CVE-2023-25690-POC

CVE 2023 25690 - 개념 증명 게시일: 2023년 3월 7일 기본 점수| 기밀성| 무결성 영향| 가용성 영향 ---|---|---|--- 9.8| 높음| 높음| 높음 목차...

CVE-2023-25690-POC

CVE 2023 25690 - 概念验证 发布时间：2023 年 3 月 7 日 Base score| Confidentiality| Integrity impact| Availability impact ---|---|---|--- 9.8| High| High| High 目录 公告描述 易受攻击的 Apache 配置详解 数据流 实验室搭建 HTTP 请求拆分导致后端服务上的 HTTP 请求走私 识别 CRLF 注入 通过请求头注入实现内部 HTTP 请求走私 影响 公告描述 Apache HTTP Server 版本 2.4.0 至 2.4.55 上的某些...

CVE-2024-21689

CVE-2024–21689 RCE Bamboo Data Center and Server Atlassian CVSS Score - 7.6 🔥 설명 이 높은 심각도의 RCE원격 코드 실행 취약점 CVE-2024-21689는 Bamboo Data Center 및 Server의 버전 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0에서 도입되었습니다. CVSS 점수 7.6의 이 RCE원격 코드 실행 취약점은 인증된 공격자가 임의의 코드를 실행할 수 있게 하며, 기밀성, 무결성, 가용성에 높은 영향을 미치며 사용...

Microsoft FrontPage Extensions - Information Disclosure

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory. id: CVE-2000-0114 info: name: Microsoft FrontPage Extensions - Information Disclosure author: r3naissance,matejsmycka severity...

jfrog-cli-2.122.0-1.1 on GA media (moderate)

jfrog-cli-2.122.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11631-1 Rating: moderate Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-39821 SUSE : 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA...

Oracle Linux 10 : ELSA-2026-60394-0: / libxml2 (ELSA-2026-603940)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-603940 advisory. 2.12.5-10.3 - Fix CVE-2026-11979 RHEL-215571 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

Linux Distros Unpatched Vulnerability : CVE-2026-81500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - incus - None Ubuntu Linux - Unknown description CVE-2026-81500 Note that Nessus relies on the presence of the package as reported by the vendor...

Oracle Linux 9 : sqlite (ELSA-2026-58936)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-58936 advisory. - Fixes CVE-2026-11822 - Fixes CVE-2026-11824 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 7 : libreoffice (ELSA-2026-46386)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-46386 advisory. - Backport fix for CVE-2026-4430 Orabug: 39791243 - Backport fix for CVE-2026-8357 Orabug: 39791243 Tenable has extracted the preceding description...

Oracle Linux 10 : gstreamer1-plugins-base (ELSA-2026-59097)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59097 advisory. 1.26.7-2.1 - Add patch for CVE-2026-18297 Resolves: RHEL-246574 Tenable has extracted the preceding description block directly from the Oracle Linux security...

PT-2026-77881

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Data Relationship Management version 11.2.25.0.000 Description An issue exists in the Access and security component that allows a high privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-78103

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.14 Description A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. Successful exploitation can lead to a full...

Linux Distros Unpatched Vulnerability : CVE-2026-12841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - nltk - None Ubuntu Linux - Unknown description CVE-2026-12841 Note that Nessus relies on the presence of the package as reported by the vendor...

CVE-2026-21400

Protection mechanism failure for some IntelR AI Reference Models before version v3.4.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This resul...

CVE-2026-20747

Improper conditions check for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent...

CVE-2026-20728

Protection mechanism failure for some Intel Extension for TensorFlow software before version 2.15.0.3 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege...

ClamAV Vulnerabilities Affecting Cisco Products: August 2026

Multiple vulnerabilities in ClamAV could allow a remote attacker to cause a denial of service DoS condition, interrupting scanning operations. For more information about these vulnerabilities, see the Details "details" section of this advisory. For additional information on these vulnerabilities ...

DoS (Denial of Service) io.netty:netty-handler Dependency in Jira Service Management Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 5.17.0, 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 a...

CVE-2026-20316

A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presen...

CVE-2026-20316 Cisco Secure Firewall Management Center Software Static Credential Vulnerability

A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presen...