Lucene search
+L

288 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/26 12:00 a.m.•2 views

CVE-2025-45311: Incorrect Privilege Assignment

Insecure permissions in fail2ban-client v0.11.2 allows attackers with limited sudo privileges to perform arbitrary operations as root. NOTE: this is disputed by multiple parties because the action for a triggered rule can legitimately be an arbitrary operation as root. Thus, the software is...

8.8CVSS6AI score0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/26 12:00 a.m.•2 views

CVE-2025-45311

Insecure permissions in fail2ban-client v0.11.2 allows attackers with limited sudo privileges to perform arbitrary operations as root. NOTE: this is disputed by multiple parties because the action for a triggered rule can legitimately be an arbitrary operation as root. Thus, the software is...

6.7AI score0.00369EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/11/26 12:00 a.m.•20 views

PT-2025-48139

Name of the Vulnerable Software and Affected Versions fail2ban-client version 0.11.2 Description Insecure permissions in fail2ban-client version 0.11.2 can allow attackers with limited sudo privileges to perform arbitrary operations as root. Recommendations Update fail2ban-client to a newer versi...

8.8CVSS6.6AI score0.00369EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/11/26 12:00 a.m.•21 views

fail2ban 安全漏洞

fail2ban is an application of fail2ban open source. Disablement leads to multiple hosts with incorrect authentication. A security vulnerability exists in fail2ban version v0.11.2 that stems from improper privilege control and could lead to the execution of arbitrary actions...

8.8CVSS7.2AI score0.00369EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/11/26 12:00 a.m.•22 views

CVE-2025-45311

Insecure permissions in fail2ban-client v0.11.2 allows attackers with limited sudo privileges to perform arbitrary operations as root. NOTE: this is disputed by multiple parties because the action for a triggered rule can legitimately be an arbitrary operation as root. Thus, the software is...

0.00369EPSS
SaveExploits0References3
CVE
CVE
•added 2025/11/26 12:00 a.m.•34 views

CVE-2025-45311

The fail2ban-client version v0.11.2 is affected by a vulnerability involving insecure permissions . This flaw allows attackers with limited sudo privileges to perform arbitrary operations as root . However, it is noted that some parties dispute this vulnerability, arguing that the software's abil...

8.8CVSS6.7AI score0.00369EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2025/11/26 12:00 a.m.•16 views

CVE-2025-45311

Removed by vendor...

8.8CVSS6.8AI score0.00369EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2006-6285

Malware in sbrugna...

5CVSS6.1AI score0.01775EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2013-6960

Malware in sbrugna...

5CVSS6AI score0.03235EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2012-5526

Malware in sbrugna...

7.5CVSS5.8AI score0.03123EPSS
SaveExploits0References11
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2009-4981

Malware in sbrugna...

4.7CVSS6.1AI score0.0034EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2013-6959

Malware in sbrugna...

5CVSS6AI score0.03235EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•31 views

EUVD-2021-19521

Malware in sbrugna...

8.1CVSS7.9AI score0.03621EPSS
SaveExploits1References11
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2009-0366

Malware in sbrugna...

4CVSS6.1AI score0.01303EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2013-2137

Malware in sbrugna...

5CVSS5.8AI score0.01763EPSS
SaveExploits0References11
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2022-40927

Malicious code in bioql PyPI...

9.1CVSS9AI score0.00755EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/06/25 4:46 p.m.•12 views

CVE-2025-52576

Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.46, Kanboard is vulnerable to username enumeration and IP spoofing-based brute-force protection bypass. By analyzing login behavior and abusing trusted HTTP headers, an attacker can determine vali...

5.3CVSS5.4AI score0.00355EPSS
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/04/28 12:00 a.m.•23 views

A Virtual Cybersecurity Department for Securing Digital Twins in Water Distribution Systems

Digital twins DTs help improve real-time monitoring and decision-making in water distribution systems. However, their connectivity makes them easy targets for cyberattacks such as scanning, denial-of-service DoS, and unauthorized access. Small and medium-sized enterprises SMEs that manage these...

8.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2025/03/24 12:00 a.m.•3612 views

Fail2Ban 0.11.2 Privilege Escalation / Command Execution

If a user can execute fail2ban-client with sudo, they can achieve local privilege escalation and command injection via user-modified actions. Author: Raed Ahsan Date: 24/03/2025 Fail2Ban-client privilege-escalation """ Fail2Ban Automated Exploit Script - CVE Candidate...

8.2AI score
SaveExploits0
OSV
OSV
•added 2024/06/15 12:00 a.m.•15 views

OPENSUSE-SU-2024:10347-1 SuSEfirewall2-fail2ban-0.9.5-1.1 on GA media

These are all security issues fixed in the SuSEfirewall2-fail2ban-0.9.5-1.1 package on the GA media of openSUSE Tumbleweed...

5CVSS5.9AI score0.03235EPSS
SaveExploits2References4
Rows per page
Query Builder