Lucene search
+L

15705 matches found

BDU FSTEC
BDU FSTEC
added 2025/08/27 12:00 a.m.8 views

The vulnerability of the get_net() function in the net component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the getnet function in the net component of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00175EPSS
SaveExploits0References13Affected Software2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2019-17673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header. CVE-2019-17673 Note tha...

7.5CVSS7.1AI score0.03154EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2024-3024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function getlayer4v6 of the file...

7.8CVSS5AI score0.00437EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2021-26955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because xcb::xproto::GetAtomNameReply::name calls...

9.8CVSS8.2AI score0.01728EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2020-36067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call. CVE-2020-36067 Note that...

7.5CVSS7AI score0.01387EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/26 6:37 p.m.11 views

GHSA-6W4W-5W54-RJVR Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity

Summary Using idlelib.autocomplete.AutoComplete.getentity, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to idlelib.autocomplete.AutoComplete.getentity functio...

8.1CVSS7.9AI score0.00431EPSS
SaveExploits0References8
NVD
NVD
added 2025/08/26 1:15 p.m.9 views

CVE-2025-8597

MacVim's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access e.g. via a malicious application to attach a debugger, read or modify the process memory, inject code in the application's context despite...

4.8CVSS0.00136EPSS
SaveExploits0References2
NVD
NVD
added 2025/08/26 1:15 p.m.8 views

CVE-2025-8700

Invoice Ninja's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access e.g. via a malicious application to attach a debugger, read or modify the process memory, inject code in the application's context...

4.8CVSS0.00136EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/08/26 12:23 p.m.7 views

CVE-2025-8700 Privilege Escalation via get-task-allow entitlement in Invoice Ninja

Invoice Ninja's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access e.g. via a malicious application to attach a debugger, read or modify the process memory, inject code in the application's context...

4.8CVSS6.7AI score0.00136EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/26 12:23 p.m.16 views

CVE-2025-8700

Invoice Ninja on macOS is affected by a local privilege-escalation issue due to the presence of the entitlement com.apple.security.get-task-allow. This allows unprivileged local attackers (e.g., via a malicious app) to attach a debugger, read/modify process memory, and inject code within the app’...

4.8CVSS6.1AI score0.00136EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/26 12:23 p.m.15 views

CVE-2025-8700 Privilege Escalation via get-task-allow entitlement in Invoice Ninja

Invoice Ninja's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access e.g. via a malicious application to attach a debugger, read or modify the process memory, inject code in the application's context...

4.8CVSS0.00136EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/26 12:23 p.m.10 views

CVE-2025-8597 Privilege Escalation via get-task-allow entitlement in MacVim.app

MacVim's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access e.g. via a malicious application to attach a debugger, read or modify the process memory, inject code in the application's context despite...

4.8CVSS6AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/08/26 12:23 p.m.4 views

CVE-2025-8597 Privilege Escalation via get-task-allow entitlement in MacVim.app

MacVim's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access e.g. via a malicious application to attach a debugger, read or modify the process memory, inject code in the application's context despite...

4.8CVSS6.7AI score0.00136EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/26 12:23 p.m.33 views

CVE-2025-8597

CVE-2025-8597 affects MacVim on macOS due to the presence of the entitlement com.apple.security.get-task-allow . This allows local unprivileged attackers (e.g., via a malicious application) to attach a debugger, read/modify the process memory, and inject code into the app’s context, even when sig...

4.8CVSS6.1AI score0.00136EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/08/26 9:33 a.m.3 views

Malicious Package

Overview time-check-server-get is a malicious package. This package contains malicious code intended to exfiltrate data, and its contents have been removed from the official package manager. Although it appears to be a time-related utility, its main function is to collect system information and...

9.8CVSS7.1AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/26 12:00 a.m.22 views

PT-2026-55673

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.29 Description The software fails to detect malicious pickle files that utilize the idlelib.calltip.get entity function within reduce methods. This allows attackers to embed undetected code in pickle files, whi...

8.1CVSS6.6AI score0.00431EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2021-40609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command. CVE-2021-40609 Note that Nessus...

5.5CVSS6.7AI score0.00627EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2021-39516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function HuffmanDecoder::Get located in huffmandecoder.hpp. It allo...

6.5CVSS6.5AI score0.00857EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2020-35381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jsonparser 1.0.0 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a GET call. CVE-2020-35381 Note that Nessus...

7.8CVSS7.2AI score0.02262EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/08/26 12:00 a.m.10 views

PT-2025-34757 · Macvim · Macvim

Name of the Vulnerable Software and Affected Versions: MacVim affected versions not specified Description: MacVim’s configuration on macOS, specifically the presence of the “com.apple.security.get-task-allow” entitlement, allows local attackers with unprivileged access to attach a debugger, read ...

4.8CVSS6.2AI score0.00136EPSS
SaveExploits0References6
Rows per page
Query Builder