Lucene search
K

11 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2005-4754

Malware in sbrugna...

1.2CVSS6.4AI score0.0011EPSS
Exploits0References4
Veracode
Veracode
added 2025/09/25 4:43 a.m.6 views

Information Disclosure

github.com/neuvector/neuvector is vulnerable to information disclosure. The vulnerability is due to passwords in Java command parameters being logged in security event logs when a process rule violation occurs, which allows an attacker to obtain sensitive credentials...

5.3CVSS6.2AI score0.00062EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2025/09/17 1:15 p.m.3 views

CVE-2025-54467

When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation the password will appear in the NeuVector security event log...

5.3CVSS5.8AI score0.00062EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/17 12:29 p.m.3 views

CVE-2025-54467 NeuVector process with sensitive arguments lead to leakage

When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation the password will appear in the NeuVector security event log...

5.3CVSS6.8AI score0.00062EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/09/17 12:29 p.m.8 views

CVE-2025-54467 NeuVector process with sensitive arguments lead to leakage

When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation the password will appear in the NeuVector security event log...

5.3CVSS0.00062EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/21 10:9 p.m.5 views

CVE-2005-4761

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information passwords or keyphrases in the server log file when the -D option is used...

1.2CVSS6.7AI score0.0011EPSS
Exploits0References1
OSV
OSV
added 2024/03/06 10:54 a.m.20 views

BIT-GRADLE-2021-32751 Arbitrary code execution via specially crafted environment variables

Gradle is a build tool with a focus on build automation. In versions prior to 7.2, start scripts generated by the application plugin and the gradlew script are both vulnerable to arbitrary code execution when an attacker is able to change environment variables for the user running the script. Thi...

8.5CVSS7.7AI score0.00831EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2023/09/18 7:24 a.m.18 views

CVE-2021-32751

A flaw was found in Gradle, which allows a remote, authenticated attacker to execute arbitrary code on the system caused by a flaw in start and gradlew. By sending specially crafted environment variables, an attacker can execute arbitrary code on the system. Mitigation CI/CD systems using the...

8.5CVSS7.5AI score0.00831EPSS
Exploits1References4
GithubExploit
GithubExploit
added 2021/12/24 4:23 a.m.694 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4j-CVE-2021-44228-workaround A. Solution Description =====...

10CVSS9.2AI score0.94358EPSS
Exploits343
OSV
OSV
added 2021/07/20 11:15 p.m.8 views

CVE-2021-32751

Gradle is a build tool with a focus on build automation. In versions prior to 7.2, start scripts generated by the application plugin and the gradlew script are both vulnerable to arbitrary code execution when an attacker is able to change environment variables for the user running the script. Thi...

7.5CVSS7.3AI score
Exploits0References3
Cvelist
Cvelist
added 2006/04/01 2:0 a.m.15 views

CVE-2005-4761

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information passwords or keyphrases in the server log file when the -D option is used...

6.3AI score0.0011EPSS
Exploits0References3
Rows per page
Query Builder