Lucene search
+L

26 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/08 12:00 a.m.•8 views

EulerOS 2.0 SP15 : unbound (EulerOS-SA-2026-4021)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare loca...

9.3CVSS6.2AI score0.00293EPSS
SaveExploits0References16
RedHat Linux
RedHat Linux
•added 2026/08/25 3:23 p.m.•13 views

kernel: selinux: fix overlayfs mmap() and mprotect() access checks

A flaw was found in the Linux kernel's SELinux security module when handling overlayfs. The existing security model for overlayfs does not properly enforce access controls for mmap and mprotect operations. This oversight could allow a local attacker to bypass intended security policies, potential...

7.1CVSS5.8AI score0.00123EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/07/26 11:31 p.m.•32 views

SUSE CVE-2026-55708

In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare local zones tree for an already configured named view when the view is configured with no local data to begin with. However, the creation through the contro...

3.7CVSS5.8AI score0.0015EPSS
SaveExploits0References10
CVE
CVE
•added 2026/07/22 1:09 p.m.•219 views

CVE-2026-55708

NLnet Labs Unbound v1.6.0–1.25.1 is affected. The vulnerability stems from the view_local_data and view_local_datas commands in unbound-control, which can create a bare local zones tree for an already configured named view when the view starts without local data. The created tree omits default-pr...

3.1CVSS5.8AI score0.0015EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/07/22 1:09 p.m.•17 views

CVE-2026-55708

In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare local zones tree for an already configured named view when the view is configured with no local data to begin with. However, the creation through the contro...

3.1CVSS5.8AI score0.0015EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
•added 2026/05/21 8:51 a.m.•26 views

CVE-2026-44608

A flaw was found in Unbound. When operating in a multi-threaded configuration with specific Response Policy Zones RPZ using 'rpz-nsip' or 'rpz-nsdname' triggers, a locking inconsistency during an RPZ zone transfer XFR reload can occur. This timing issue may allow an adversary to trigger a heap...

8.2CVSS6.4AI score0.00282EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/04/25 11:50 p.m.•22 views

OpenClaw: Bundled MCP/LSP tools could bypass configured tool policy

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact Bundled MCP and LSP tools could be appended to the agent's effective tool set after the normal tool-policy pipeline had already filtered core tools. If an operator configured a...

5.4AI score
SaveExploits0References3Affected Software1
OSV
OSV
•added 2025/11/04 11:15 p.m.•21 views

CVE-2025-59596

CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12. If a local networking policy is active, attackers on an adjacent network may be able to send a crafted packet and cause the client system to crash...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/04 11:15 p.m.•22 views

CVE-2025-59596

CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12. If a local networking policy is active, attackers on an adjacent network may be able to send a crafted packet and cause the client system to crash...

6.5CVSS0.00224EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/04 10:51 p.m.•10 views

CVE-2025-59596

CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12. If a local networking policy is active, attackers on an adjacent network may be able to send a crafted packet and cause the client system to crash...

6CVSS5.7AI score0.00224EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2018-18430

Malware in sbrugna...

7.4CVSS7.1AI score0.00303EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
•added 2025/04/11 12:00 a.m.•22 views

April 11, 2025—KB5058922 (OS Build 17763.7240) Out-of-band

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2025/04/11 12:00 a.m.•30 views

April 11, 2025—KB5058921 (OS Build 14393.7973) Out-of-band

None None...

6.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2024/06/27 12:00 a.m.•41 views

CVE-2024-36075

The CoSoSys Endpoint Protector through 5.9.3 and Unify agent through 7.0.6 is susceptible to an arbitrary code execution vulnerability due to the way an archive obtained from the Endpoint Protector or Unify server is extracted on the endpoint. An attacker who is able to modify the archive on the...

0.00547EPSS
SaveExploits0References1
Citrix
Citrix
•added 2022/04/07 12:00 a.m.•21 views

Windows 10 Endpoints Are Not Redirecting Input Devices Properly And Output Redirection Works Fine

This Local Policy Settings must be enabled within the VDA and Endpoint: Local Group Policy Editor: "Computer Configuration Administrative Templates Windows Components Remote Desktop Services Remote Desktop Session Host Device and Resource Redirection" Allow Audio And Video Playback Redirection...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2019/12/09 12:00 a.m.•19 views

SYS.2.2.2.A19

Ziel des Bausteins SYS.2.2.2 ist der Schutz von Informationen, die durch und auf Windows 8.1-Clients verarbeiten werden. Die Kern-Anforderung Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

7.3AI score
SaveExploits0References1
NVD
NVD
•added 2018/07/23 3:29 p.m.•29 views

CVE-2018-6683

Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention DLP for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline...

7.4CVSS7AI score0.00303EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/23 12:00 a.m.•5 views

CVE-2018-6683: Incorrect Default Permissions

Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention DLP for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline...

7.4CVSS7.2AI score0.00303EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•26 views

Systrace 1.x Local Policy Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9998/info Systrace has been reported prone to a vulnerability that may permit an application to completely bypass a Systrace policy. The issue presents itself because Systrace does not perform sufficient sanity checks whi...

7.1AI score
SaveExploits0
Veeam
Veeam
•added 2011/10/26 12:00 a.m.•30 views

Unable to Use the "Processes" Tab in Veeam ONE

Challenge The following message is displayed when opening the Processes tab in Veeam ONE Client for a Virtual Machine: Failed to connect to the Guest OS. Verify that server is up, running, and accessible to Veeam ONE server. Solution Please ensure that the prerequisites are met: VMware vSphere...

6.9AI score
SaveExploits0
Rows per page
Query Builder