Lucene search
+L

58429 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/02 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2014-125087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation...

9.8CVSS5.4AI score0.01241EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2016-4432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently...

9.1CVSS8.2AI score0.08148EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-50063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Oracle Java SE component: Install. The supported version that is affected is Oracle Java SE: 8u451. Easily exploitable vulnerability allows low...

7.3CVSS7AI score0.0025EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/01 10:15 p.m.11 views

CVE-2024-28988

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability was found by the ZDI team after researching a previous vulnerability and providing...

9.8CVSS0.39351EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/01 10:15 p.m.11 views

CVE-2024-28988

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability was found by the ZDI team after researching a previous vulnerability and providing...

9.8CVSS5.8AI score0.39351EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/01 9:18 p.m.280 views

CVE-2024-28988 SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability was found by the ZDI team after researching a previous vulnerability and providing...

9.8CVSS0.39351EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/01 9:18 p.m.36 views

CVE-2024-28988

SolarWinds Web Help Desk is affected by a Java deserialization Remote Code Execution flaw that could allow unauthenticated remote commands on the host. Root cause appears to be insecure deserialization in the Web Help Desk component. The vulnerability is addressed by upgrading to 12.8.3 with Hotf...

9.8CVSS7AI score0.39351EPSS
SaveIn wildExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/01 9:18 p.m.5 views

CVE-2024-28988 SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability was found by the ZDI team after researching a previous vulnerability and providing...

9.8CVSS7AI score0.39351EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/01 9:02 p.m.23 views

CVE-2025-9795

CVE-2025-9795 affects xujeff tianti 天梯 up to 2.3. The vulnerable area is the function ajaxUploadFile() in the file src/main/java/com/jeff/tianti/controller/UploadController.java . Manipulating the argument upfile enables an unrestricted file upload, enabling a remote attack. Public disclosure of ...

6.5CVSS6.4AI score0.00224EPSS
SaveExploits1References5Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/09/01 2:51 p.m.6 views

Security Bulletin: An unspecified vulnerability in Java SE related to the Server, which affects IBM watsonx.data

Summary An unspecified vulnerability in Java SE related to the Server: DDL component could allow a remote attacker to cause high confidentiality and high integrity impact. These can affect watsonx.data. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in Java S...

7.4CVSS6.3AI score0.00784EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/09/01 10:14 a.m.8 views

Security Bulletin: Multiple vulnerabilities in IBM Semeru Runtime may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2025-21587, CVE-2025-30698, CVE-2025-2900 and CVE-2025-4447)

Summary There are multiple vulnerabilities in IBM® Semeru Runtime Version 17 used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified...

7.8CVSS8.1AI score0.00784EPSS
SaveExploits0Affected Software1
Snyk
Snyk
added 2025/09/01 5:41 a.m.6 views

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the SQLManager class, exploitable when the user defines JDBC connections as a key-value pair. An attacker can execute arbitrary code and access unauthorized system files by injecting malicious...

9.8CVSS9.6AI score0.13726EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2025/09/01 12:00 a.m.2 views

Debian: Security Advisory (DLA-4286-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.8AI score0.0227EPSS
SaveExploits0References2
Debian
Debian
added 2025/08/31 5:40 p.m.14 views

[SECURITY] [DLA 4286-1] libcommons-lang3-java security update

Debian LTS Advisory DLA-4286-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert August 31, 2025 https://wiki.debian.org/LTS Package : libcommons-lang3-java Version : 3.11-1+deb11u1 CVE ID : CVE-2025-48924 Debian Bug : 1109125 A vulnerability has been discovered in...

5.3CVSS6.6AI score0.0227EPSS
SaveExploits0
OSV
OSV
added 2025/08/31 12:00 a.m.7 views

DLA-4286-1 libcommons-lang3-java - security update

Bulletin has no description...

5.3CVSS8.1AI score0.0227EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/31 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-8916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy...

6.3CVSS6.7AI score0.00461EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/31 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-8885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy...

6.3CVSS6.5AI score0.00541EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/08/30 6:16 p.m.12 views

CVE-2024-13980

H3C Intelligent Management Center IMC versions up to and including E0632H07 contains a remote command execution vulnerability in the /byod/index.xhtml endpoint. Improper handling of JSF ViewState allows unauthenticated attackers to craft POST requests with forged javax.faces.ViewState parameters,...

10CVSS7.6AI score0.00961EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2018-12320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a use after free in radare2 2.6.0 in ranalbbfree in libr/anal/bb.c via a crafted Java binary file. CVE-2018-12320 Note that Nessus relies on the presen...

7.8CVSS7.2AI score0.01021EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2020-14562

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitab...

5.3CVSS6.7AI score0.05166EPSS
SaveExploits0References2
Rows per page
Query Builder