Lucene search
K

64 matches found

Positive Technologies
Positive Technologies
added 2026/01/29 12:0 a.m.3 views

PT-2026-5253

A vulnerability in TeamViewer DEX Client former 1E Client - Content Distribution Service NomadBranch.exe prior version 26.1 for Windows allows an attacker on the adjacent network to inject, tamper with, or forge log entries in Nomad Branch.log via crafted data sent to the UDP network handler. Thi...

6.5CVSS5.9AI score0.00069EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/29 12:0 a.m.2 views

TeamViewer DEX Client 安全漏洞

TeamViewer DEX Client is a digital employee experience and endpoint management software from TeamViewer Germany. A security vulnerability exists in TeamViewer DEX Client, which can be exploited by an attacker to cause log entries to be injected, altered, or forged, affecting log integrity...

6.5CVSS5.8AI score0.00069EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/29 12:0 a.m.2 views

PT-2026-5257

Name of the Vulnerable Software and Affected Versions TeamViewer DEX Client former 1E Client versions prior to 26.1 Description A flaw exists due to insufficient validation of user-supplied data within the Content Distribution Service NomadBranch.exe of the TeamViewer DEX Client. This allows a...

6.5CVSS5.4AI score0.00069EPSS
Exploits0References6
OSV
OSV
added 2026/01/20 9:16 p.m.0 views

AZL-74982 CVE-2025-55132 affecting package nodejs for versions less than 20.14.0-13

A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via futimes even when the process has only read permissions. Unlike utimes, futimes does not apply the expected write-permission checks, which means file metadata can be modified in read-only...

5.3CVSS5.7AI score0.00012EPSS
Exploits0References1
OSV
OSV
added 2026/01/20 9:16 p.m.0 views

UBUNTU-CVE-2025-55132

A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via futimes even when the process has only read permissions. Unlike utimes, futimes does not apply the expected write-permission checks, which means file metadata can be modified in read-only...

5.3CVSS7.1AI score0.00012EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/20 8:41 p.m.3 views

CVE-2025-55132

A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via futimes even when the process has only read permissions. Unlike utimes, futimes does not apply the expected write-permission checks, which means file metadata can be modified in read-only...

5.3CVSS5.4AI score0.00012EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/20 8:41 p.m.1 views

CVE-2025-55132

A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via futimes even when the process has only read permissions. Unlike utimes, futimes does not apply the expected write-permission checks, which means file metadata can be modified in read-only...

2.8CVSS5.5AI score0.00012EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2026/01/20 8:41 p.m.2 views

CVE-2025-55132

A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via futimes even when the process has only read permissions. Unlike utimes, futimes does not apply the expected write-permission checks, which means file metadata can be modified in read-only...

5.3CVSS5.8AI score0.00012EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-55132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via futimes even when the process has only read permission...

5.3CVSS6.7AI score0.00012EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/04 5:16 p.m.2 views

CVE-2025-20384

In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125, an unauthenticated attacker can inject American National Standards Institute ANSI escape codes into Splunk log files due to improper...

5.3CVSS7AI score0.00118EPSS
Exploits1References1
OSV
OSV
added 2025/12/03 5:15 p.m.1 views

CVE-2025-20384

In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125, an unauthenticated attacker can inject American National Standards Institute ANSI escape codes into Splunk log files due to improper...

5.3CVSS5.8AI score0.00118EPSS
Exploits1References1
NVD
NVD
added 2025/12/03 5:15 p.m.1 views

CVE-2025-20384

In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125, an unauthenticated attacker can inject American National Standards Institute ANSI escape codes into Splunk log files due to improper...

5.3CVSS0.00118EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/12/03 12:0 a.m.1 views

PT-2025-48956

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.0.1, 9.4.6, 9.3.8, and 9.2.10 Splunk Cloud Platform versions prior to 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125 Description An unauthenticated attacker can inject American National Standards Institut...

5.3CVSS6.7AI score0.00118EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/12/03 12:0 a.m.1 views

Splunk Enterprise 9.2.0 < 9.2.10, 9.3.0 < 9.3.8, 9.4.0 < 9.4.6, 10.0 < 10.0.1 (SVD-2025-1203)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2025-1203 advisory. - In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4,...

5.3CVSS6AI score0.00118EPSS
Exploits1References2
NVD
NVD
added 2025/11/24 3:15 p.m.1 views

CVE-2025-12969

Fluent Bit inforward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with network access to the Fluent Bit instance exposing the forward input to send unauthenticated data. By bypassing...

6.5CVSS0.00097EPSS
Exploits0References2
OSV
OSV
added 2025/11/24 3:15 p.m.0 views

AZL-71108 CVE-2025-12969 affecting package fluent-bit for versions less than 3.1.10-4

Fluent Bit inforward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with network access to the Fluent Bit instance exposing the forward input to send unauthenticated data. By bypassing...

6.5CVSS5.8AI score0.00097EPSS
Exploits0References1
OSV
OSV
added 2025/11/24 3:15 p.m.1 views

CVE-2025-12969

Fluent Bit inforward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with network access to the Fluent Bit instance exposing the forward input to send unauthenticated data. By bypassing...

6.5CVSS7.1AI score
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-0232

Malware in sbrugna...

7.5CVSS7.4AI score0.00227EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2013-3742

Malware in sbrugna...

4CVSS4.6AI score0.00443EPSS
Exploits0References14
Positive Technologies
Positive Technologies
added 2025/10/06 12:0 a.m.1 views

PT-2025-40860

Name of the Vulnerable Software and Affected Versions Affected versions not specified Description An API endpoint allows the creation of arbitrary log entries via a POST request. Insufficient validation of input data enables an attacker to create manipulated log entries, potentially falsifying or...

6.5CVSS6.7AI score0.00083EPSS
Exploits0References10
Rows per page
Query Builder