Lucene search
K

19175 matches found

Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.6 views

PT-2025-49600

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user...

6.5CVSS6.4AI score0.00228EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.3 views

IBM Cognos Controller和IBM Controller 安全漏洞

IBM Cognos Controller and IBM Controller are both products of International Business Machines IBM.IBM Cognos Controller is a business intelligence and planning solution. The product features process automation, financial audit control, and the creation and management of financial reports.IBM...

2.7CVSS6.2AI score0.0019EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.5 views

PT-2025-49599

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated user to cause a denial of service due to improper validation of a specified quantity size input...

6.5CVSS6.4AI score0.00245EPSS
Exploits0References2
CVE
CVE
added 2025/12/08 12:0 a.m.11 views

CVE-2025-65228

TLK302T telemetry controller (firmware 1.5.1799) contains a stored cross-site scripting vulnerability in its web management interface. The issue affects the web UI component, enabling script injection that could impact other users’ browsers when the interface is accessed. Root cause details are n...

3.5CVSS5.8AI score0.0018EPSS
Exploits1References2Affected Software1
Amazon
Amazon
added 2025/12/08 12:0 a.m.8 views

Medium: containerd

Issue Overview: containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths /var/lib/containerd,...

7.8CVSS5.5AI score0.00151EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2025/12/08 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2023-53760

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: ufs: core: mcq: Fix &hwq-cqlock deadlock issue When ufshcderrhandler is executed, CQ event interrupt can enter waiting for the same lock. This can happen...

5.8AI score0.00145EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.5 views

PT-2025-49598

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of temporary files without atomic operations which may expose sensitive information to an authenticated user due to race condition attacks...

4.3CVSS6.3AI score0.00184EPSS
Exploits0References2
Wolfi
Wolfi
added 2025/12/07 7:47 p.m.7 views

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer, k9s, stakater-reloader, nri-haproxy, kube-bench, falco-no-driver, spqr, sops, terraform-provider-sendgrid, gatekeeper, prometheus-operator, mesosphere-vsphere-csi, terraform-provider-google, k8ssandra-client, cert-manager-webhook-pdns,...

5.8AI score
Exploits0
Wolfi
Wolfi
added 2025/12/07 7:47 p.m.8 views

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer, k9s, stakater-reloader, nri-haproxy, kube-bench, falco-no-driver, spqr, sops, terraform-provider-sendgrid, gatekeeper, prometheus-operator, mesosphere-vsphere-csi, terraform-provider-google, k8ssandra-client, cert-manager-webhook-pdns,...

6.5CVSS7.1AI score0.0027EPSS
Exploits0
GithubExploit
GithubExploit
added 2025/12/07 3:29 p.m.175 views

Exploit for CVE-2020-1472

zerologon-lab Scripts for a lab environment demonstrating the...

10CVSS7AI score0.99512EPSS
Exploits75
Packet Storm News
Packet Storm News
added 2025/12/06 12:0 a.m.4 views

Smart Surveillance: Identifying IoT Device Behaviours Using ML-Powered Traffic Analysis

The proliferation of Internet of Things IoT devices has grown exponentially in recent years, introducing significant security challenges. Accurate identification of the types of IoT devices and their associated actions through network traffic analysis is essential to mitigate potential threats. B...

6.7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/12/05 10:33 p.m.4 views

CVE-2025-13939

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS Gateway Wireless Controller module allows Stored XSS.This issue affects Fireware OS 11.7.2 up to and including 11.12.4+541730, 12.0 up to and including 12.11.4, 12.5 u...

6.1CVSS6.2AI score0.00151EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/05 2:27 p.m.4 views

CVE-2024-45538

Cross-Site Request Forgery CSRF vulnerability in WebAPI Framework in Synology DiskStation Manager DSM before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller DSMUC before 3.1.4-23079 allows remote attackers to execute arbitrary code via unspecified vectors...

9.6CVSS8AI score0.00301EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/05 2:27 p.m.5 views

CVE-2024-45539

Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager DSM before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller DSMUC before 3.1.4-23079 allows remote attackers to conduct denial-of-service attacks via unspecified vectors...

7.5CVSS7AI score0.00404EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/05 9:27 a.m.3 views

CVE-2025-12851 My auctions allegro <= 3.6.32 - Unauthenticated Local File Inclusion via controller

The My auctions allegro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.32 via the 'controller' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any...

8.1CVSS7AI score0.00666EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/05 9:27 a.m.27 views

CVE-2025-12851 My auctions allegro <= 3.6.32 - Unauthenticated Local File Inclusion via controller

The My auctions allegro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.32 via the 'controller' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any...

8.1CVSS0.00666EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/05 12:31 a.m.5 views

EUVD-2025-201300

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS Gateway Wireless Controller module allows Stored XSS.This issue affects Fireware OS 11.7.2 up to and including 11.12.4+541730, 12.0 up to and including 12.11.4, 12.5 u...

4.8CVSS5.7AI score0.00151EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/05 12:0 a.m.6 views

PT-2025-49233

Name of the Vulnerable Software and Affected Versions My auctions allegro plugin for WordPress versions through 3.6.32 Description The My auctions allegro plugin for WordPress is susceptible to a Local File Inclusion issue via the controller parameter. This allows unauthenticated attackers to...

8.1CVSS7.4AI score0.00666EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/12/05 12:0 a.m.12 views

PT-2026-2513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the USB PHY driver for Freescale fsl-usb within the Linux kernel. The vulnerability occurs due to a race condition during device removal where a delayed...

7.8CVSS5.3AI score0.00191EPSS
Exploits0References191
NVD
NVD
added 2025/12/04 10:15 p.m.7 views

CVE-2025-13939

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS Gateway Wireless Controller module allows Stored XSS.This issue affects Fireware OS 11.7.2 up to and including 11.12.4+541730, 12.0 up to and including 12.11.4, 12.5 u...

6.1CVSS0.00151EPSS
Exploits0References1
Rows per page
Query Builder