Lucene search
+L

26425 matches found

Tenable Nessus
Tenable Nessus
•added 2025/08/12 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2022-50186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ath11k: fix missing skb drop on htctxcompletion error On htctxcompletion error the skb is no...

5.5CVSS5.9AI score0.00249EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/12 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2022-50033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: host: ohci-ppc-of: Fix refcount leak bug In ohcihcdppcofprobe, offindcompatiblenode will return a node pointer with refcount incremented. We should use...

5.5CVSS5.5AI score0.00198EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/08/12 12:00 a.m.•21 views

Intel 700 Series Ethernet security vulnerabilities

Intel 700 Series Ethernet is a family of high-performance Ethernet controllers from Intel Corporation. An elevation of privilege vulnerability exists in Intel 700 Series Ethernet that stems from insufficient control flow management and can be exploited by an attacker to cause an elevation of...

8.8CVSS5.8AI score0.00138EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/12 12:00 a.m.•20 views

Ivanti Virtual Application Delivery Controller security vulnerabilities

Ivanti Virtual Application Delivery Controller is a software-defined application delivery controller from Ivanti, USA. A security vulnerability exists in Ivanti Virtual Application Delivery Controller versions prior to 22.9 that stems from a lack of authorization in the management console and cou...

8.8CVSS5.7AI score0.00969EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•7 views

CVE-2025-8310: Missing Authorization

Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows a remote authenticated attacker to take over admin accounts by resetting the password...

8.8CVSS6AI score0.00969EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/12 12:00 a.m.•25 views

PT-2025-32677 · Ivanti · Ivanti Virtual Application Delivery Controller

Name of the Vulnerable Software and Affected Versions: Ivanti Virtual Application Delivery Controller versions prior to 22.9 Description: The admin console of the software lacks proper authorization checks. This allows a remote, authenticated attacker to compromise admin accounts by resetting the...

6.5CVSS5.8AI score0.00969EPSS
SaveExploits0References4
NVD
NVD
•added 2025/08/11 10:15 p.m.•25 views

CVE-2025-54992

OpenKilda is an open-source OpenFlow controller. Prior to version 1.164.0, an XML external entity XXE injection vulnerability was found in OpenKilda which in combination with GHSL-2025-024 allows unauthenticated attackers to exfiltrate information from the instance where the OpenKilda UI is...

6.9CVSS0.00449EPSS
SaveExploits0References3
CVE
CVE
•added 2025/08/11 9:34 p.m.•38 views

CVE-2025-54992

CVE-2025-54992 affects OpenKilda (OpenFlow controller). Multiple connected sources describe an XML external entity (XXE) injection vulnerability, specifically in the SAML/XML handling, that could allow unauthenticated attackers to exfiltrate information from the OpenKilda UI instance, leading to ...

6.9CVSS5.5AI score0.00449EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2025/08/11 3:47 p.m.•333 views

Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller

CVE-2025-5777 – Citrix NetScaler Memory Leak Updated PoC Th...

9.3CVSS8.4AI score0.99972EPSS
SaveExploits20
RedhatCVE
RedhatCVE
•added 2025/08/11 2:29 p.m.•22 views

CVE-2025-8755

A vulnerability was found in macrozheng mall up to 1.0.3 and classified as problematic. This issue affects the function detail of the file UmsMemberController.java of the component com.macro.mall.portal.controller. The manipulation of the argument orderId leads to authorization bypass. The attack...

6.9CVSS5.3AI score0.00603EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/11 10:15 a.m.•27 views

CVE-2025-8841

A vulnerability was identified in zlt2000 microservices-platform up to 6.0.0. Affected by this vulnerability is the function Upload of the file zlt-business/file-center/src/main/java/com/central/file/controller/FileController.java. The manipulation leads to unrestricted upload. The attack can be...

6.5CVSS0.00337EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/08/11 10:02 a.m.•38 views

CVE-2025-8841 zlt2000 microservices-platform FileController.java upload unrestricted upload

A vulnerability was identified in zlt2000 microservices-platform up to 6.0.0. Affected by this vulnerability is the function Upload of the file zlt-business/file-center/src/main/java/com/central/file/controller/FileController.java. The manipulation leads to unrestricted upload. The attack can be...

6.5CVSS0.00337EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/08/11 10:02 a.m.•11 views

CVE-2025-8841 zlt2000 microservices-platform FileController.java upload unrestricted upload

A vulnerability was identified in zlt2000 microservices-platform up to 6.0.0. Affected by this vulnerability is the function Upload of the file zlt-business/file-center/src/main/java/com/central/file/controller/FileController.java. The manipulation leads to unrestricted upload. The attack can be...

6.5CVSS6.1AI score0.00337EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/08/11 12:00 a.m.•6 views

PT-2025-62967

Уязвимость виртуального контроллера Enlogic SCADA-системы «ЭНТЕК» связана c использованием хэша пароля вместо пароля для аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность защищаемой...

10CVSS5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/11 12:00 a.m.•5 views

PT-2025-62973

Уязвимость виртуального контроллера Enlogic SCADA-системы «ЭНТЕК» связана с использованием опасного метода или функции. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код в операционной системе...

9CVSS5.8AI score
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/11 12:00 a.m.•20 views

zlt-microservices-platform security vulnerabilities

zlt-microservices-platform is a platform system for zlt individual developers. A security vulnerability exists in zlt-microservices-platform version 6.0.0 and earlier, which originates from the file zlt-business/file-center/src/main/java/com/central/file/controller/ The upload function in...

6.5CVSS6.6AI score0.00337EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/08/11 12:00 a.m.•8 views

PT-2025-62969

Уязвимость виртуального контроллера Enlogic SCADA-системы «ЭНТЕК» связана с неправильным присвоением разрешений для критичного ресурса. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

9CVSS5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/11 12:00 a.m.•7 views

PT-2025-62971

Уязвимость виртуального контроллера Enlogic SCADA-системы «ЭНТЕК» связана с некорректным внешним управлением именем или путем файл. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, удалять произвольные файлы...

6.8CVSS5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/11 12:00 a.m.•5 views

PT-2025-62970

Уязвимость виртуального контроллера Enlogic SCADA-системы «ЭНТЕК» связана с неверным ограничением имени пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, записывать произвольные файлы...

5.5CVSS5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/11 12:00 a.m.•7 views

PT-2025-62972

Уязвимость виртуального контроллера Enlogic SCADA-системы «ЭНТЕК» связана с неверным ограничением имени пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, читать и записыватъ произвольные файлы...

9CVSS5.8AI score
SaveExploits0References1
Rows per page
Query Builder