Lucene search
K

35 matches found

OpenVAS
OpenVAS
added 2026/02/02 12:0 a.m.4 views

Huawei EulerOS: Security Advisory for wget (EulerOS-SA-2026-1203)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS5.4AI score0.00592EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/31 12:0 a.m.1 views

EulerOS Virtualization 2.10.1 : wget (EulerOS-SA-2026-1151)

According to the versions of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are...

6.5CVSS6AI score0.00592EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/31 12:0 a.m.2 views

EulerOS Virtualization 2.10.0 : wget (EulerOS-SA-2026-1203)

According to the versions of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are...

6.5CVSS6AI score0.00592EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/29 12:0 a.m.2 views

PT-2026-5275

Elaniin CMS 1.0 contains an authentication bypass vulnerability that allows attackers to access the dashboard by manipulating the login page with SQL injection. Attackers can bypass authentication by sending crafted email and password parameters with '=''or' payload to login.php, granting...

8.8CVSS5.9AI score0.00138EPSS
Exploits0References5
OSV
OSV
added 2025/12/12 5:20 a.m.5 views

CVE-2025-67508 gardenctl is vulnerable to Command Injection when used with non‑POSIX shells

gardenctl is a command-line client for the Gardener which configures access to clusters and cloud provider CLI tools. When using non‑POSIX shells such as Fish and PowerShell, versions 2.11.0 and below of gardenctl allow an attacker with administrative privileges for a Gardener project to craft...

8CVSS6.6AI score0.0003EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-26173

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.00153EPSS
Exploits0References1
NVD
NVD
added 2025/08/14 5:15 p.m.3 views

CVE-2025-20265

A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device. This vulnerability is due to a lack of proper handling of user input...

10CVSS0.00222EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/05/12 12:0 a.m.6 views

EulerOS 2.0 SP10 : wget (EulerOS-SA-2025-1544)

According to the versions of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these...

6.5CVSS7.7AI score0.00592EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/04/01 12:0 a.m.4 views

EulerOS 2.0 SP13 : wget (EulerOS-SA-2025-1344)

According to the versions of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these...

6.5CVSS7.7AI score0.00592EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/04/01 12:0 a.m.8 views

EulerOS 2.0 SP13 : wget (EulerOS-SA-2025-1327)

According to the versions of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these...

6.5CVSS7.7AI score0.00592EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/20 12:0 a.m.20 views

EulerOS 2.0 SP12 : wget (EulerOS-SA-2025-1309)

According to the versions of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these...

6.5CVSS7.7AI score0.00592EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/03/19 12:0 a.m.4 views

Huawei EulerOS: Security Advisory for wget (EulerOS-SA-2025-1309)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.00592EPSS
Exploits0References2
OSV
OSV
added 2024/11/27 7:59 p.m.5 views

MGASA-2024-0378 Updated wget packages fix security vulnerability

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host. CVE-2024-10524...

6.5CVSS6.4AI score0.00592EPSS
Exploits0References3
Mageia
Mageia
added 2024/11/27 7:59 p.m.17 views

Updated wget packages fix security vulnerability

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host. CVE-2024-10524...

6.5CVSS7.4AI score0.00592EPSS
Exploits0References2
NVD
NVD
added 2024/11/19 3:15 p.m.9 views

CVE-2024-10524

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host...

6.5CVSS0.00592EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:19 a.m.1 views

SUSE CVE-2018-1999001

A unauthorized modification of configuration vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in User.java that allows attackers to provide crafted login credentials that cause Jenkins to move the config.xml file from the Jenkins home directory. If Jenkins is started without...

8.8CVSS4.9AI score0.27312EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/02/07 12:0 a.m.2 views

Rancher Labs Rancher 注入漏洞

Rancher Labs Rancher is a suite of open source, enterprise-grade container management platforms from US-based Rancher Labs. An injection vulnerability exists in SUSE Ranche that stems from the presence of a special element injection vulnerability that allows a remote attacker to cause a denial of...

7.5CVSS7.3AI score0.01063EPSS
Exploits0References2
OSV
OSV
added 2022/09/08 1:15 p.m.0 views

CVE-2022-20923

A vulnerability in the IPSec VPN Server authentication functionality of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to bypass authentication controls and access the IPSec VPN network. This vulnerability is due to the improper...

9.8CVSS5.8AI score0.00153EPSS
Exploits0References1
Prion
Prion
added 2022/06/16 5:15 p.m.10 views

Authentication flaw

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials...

5CVSS7.6AI score0.00667EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2022/04/15 12:0 a.m.16 views

Cisco Wireless LAN Controller Authentication Bypass Vulnerability

Cisco Wireless LAN Controller WLC is a wireless LAN controller product from Cisco USA. The product provides security policy, intrusion detection, and other functions in wireless LANs.An authentication bypass vulnerability exists in Cisco Wireless LAN Controller, which could be exploited by an...

10CVSS3.1AI score0.02653EPSS
Exploits0References1
Rows per page
Query Builder