Lucene search
K

950 matches found

Veracode
Veracode
added 2025/11/11 10:21 a.m.3 views

Remote Code Execution (RCE)

cn.hutool, hutool-extra is vulnerable to remote code execution RCE. The vulnerability is due to improper expression handling in the QLExpressEngine class, which allows an attacker to execute arbitrary expressions leading to arbitrary method invocation and potential remote code execution...

6.5CVSS8.4AI score0.00212EPSS
Exploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/11/05 5:15 p.m.4 views

CVE-2025-20354

A vulnerability in the Java Remote Method Invocation RMI process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files and execute arbitrary commands with root permissions on an affected system. This vulnerability is due to improper authentication mechanis...

9.8CVSS6.2AI score0.00183EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2025/11/05 5:15 p.m.6 views

CVE-2025-20354

A vulnerability in the Java Remote Method Invocation RMI process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files and execute arbitrary commands with root permissions on an affected system. This vulnerability is due to improper authentication mechanis...

9.8CVSS0.00183EPSS
Exploits0References1
OSV
OSV
added 2025/11/05 5:15 p.m.1 views

CVE-2025-20354

A vulnerability in the Java Remote Method Invocation RMI process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files and execute arbitrary commands with root permissions on an affected system. This vulnerability is due to improper authentication mechanis...

9.8CVSS6.1AI score
Exploits0References1
Cvelist
Cvelist
added 2025/11/05 4:31 p.m.4 views

CVE-2025-20354 Cisco Unified Contact Center Express Remote Code Execution Vulnerability

A vulnerability in the Java Remote Method Invocation RMI process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files and execute arbitrary commands with root permissions on an affected system. This vulnerability is due to improper authentication mechanis...

9.8CVSS0.00183EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/05 4:31 p.m.3 views

EUVD-2025-37892

A vulnerability in the Java Remote Method Invocation RMI process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files and execute arbitrary commands with root permissions on an affected system. This vulnerability is due to improper authentication mechanis...

9.8CVSS7.3AI score0.00183EPSS
Exploits0References2
Cisco
Cisco
added 2025/11/05 4:0 p.m.9 views

Cisco Unified Contact Center Express Remote Code Execution Vulnerabilities

Multiple vulnerabilities in the Java Remote Method Invocation RMI process of Cisco Unified Contact Center Express Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files, bypass authentication, execute arbitrary commands, and elevate privileges to root. For more...

9.8CVSS7.7AI score0.00683EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/05 12:0 a.m.3 views

Cisco Unified Contact Center Express 代码问题漏洞

Cisco Unified Contact Center Express Unified CCX is a customer relationship management component of a unified communications solution from Cisco. The component supports features such as self-service voice, call distribution, and customer access control. A security vulnerability exists in Cisco...

9.8CVSS7.5AI score0.00183EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/17 12:0 a.m.1 views

SAP NetWeaver AS Java Insecure Deserialization (October 2025)

The version of SAP NetWeaver Application Server for Java detected on the remote host is affected by an insecure deserialization vulnerability as disclosed in the SAP Security Patch Day October 2025: - Due to a deserialization vulnerability in SAP NetWeaver, an unauthenticated attacker could explo...

10CVSS6.5AI score0.00269EPSS
Exploits1References3
CVE
CVE
added 2025/10/15 5:2 p.m.4 views

CVE-2025-62378

CommandKit (Discord.js meta-framework) versions 1.2.0-rc.1 through 1.2.0-rc.11 expose ctx.commandName as the alias used to invoke a message command, rather than the canonical command name. This affects both middleware and the command’s own run context, enabling potential misapplication of permiss...

6.1CVSS6.7AI score0.00018EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-1660

Malware in sbrugna...

9.8CVSS9.4AI score0.01581EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2012-4477

Malware in sbrugna...

5.8CVSS6.1AI score0.00131EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-3145

Malware in sbrugna...

6.5CVSS6.1AI score0.00156EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2011-4957

Malware in sbrugna...

6.9CVSS6.4AI score0.00039EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-6498

Malware in sbrugna...

6.8CVSS6.4AI score0.00645EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-24753

Malware in sbrugna...

9.8CVSS8.5AI score0.10629EPSS
Exploits0References16
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-8108

Malware in sbrugna...

7.5CVSS7.4AI score0.00485EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2004-2686

Malware in sbrugna...

5.5CVSS6.4AI score0.00697EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2002-0077

Malware in sbrugna...

7.5CVSS6.4AI score0.0794EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-16372

Malware in sbrugna...

5.3CVSS5.5AI score0.00203EPSS
Exploits0References3
Rows per page
Query Builder