Lucene search
+L

22290 matches found

CVE
CVE
added 2025/09/03 9:10 a.m.62 views

CVE-2024-43166

Summary (CVE-2024-43166) : Apache DolphinScheduler before 3.2.2 has an incorrect default permissions vulnerability. Multiple sources (Red Hat, NVD, OSV, CNVD, GHSA) reference the same issue and advise upgrading to 3.3.1 to fix it. The CVSSv3.1 score is listed as 9.8 (CRITICAL) with network attack...

9.8CVSS6.4AI score0.00515EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/03 9:10 a.m.5 views

CVE-2024-43166

Incorrect Default Permissions vulnerability in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue...

6.4AI score0.00515EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/03 9:10 a.m.13 views

CVE-2024-43166

Incorrect Default Permissions vulnerability in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue...

9.8CVSS7AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/09/03 12:00 a.m.15 views

PT-2025-35816

Name of the Vulnerable Software and Affected Versions: Adacore Ada Web Server AWS versions prior to 25.2 Description: The Adacore Ada Web Server AWS is susceptible to a denial-of-service DoS condition resulting from improper handling of SSL handshakes during connection initialization. The server...

7.5CVSS6.4AI score0.00355EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/09/03 12:00 a.m.17 views

PT-2025-35707

Name of the Vulnerable Software and Affected Versions: Apache DolphinScheduler versions prior to 3.2.2 Description: An incorrect default permissions issue exists in Apache DolphinScheduler. Recommendations: Upgrade to version 3.3.1...

9.8CVSS6.4AI score0.00515EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/09/03 12:00 a.m.12 views

Apache DolphinScheduler 安全漏洞

Apache DolphinScheduler is a modern data scheduling platform from the Apache USA Foundation. Apache DolphinScheduler versions prior to 3.2.2 are vulnerable to a default privilege error vulnerability, no details of the vulnerability are provided at this time...

9.8CVSS6.5AI score0.00515EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/03 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2018-5431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...

6.3CVSS5.6AI score0.00602EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/02 8:15 p.m.10 views

CVE-2025-8302

Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute...

8.8CVSS6.2AI score0.00149EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/02 8:15 p.m.12 views

CVE-2025-8302

Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute...

8.8CVSS0.00149EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/02 8:02 p.m.34 views

CVE-2025-8300

Realtek rtl81xx SDK Wi‑Fi Driver rtwlanu vulnerability (CVE-2025-8300): a heap-based overflow in N6CSet_DOT11_CIPHER_DEFAULT_KEY due to inadequate validation of user data length, enabling local privilege escalation to SYSTEM after an attacker gains low-privilege code execution. Affected component...

8.8CVSS7.1AI score0.00149EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/09/02 8:02 p.m.41 views

CVE-2025-8300 Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute...

8.8CVSS0.00149EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/02 7:46 p.m.7 views

CVE-2025-7974 rocket.chat Incorrect Authorization Information Disclosure Vulnerability

rocket.chat Incorrect Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of rocket.chat. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web...

3.7CVSS4.3AI score0.00412EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/02 7:46 p.m.8 views

CVE-2025-7974 rocket.chat Incorrect Authorization Information Disclosure Vulnerability

rocket.chat Incorrect Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of rocket.chat. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web...

3.7CVSS5.9AI score
SaveExploits0References3
NVD
NVD
added 2025/09/02 12:15 p.m.15 views

CVE-2025-6519

E3 Site Supervisor firmware version 2.31F01 has a default admin user "ONEDAY" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user...

9.8CVSS0.0052EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/02 12:15 p.m.9 views

CVE-2025-6519

E3 Site Supervisor firmware version 2.31F01 has a default admin user "ONEDAY" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user...

9.8CVSS5.8AI score0.0052EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/02 11:23 a.m.35 views

CVE-2025-6519

CVE-2025-6519 overview (confirmed details) : Affects Copeland E3 Site Supervisor firmware versions prior to 2.31F01. The vulnerability stems from a default admin account named “ONEDAY” that uses a daily-generated password which can be predicted. The ONEDAY user cannot be deleted or modified by an...

9.8CVSS6.5AI score0.0052EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/02 11:23 a.m.4 views

CVE-2025-6519 Consistent predictable generation of the password for the default admin user "ONEDAY" to the application services

E3 Site Supervisor firmware version 2.31F01 has a default admin user "ONEDAY" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user...

9.3CVSS6.5AI score0.0052EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/02 11:23 a.m.18 views

CVE-2025-6519 Consistent predictable generation of the password for the default admin user "ONEDAY" to the application services

E3 Site Supervisor firmware version 2.31F01 has a default admin user "ONEDAY" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user...

9.3CVSS0.0052EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/02 12:00 a.m.13 views

Realtek rtl81xx SDK Wi-Fi Driver 安全漏洞

Realtek rtl81xx SDK Wi-Fi Driver is a network card driver software from Realtek Semiconductor Realtek, China. A security vulnerability exists in the Realtek rtl81xx SDK Wi-Fi Driver, which stems from insufficient validation of the N6CSetDOT11CIPHERDEFAULTKEY function, which could result in elevat...

8.8CVSS8.5AI score0.00149EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/02 12:00 a.m.14 views

PT-2025-35610

Name of the Vulnerable Software and Affected Versions: Realtek rtl81xx SDK Wi-Fi Driver rtwlanu affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the...

8.8CVSS8.7AI score0.00149EPSS
SaveExploits0References7
Rows per page
Query Builder