Lucene search
+L

8176 matches found

CNNVD
CNNVD
added 2025/08/27 12:00 a.m.9 views

Cisco Nexus Dashboard 路径遍历漏洞

Cisco Nexus Dashboard is a single console from Cisco, Inc. It can simplify the operation and management of data center networks. A path traversal vulnerability exists in Cisco Nexus Dashboard, which stems from insufficient validation of backup file content and could lead to a path traversal attac...

7.2CVSS6.4AI score0.0059EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/27 12:00 a.m.8 views

Cisco Nexus Dashboard和Cisco Nexus Dashboard Fabric Controller 安全漏洞

Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller are both products of Cisco, Inc.Cisco Nexus Dashboard is a single console. Cisco Nexus Dashboard is a single console that simplifies the operation and management of data center networks.Cisco Nexus Dashboard Fabric Controller is a...

5.4CVSS6AI score0.00249EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2024-0861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab EE affecting all versions starting from 16.4 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions...

4.3CVSS5AI score0.00404EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/27 12:00 a.m.8 views

PT-2025-34896 · Cisco · Cisco Nexus Dashboard

Name of the Vulnerable Software and Affected Versions: Cisco Nexus Dashboard affected versions not specified Description: A vulnerability exists in the backup restore functionality of Cisco Nexus Dashboard that could allow an authenticated, remote attacker to conduct a path traversal attack. This...

6.5CVSS6.2AI score0.0059EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2022-0390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control in Gitlab CE/EE versions 12.7 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1 allowed for project non-members to retrieve issue details wh...

4.3CVSS5.1AI score0.00913EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2022-45582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter. CVE-2022-45582 Note that Nessus relies on the presence of...

6.1CVSS6.1AI score0.00795EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/26 7:07 p.m.8 views

Security Bulletin: IBM Datapower Operations Dashboard could potentially cause SSRF and credential leakage CVE-2025-27152

Summary Axios is used by the IBM Datapower Operations Dashboard for HTTP requests to communicate with servers or APIs Vulnerability Details CVEID:CVE-2025-27152 DESCRIPTION: axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than...

8.7CVSS5.4AI score0.00763EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/26 7:06 p.m.13 views

Security Bulletin: IBM Datapower Operations Dashboard could cause a native crash CVE-2025-24970

Summary Netty is used by the IBM Datapower Operations Dashboard for it's network application framework implementation Vulnerability Details CVEID:CVE-2025-24970 DESCRIPTION: Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final an...

7.5CVSS6.6AI score0.02149EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/26 7:05 p.m.5 views

Security Bulletin: IBM Datapower Operations Dashboard could allow a denial of service attack CWE-1321

Summary Axios is used by the IBM Datapower Operations Dashboard for HTTP requests to communicate with servers or APIs Vulnerability Details IBM X-Force ID: 294242 DESCRIPTION: Node.js Axios module is vulnerable to a denial of service, caused by a prototype pollution in the formDataToJSON function...

7.9AI score
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/26 7:04 p.m.9 views

Security Bulletin: IBM Datapower Operations Dashboard could cause a denial of service CWE-1321

Summary Axios is used by the IBM Datapower Operations Dashboard for HTTP requests to communicate with servers or APIs Vulnerability Details IBM X-Force ID: 294242 DESCRIPTION: Node.js Axios module is vulnerable to a denial of service, caused by a prototype pollution in the formDataToJSON function...

7.9AI score
SaveExploits0Affected Software1
CVE
CVE
added 2025/08/26 6:02 a.m.31 views

CVE-2025-9476

CVE-2025-9476 affects the SourceCodester Human Resource Information System 1.0, specifically an issue in the file /Superadmin_Dashboard/process/editemployee_process.php. The vulnerability arises from manipulation of the argument employee_file201, enabling an unrestricted file upload. This can be ...

9.8CVSS7.2AI score0.00494EPSS
SaveExploits1References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2020-13320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions to view the project security dashboard...

6.5CVSS6.4AI score0.01038EPSS
SaveExploits1References2
NVD
NVD
added 2025/08/25 10:15 p.m.12 views

CVE-2025-9422

A vulnerability was found in oitcode samarium up to 0.9.6. This impacts an unknown function of the file /dashboard/team of the component Team Image Handler. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used...

5.4CVSS0.00347EPSS
SaveExploits1References4
OSV
OSV
added 2025/08/25 10:15 p.m.9 views

CVE-2025-9422

A vulnerability was found in oitcode samarium up to 0.9.6. This impacts an unknown function of the file /dashboard/team of the component Team Image Handler. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used...

5.4CVSS4AI score0.00347EPSS
SaveExploits1References4
CVE
CVE
added 2025/08/25 10:02 p.m.25 views

CVE-2025-9422

CVE-2025-9422 affects oitcode Samarium up to version 0.9.6, specifically the Team Image Handler component in the /dashboard/team path. The vulnerability enables cross-site scripting (XSS) and may be triggered remotely; exploitation is publicly known. Multiple sources corroborate the issue but do ...

5.4CVSS3.5AI score0.00347EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/25 10:02 p.m.4 views

CVE-2025-9422 oitcode samarium Team Image team cross site scripting

A vulnerability was found in oitcode samarium up to 0.9.6. This impacts an unknown function of the file /dashboard/team of the component Team Image Handler. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used...

4.8CVSS6.4AI score0.00347EPSS
SaveExploits1References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/25 6:33 p.m.6 views

Malicious code in @espace-client-axafr/dashboard-standard-card (npm)

The package communicates with a domain associated with malicious activity...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/25 6:33 p.m.11 views

MAL-2025-41850 Malicious code in @espace-client-axafr/dashboard-standard-card (npm)

The package communicates with a domain associated with malicious activity...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/25 6:32 p.m.7 views

Malicious code in @espace-client-axafr/dashboard-detail-card (npm)

The package communicates with a domain associated with malicious activity...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/25 6:32 p.m.10 views

MAL-2025-41849 Malicious code in @espace-client-axafr/dashboard-detail-card (npm)

The package communicates with a domain associated with malicious activity...

7AI score
SaveExploits0
Rows per page
Query Builder