Lucene search
+L

31762 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/09 9:04 p.m.5 views

Malicious code in redirect-gjl674 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bdb836520004a9db5e1f2dc393f60b5fe6e9e65fb767a0fa9a657ba4ab54219 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2025/10/09 9:04 p.m.3 views

MAL-2025-48109 Malicious code in redirect-1knxok (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77acb7b73565b2fce084cfbe8bff811e4def7bbd333d7789e6763fd604e299d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/09 9:04 p.m.4 views

Malicious code in redirect-whb6rt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd0987c4c2d53a1a9a65785c5954913491bde650e384e279698367c4c8261ff0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
EUVD
EUVD
added 2025/10/09 6:30 p.m.18 views

EUVD-2025-33401

An Uncontrolled Resource Consumption vulnerability in the Connectivity Fault Management CFM daemon and the Connectivity Fault Management Manager cfmman of Juniper Networks Junos OS Evolved on PTX10001-36MR, PTX10002-36QDD, PTX10004, PTX10008, PTX10016 allows an unauthenticated, adjacent attacker ...

7.1CVSS6.6AI score0.00451EPSS
SaveExploits1References3
NVD
NVD
added 2025/10/09 5:16 p.m.28 views

CVE-2025-59986

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the input fields in Model Devices that, when visited by another user, enables the attacker to execute commands with the...

6.1CVSS0.00207EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/09 5:16 p.m.11 views

CVE-2025-59986

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the input fields in Model Devices that, when visited by another user, enables the attacker to execute commands with the...

5.1CVSS5.9AI score0.00207EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/09 4:15 p.m.12 views

CVE-2025-59968

A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated network-based attacker to read or modify metadata via the web interface. Tampering with this metadata can result in managed SRX Series devices permitting network traffic that...

8.6CVSS0.00284EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/09 4:15 p.m.18 views

CVE-2025-59967

A NULL Pointer Dereference vulnerability in the PFE management daemon evo-pfemand of Juniper Networks Junos OS Evolved on ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509 devices allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. Whenever specific valid...

7.1CVSS0.00187EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/09 4:15 p.m.13 views

CVE-2025-59968

A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated network-based attacker to read or modify metadata via the web interface. Tampering with this metadata can result in managed SRX Series devices permitting network traffic that...

7.7CVSS5.8AI score0.00284EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/09 4:15 p.m.14 views

CVE-2025-59967

A NULL Pointer Dereference vulnerability in the PFE management daemon evo-pfemand of Juniper Networks Junos OS Evolved on ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509 devices allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. Whenever specific valid...

7.1CVSS5.8AI score0.00187EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/09 4:15 p.m.12 views

CVE-2025-52961

An Uncontrolled Resource Consumption vulnerability in the Connectivity Fault Management CFM daemon and the Connectivity Fault Management Manager cfmman of Juniper Networks Junos OS Evolved on PTX10001-36MR, PTX10002-36QDD, PTX10004, PTX10008, PTX10016 allows an unauthenticated, adjacent attacker ...

7.1CVSS5.9AI score0.00451EPSS
SaveExploits1References2
NVD
NVD
added 2025/10/09 4:15 p.m.15 views

CVE-2025-52961

An Uncontrolled Resource Consumption vulnerability in the Connectivity Fault Management CFM daemon and the Connectivity Fault Management Manager cfmman of Juniper Networks Junos OS Evolved on PTX10001-36MR, PTX10002-36QDD, PTX10004, PTX10008, PTX10016 allows an unauthenticated, adjacent attacker ...

7.1CVSS0.00451EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/10/09 4:09 p.m.6 views

CVE-2025-59986 Junos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injection

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the input fields in Model Devices that, when visited by another user, enables the attacker to execute commands with the...

6.1CVSS6.6AI score0.00207EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/09 4:09 p.m.40 views

CVE-2025-59986

CVE-2025-59986 affects Juniper Networks Junos Space versions prior to 24.1R4. It is an input handling (XSS) vulnerability in Model Devices that lets an attacker inject script tags, which can be executed in the context of other users, including administrators. The issue arises from improper input ...

6.1CVSS6.6AI score0.00207EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/10/09 4:09 p.m.18 views

CVE-2025-59986 Junos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injection

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the input fields in Model Devices that, when visited by another user, enables the attacker to execute commands with the...

6.1CVSS0.00207EPSS
SaveExploits0References1
Microsoft Secure
Microsoft Secure
added 2025/10/09 4:00 p.m.19 views

Securing agentic AI: Your guide to the Microsoft Ignite sessions catalog

Security is a core focus at Microsoft Ignite 2025, reflected in dedicated sessions and hands-on experiences designed for security professionals and leaders. Whether you’re shaping strategy or working on the front lines, Microsoft Ignite offers direct access to the latest advancements and practica...

6.8AI score
SaveExploits0
Cvelist
Cvelist
added 2025/10/09 3:48 p.m.24 views

CVE-2025-59968 Junos Space Security Director: Insufficient authorization for sensitive resources in web interface

A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated network-based attacker to read or modify metadata via the web interface. Tampering with this metadata can result in managed SRX Series devices permitting network traffic that...

8.6CVSS0.00284EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/09 3:48 p.m.7 views

CVE-2025-59968 Junos Space Security Director: Insufficient authorization for sensitive resources in web interface

A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated network-based attacker to read or modify metadata via the web interface. Tampering with this metadata can result in managed SRX Series devices permitting network traffic that...

8.6CVSS6.5AI score0.00284EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/09 3:47 p.m.20 views

CVE-2025-59967 Junos OS Evolved: ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509: When specific valid multicast traffic is received on the L3 interface on a vulnerable device evo-pfemand crashes and restarts

A NULL Pointer Dereference vulnerability in the PFE management daemon evo-pfemand of Juniper Networks Junos OS Evolved on ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509 devices allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. Whenever specific valid...

7.1CVSS0.00187EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/09 3:47 p.m.4 views

CVE-2025-59967 Junos OS Evolved: ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509: When specific valid multicast traffic is received on the L3 interface on a vulnerable device evo-pfemand crashes and restarts

A NULL Pointer Dereference vulnerability in the PFE management daemon evo-pfemand of Juniper Networks Junos OS Evolved on ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509 devices allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. Whenever specific valid...

7.1CVSS6.5AI score0.00187EPSS
SaveExploits0References1
Rows per page
Query Builder