Lucene search
+L

988 matches found

ATTACKERKB
ATTACKERKB
added 2025/05/07 6:15 p.m.11 views

CVE-2025-20194

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this...

5.4CVSS6.7AI score0.00306EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/05/07 6:15 p.m.11 views

CVE-2025-20157

A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper validation of certificates that are used by the Smar...

5.9CVSS5.8AI score0.00284EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/07 5:17 p.m.68 views

CVE-2025-20157

Cisco Catalyst SD-WAN Manager (Cisco SD-WAN vManage) contains a certificate validation vulnerability in the Smart Licensing workflow. The issue arises from improper validation of certificates used by Smart Licensing, allowing an unauthenticated, remote attacker with network access to intercept tr...

5.9CVSS5.8AI score0.00284EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/07 5:17 p.m.15 views

CVE-2025-20157 Cisco Catalyst vManage Certificate Validation Vulnerability

A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper validation of certificates that are used by the Smar...

5.9CVSS5.8AI score0.00284EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/07 12:00 a.m.15 views

PT-2025-20253 · Cisco · Cisco Catalyst Sd-Wan Manager

Name of the Vulnerable Software and Affected Versions: Cisco Catalyst SD-WAN Manager versions affected versions not specified Description: A vulnerability in certificate validation processing could allow an unauthenticated, remote attacker to gain access to sensitive information. This issue is du...

5.9CVSS6.3AI score0.00284EPSS
SaveExploits0References4
Citrix
Citrix
added 2025/05/05 12:00 a.m.35 views

NetScaler RDP proxy -14.1- How to configure RDP proxy with RDS server

This article explains how to configure an RDP Proxy Gateway with an RDS server. Key Points to Note: -If you are using an RDS server, you will need an RDP server profile where the RDP IP is set as the RDS server IP. -For the RDP Host, enter the FQDN of the Gateway Virtual Server. This is required...

7AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/04/23 12:00 a.m.14 views

Implementing AI Bill of Materials (AI BOM) with SPDX 3.0: a Comprehensive Guide to Creating AI and Dataset Bill of Materials

A Software Bill of Materials SBOM is becoming an increasingly important tool in regulatory and technical spaces to introduce more transparency and security into a project's software supply chain. Artificial intelligence AI projects face unique challenges beyond the security of their software, and...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/04/23 12:00 a.m.2 views

FreeBSD : chromium -- multiple security fixes (194f79c3-1ffe-11f0-8cb5-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 194f79c3-1ffe-11f0-8cb5-a8a1599412c6 advisory. Chrome Releases reports: This update includes 1 security fix. Tenable has extracted the preceding...

5.6AI score
SaveExploits0References2
Citrix
Citrix
added 2025/04/03 12:00 a.m.80 views

Citrix Licensing - powershell cmdlets failing with CommunicationError

Citrix.Licensing.Admin.V1 cmdlets Get-LicCertificate, Get-LicInventory stopped working after License Server upgrade to 11.17.2.0. Build 51000. Citrix Licensing PowerShell Snap-In is installed and used directly on the License Server. Error: CommunicationError CategoryInfo: InvalidOperation Example...

7.1AI score
SaveExploits0
OSV
OSV
added 2025/03/31 4:03 p.m.6 views

CGA-C4X8-FP4R-P9JV

Bulletin has no description...

7.5CVSS7.2AI score0.00723EPSS
SaveExploits0
CISA
CISA
added 2025/03/31 12:00 p.m.11 views

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-20439link is external Cisco Smart Licensing Utility Static Credential Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cybe...

9.8CVSS7.3AI score0.92062EPSS
SaveIn wildExploits0References6
CNVD
CNVD
added 2025/03/27 12:00 a.m.12 views

Dell ThinOS Licensing Issues Vulnerabilities

Dell ThinOS is a client operating system from the American company Dell. An authorization issue vulnerability exists in Dell ThinOS 2408 and prior versions, which arises from improper privilege settings and can be exploited by a local, low-privilege attacker to cause an elevation of privilege...

7.8CVSS6.3AI score0.00135EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2025/03/21 5:09 a.m.34 views

Ongoing Cyber Attacks Exploit Critical Vulnerabilities in Cisco Smart Licensing Utility

Two now-patched security flaws impacting Cisco Smart Licensing Utility are seeing active exploitation attempts, according to SANS Internet Storm Center. The two critical-rated vulnerabilities in question are listed below - CVE-2024-20439 CVSS score: 9.8 - The presence of an undocumented static us...

9.8CVSS6.8AI score0.92062EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2025/03/13 12:00 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2025:0577-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.9AI score0.03301EPSS
SaveExploits2References109
Citrix
Citrix
added 2025/03/03 12:00 a.m.18 views

Citrix - CSP Monthly Consumption licenses EOL

On 01-Mar-2025, Citrix Service Providers running License Server v11.17.2 build 51000 with a combination of certain types of licenses were unable to launch end user sessions. The impacted licenses were associated with a discontinued licensing offering. There were some cases where partners on the n...

6.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/03/03 12:00 a.m.23 views

The vulnerability of the Delegated License Service (DLS) component of the NVIDIA licensing system allows a perpetrator to gain unauthorized access to protected information and cause service failures.

The vulnerability of the Delegated License Service DLS component of NVIDIA’s licensing system lies in the absence of authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information and cause service...

7.6CVSS5.5AI score0.00246EPSS
SaveExploits0References3Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2025/02/27 12:00 a.m.7 views

VulnCheck KEV: CVE-2024-20439

Cisco Smart Licensing Utility contains a static credential vulnerability that allows an unauthenticated, remote attacker to log in to an affected system and gain administrative credentials...

9.8CVSS5.8AI score0.92062EPSS
SaveExploits0References1
Citrix
Citrix
added 2025/02/24 12:00 a.m.85 views

Licensing - We encounter the error "Citrix license server unavailable" in Citrix Studio.

After successfully upgrading the Citrix licensing server to version 11.17.2 build 51000, we encounter the error "Citrix license server unavailable" in Citrix Studio. The error in Licensing Manager "The License Activation Service entitlement could not be retrieved, Check your connection to License...

7AI score
SaveExploits0
CNVD
CNVD
added 2025/02/06 12:00 a.m.25 views

IBM Common Licensing Information Disclosure Vulnerability

IBM Common Licensing is a license management solution from International Business Machines IBM. IBM Common Licensing suffers from an information disclosure vulnerability that stems from storing user credentials in plain plaintext, which can be exploited by an attacker to cause them to be readable...

6.2CVSS5.9AI score0.00138EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:00 a.m.14 views

The vulnerability of IBM Common Licensing’s software for license management, related to improper authorization, allows a violator to gain unauthorized access to protected information.

The vulnerability of IBM Common Licensing’s software for license management is related to improper authorization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...

6.8CVSS5.4AI score0.00272EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder