Lucene search
+L

1763 matches found

Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2017-18026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redmine before 3.2.9, 3.3.x before 3.3.6, and 3.4.x before 3.4.4 does not block the --config and --debugger flags to the Mercurial hg program, which allows remo...

8.8CVSS8.3AI score0.02825EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2017-2377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the WebKit Web Inspector...

7.5CVSS7.6AI score0.01946EPSS
SaveExploits0References2
OSV
OSV
•added 2025/08/22 11:09 a.m.•8 views

OESA-2025-2060 python-werkzeug security update

A comprehensive WSGI web application library Security Fixes: Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the...

7.5CVSS7.4AI score0.03397EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/08/20 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2018-16081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a...

7.4CVSS7.8AI score0.01044EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/18 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2018-6140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to instal...

9.3CVSS8.4AI score0.02644EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/16 1:28 p.m.•20 views

CVE-2025-7353

A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow...

9.3CVSS7.6AI score0.00851EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/15 11:09 a.m.•8 views

OESA-2025-1998 python-werkzeug security update

A comprehensive WSGI web application library Security Fixes: Werkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal...

7.5CVSS7.4AI score0.03397EPSS
SaveExploits1References3
OSV
OSV
•added 2025/08/15 11:09 a.m.•7 views

OESA-2025-1997 python-werkzeug security update

A comprehensive WSGI web application library Security Fixes: Werkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal...

7.5CVSS7.4AI score0.03397EPSS
SaveExploits1References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•6 views

Malicious code in debugger-for-ios-web (npm)

The package debugger-for-ios-web was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•6 views

MAL-2025-18145 Malicious code in debugger-for-ios-web (npm)

The package debugger-for-ios-web was found to contain malicious code...

7.2AI score
SaveExploits0
NVD
NVD
•added 2025/08/14 2:15 p.m.•20 views

CVE-2025-7353

A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow...

9.3CVSS0.00851EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/08/14 1:23 p.m.•6 views

CVE-2025-7353

A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow...

9.3CVSS6.2AI score0.00851EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/08/14 1:23 p.m.•11 views

CVE-2025-7353 Rockwell Automation ControlLogix® Ethernet Remote Code Execution Vulnerability

A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow...

9.3CVSS7.5AI score0.00851EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/14 1:23 p.m.•77 views

CVE-2025-7353

CVE-2025-7353 affects Rockwell Automation ControlLogix Ethernet Modules via the web-based debugger agent (WDB). The connected PT-2025-33275 entry specifies affected software versions pre-12.001 and explains that connecting to the WDB agent from a specific IP can enable remote attackers to perform...

9.3CVSS7.5AI score0.00851EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/14 1:23 p.m.•29 views

CVE-2025-7353 Rockwell Automation ControlLogix® Ethernet Remote Code Execution Vulnerability

A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow...

9.3CVSS0.00851EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/14 12:00 a.m.•13 views

Rockwell Automation ControlLogix Series 安全漏洞

Rockwell Automation ControlLogix Series is a family of programmable controllers from Rockwell Automation, USA. A security vulnerability exists in Rockwell Automation ControlLogix Series, which stems from a web-based debugger agent that could allow a remote attacker to perform memory dumps and...

9.3CVSS6.8AI score0.00851EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/08/14 12:00 a.m.•20 views

PT-2025-33275

Name of the Vulnerable Software and Affected Versions: Rockwell Automation ControlLogix Ethernet Modules versions prior to 12.001 Description: A security issue exists in Rockwell Automation ControlLogix Ethernet Modules due to the web-based debugger agent. Connecting to the WDB agent using a...

10CVSS6.9AI score0.00851EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/14 12:00 a.m.•2 views

CVE-2025-7353: Initialization of a Resource with an Insecure Default

A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow...

9.3CVSS5.9AI score0.00851EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/08 11:09 a.m.•10 views

OESA-2025-1976 gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fixes: A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this iss...

7.8CVSS6AI score0.00194EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/07/25 12:00 a.m.•7 views

NewStart CGSL MAIN 7.02 : python-werkzeug Vulnerability (NS-SA-2025-0136)

The remote NewStart CGSL host, running version MAIN 7.02, has python-werkzeug packages installed that are affected by a vulnerability: - Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's...

7.5CVSS6.9AI score0.03397EPSS
SaveExploits1References3
Rows per page
Query Builder