p.m.1 views

CVE-2025-36017

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user...

6.5CVSS5.8AI score0.00034EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-13768

Malware in sbrugna...

8.8CVSS8.7AI score0.00976EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-29425

Malware in sbrugna...

5.9CVSS6AI score0.00322EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-19440

Malicious code in bioql PyPI...

6.7CVSS6.6AI score0.0011EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/26 12:0 a.m.2 views

PT-2025-39647

Name of the Vulnerable Software and Affected Versions IBM Cognos Controller versions 11.0.0 through 11.0.1 IBM Controller versions 11.1.0 through 11.1.1 Description The software uses hardcoded cryptographic keys for signing session cookies, potentially allowing an attacker to obtain sensitive...

3.7CVSS6.3AI score0.0003EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/06/30 12:0 a.m.1 views

Delta Electronics DTM 安全漏洞

Delta Electronics DTN Soft is a temperature controller software from Delta Electronics China. A code execution vulnerability exists in Delta Electronics DTN due to deserialization of untrustworthy data. An attacker can exploit this vulnerability to execute arbitrary code on the system...

7.8CVSS8.1AI score0.01989EPSS
Exploits0References1
Chainguard
Chainguard
added 2024/05/29 4:15 p.m.23 views

CVE-2024-31079 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

4.8CVSS6.7AI score0.00832EPSS
Exploits0
Prion
Prion
added 2023/11/14 7:15 p.m.16 views

Design/Logic Flaw

Incorrect default permissions in some Intel Arc RGB Controller software before version 1.06 may allow an authenticated user to potentially enable escalation of privilege via local access...

4.3CVSS7.3AI score0.00064EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/14 7:4 p.m.9 views

CVE-2023-32638

Incorrect default permissions in some Intel Arc RGB Controller software before version 1.06 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS8AI score0.00064EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/09/28 12:0 a.m.2 views

PT-2022-6086 · Cisco · Cisco Ios Xe Wireless Controller +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family affected versions not specified Description: A vulnerability in the processing of Control and Provisioning of Wireless Access Points CAPWAP Mobility messages could allow a...

8.6CVSS7.4AI score0.0095EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/07/06 12:0 a.m.2 views

Gallagher Controller 6000 安全漏洞

The Gallagher Controller 6000 is an interface between the Gallagher Command Center server and distributed field hardware from Gallagher New Zealand. A security vulnerability exists in the Gallagher Controller 6000 that originates from an attack via conflicting ARP packets with duplicate IP...

7.8CVSS7.4AI score0.00367EPSS
Exploits0References2
Prion
Prion
added 2022/06/15 6:15 p.m.12 views

Authorization

A vulnerability in the web-based management interface of Cisco AppDynamics Controller Software could allow an unauthenticated, remote attacker to access a configuration file and the login page for an administrative console that they would not normally have authorization to access. This...

5CVSS5.4AI score0.00446EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/06/15 5:55 p.m.58 views

CVE-2022-20736

The CVE-2022-20736 issue affects Cisco AppDynamics Controller web-based management interface. It stems from improper authorization checking for HTTP requests, allowing an unauthenticated, remote attacker to access a configuration file and the login page for an administrative console that should b...

5.3CVSS5.4AI score0.00446EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.2 views

CVE-2022-23237

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites...

6.1CVSS6.4AI score0.00197EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.1 views

Netapp E-Series SANtricity OS Controller Software 输入验证错误漏洞

Netapp E-Series SANtricity OS Controller Software is a disk array OS controller software from Netapp, Inc. A security vulnerability exists in Netapp E-Series SANtricity OS Controller Software versions 11.x through 11.70.2, which stems from vulnerability to host header injection attacks. An attack...

6.1CVSS6.4AI score0.00197EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.1 views

Netapp E-Series SANtricity OS Controller Software 安全漏洞

Netapp E-Series SANtricity OS Controller Software is a disk array OS controller software from Netapp Inc. in the United States. A security vulnerability exists in Netapp E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2. An attacker could exploit the vulnerability by stori...

4.4CVSS5.3AI score0.00092EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/06/01 1:54 p.m.16 views

CVE-2022-23237

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites...

6.6AI score0.00197EPSS
Exploits0References1
CVE
CVE
added 2022/06/01 1:54 p.m.64 views

CVE-2022-23237

CVE-2022-23237 affects NetApp E-Series SANtricity OS Controller Software, versions 11.x up to 11.70.2. The root cause is a host header injection vulnerability in the software that could allow an attacker to redirect users to malicious websites. Impact is described as partial confidentiality/integ...

6.1CVSS6.3AI score0.00197EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder