Lucene search
+L

21355 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/21 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2023-26268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Design documents with matching document IDs, from databases on the same cluster, may share a mutable Javascript environment when using these design document...

5.3CVSS6.2AI score0.01429EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/21 12:00 a.m.8 views

PT-2025-34237

Name of the Vulnerable Software and Affected Versions: org.keycloak/keycloak-model-storage-service affected versions not specified Description: A flaw exists in the KeycloakRealmImport custom resource, which substitutes placeholders within imported realm documents, referencing environment...

4.9CVSS4.2AI score0.00497EPSS
SaveExploits0References19
Positive Technologies
Positive Technologies
added 2025/08/21 12:00 a.m.9 views

PT-2025-34243 · WordPress · Eslint-Ban-Moment

Name of the Vulnerable Software and Affected Versions: eslint-ban-moment versions 3.0.0 and earlier Description: The eslint-ban-moment plugin exposes a sensitive Supabase URI in the .env file. A valid Supabase URI containing a username and password grants an attacker complete unauthorized access...

9.8CVSS7.2AI score0.00362EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:00 a.m.7 views

TencentOS Server 4: mtr (TSSA-2025:0537)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0537 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

7.8CVSS7.5AI score0.00151EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2023-50290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables...

6.5CVSS6.6AI score0.68446EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/20 8:08 p.m.13 views

CVE-2025-9176

An os command injection flaw has been discovered in neurobin shc. The make function in the src/shc.c file does not properly handle environmental variables, which may lead to command injection. This vulnerability requires local access in order to exploit. Mitigation Mitigation for this issue is...

7.8CVSS7.8AI score0.01291EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/20 6:55 p.m.20 views

USN-7703-2 linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-gkeop, linux-ibm, linux-ibm-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - GPIO subsystem; - GPU...

9.8CVSS6.7AI score0.36848EPSS
SaveExploits1References71
Ubuntu
Ubuntu
added 2025/08/20 6:55 p.m.14 views

USN-7703-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - GPIO subsystem; - GPU...

9.8CVSS6.9AI score0.36848EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2025/08/20 4:02 p.m.8 views

Moderate: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...

7.5CVSS6.7AI score0.00601EPSS
SaveExploits1References4
GithubExploit
GithubExploit
added 2025/08/20 7:37 a.m.261 views

Exploit for Improper Input Validation in Tvt Td-2108Ts-Cl_Firmware

CVE-2025-34036 - TVT DVR Simulation This repository contains...

10CVSS7.2AI score0.26906EPSS
SaveExploits2
SUSE Linux
SUSE Linux
added 2025/08/20 7:35 a.m.8 views

Security update for go1.25

go1.25 released 2025-08-12 is a major release of Go. go1.25.x minor releases will be provided through August 2026. https://github.com/golang/go/wiki/Go-Release-Cycle go1.25 arrives six months after Go 1.24. Most of its changes are in the implementation of the toolchain, runtime, and libraries. As...

9.3CVSS7AI score0.00524EPSS
SaveExploits1References14
NVD
NVD
added 2025/08/20 12:15 a.m.14 views

CVE-2025-9176

A security flaw has been discovered in neurobin shc up to 4.0.3. Impacted is the function make of the file src/shc.c of the component Environment Variable Handler. The manipulation results in os command injection. The attack is only possible with local access. The exploit has been released to the...

7.8CVSS0.01291EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/08/20 12:00 a.m.12 views

Shell Script Compiler 安全漏洞

Shell Script Compiler is a shell script compiler by the individual developer Md Jahidul Hamid. A security vulnerability exists in Shell Script Compiler 4.0.3 and earlier versions, which stems from improper handling of environment variables and can lead to os command injection...

7.8CVSS7.1AI score0.01291EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2021-47274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tracing: Correct the length check which causes memory corruption We've suffered from severe...

9.8CVSS6.3AI score0.00747EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2024-47535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe...

5.5CVSS6.8AI score0.00408EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-25193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe reading of...

5.5CVSS6.8AI score0.00391EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/19 11:32 p.m.23 views

CVE-2025-9176 neurobin shc Environment Variable shc.c make os command injection

A security flaw has been discovered in neurobin shc up to 4.0.3. Impacted is the function make of the file src/shc.c of the component Environment Variable Handler. The manipulation results in os command injection. The attack is only possible with local access. The exploit has been released to the...

5.3CVSS0.01291EPSS
SaveExploits0References4
CVE
CVE
added 2025/08/19 11:32 p.m.38 views

CVE-2025-9176

CVE-2025-9176 affects neurobin shc up to version 4.0.3. The vulnerability is in the Environment Variable Handler, specifically the make function in src/shc.c, enabling local OS command injection. Exploitation requires local access, and public exploits/ PoC are mentioned in multiple sources. Remed...

7.8CVSS7.5AI score0.01291EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/19 11:32 p.m.6 views

CVE-2025-9176 neurobin shc Environment Variable shc.c make os command injection

A security flaw has been discovered in neurobin shc up to 4.0.3. Impacted is the function make of the file src/shc.c of the component Environment Variable Handler. The manipulation results in os command injection. The attack is only possible with local access. The exploit has been released to the...

5.3CVSS7.5AI score0.01291EPSS
SaveExploits0References4
OSV
OSV
added 2025/08/19 11:32 p.m.11 views

CVE-2025-9176 neurobin shc Environment Variable shc.c make os command injection

A security flaw has been discovered in neurobin shc up to 4.0.3. Impacted is the function make of the file src/shc.c of the component Environment Variable Handler. The manipulation results in os command injection. The attack is only possible with local access. The exploit has been released to the...

4.8CVSS5.8AI score
SaveExploits0References6
Rows per page
Query Builder