Lucene search
+L

1847 matches found

SUSE Linux
SUSE Linux
added 2026/05/18 7:56 a.m.19 views

Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues CVE-2026-22007: APIs in the specified component can lead to an unauthorized read access bsc1262490. CVE-2026-22013: unauthenticated attacker with network access can access to critical data bsc1262494. CVE-2026-22016: APIs in the specifie...

8.7CVSS7.2AI score0.00702EPSS
SaveExploits0References28
OSV
OSV
added 2026/05/06 2:45 p.m.7 views

BIT-JAVA-MIN-2025-50063

Vulnerability in Oracle Java SE component: Install. The supported version that is affected is Oracle Java SE: 8u451. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE. Successful attacks...

7.3CVSS7.1AI score0.00245EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/06 2:45 p.m.6 views

BIT-JAVA-2025-50063

Vulnerability in Oracle Java SE component: Install. The supported version that is affected is Oracle Java SE: 8u451. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE. Successful attacks...

7.3CVSS7.1AI score0.00245EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/03 9:56 a.m.8 views

OESA-2026-2156 mysql security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if Security Fixes:...

5CVSS5.8AI score0.00153EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/04/28 6:49 a.m.9 views

freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()

A null pointer dereference has been discovered in FreeRDP. A NULL pointer dereference vulnerability in rdpwritelogoninfov2 allows a malicious RDP server to crash FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0...

7.5CVSS5.3AI score0.00467EPSS
SaveExploits0References6
Packet Storm News
Packet Storm News
added 2026/04/28 12:0 a.m.54 views

Windows Persistence via UserInitMprLogonScript Registry Key

This Python script demonstrates a Windows persistence technique based on modifying the HKCU\Environment\UserInitMprLogonScript registry value, which allows execution of a program each time the user logs in...

5.5AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/04/27 2:55 p.m.12 views

freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()

A null pointer dereference has been discovered in FreeRDP. A NULL pointer dereference vulnerability in rdpwritelogoninfov2 allows a malicious RDP server to crash FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0...

7.5CVSS5.3AI score0.00467EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/04/27 5:41 a.m.7 views

freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()

A null pointer dereference has been discovered in FreeRDP. A NULL pointer dereference vulnerability in rdpwritelogoninfov2 allows a malicious RDP server to crash FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0...

7.5CVSS5.3AI score0.00467EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/04/27 5:38 a.m.8 views

freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()

A null pointer dereference has been discovered in FreeRDP. A NULL pointer dereference vulnerability in rdpwritelogoninfov2 allows a malicious RDP server to crash FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0...

7.5CVSS5.3AI score0.00467EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/04/27 12:4 a.m.39 views

CVE-2026-33566

There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered...

5.1CVSS0.00177EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/27 12:4 a.m.4 views

CVE-2026-33566

There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered...

5.1CVSS5.2AI score0.00177EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/04/27 12:3 a.m.2 views

CVE-2026-33277

An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user...

8.7CVSS7.2AI score0.01325EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.10 views

LogonTracer 操作系统命令注入漏洞

LogonTracer is a visual system log analysis tool developed by the Japanese JPCERT organization. This product can detect malicious login attempts by analyzing Windows Active Directory event logs. Versions of LogonTracer prior to 2.0.0 contained a vulnerability related to operating system command...

8.8CVSS7.6AI score0.01325EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/27 12:0 a.m.18 views

Oracle Solaris Critical Patch Update : apr2026_SRU11_4_92_214_1

The version of Solaris installed on the remote host is prior to 11.4.92.214.1. It is, therefore, affected by a vulnerability as referenced in the solaris11apr2026SRU114922141 advisory. - Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is...

6.5CVSS7.5AI score0.00116EPSS
SaveExploits0References3
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/04/23 7:57 a.m.13 views

Multiple vulnerabilities in LogonTracer

Overview LogonTracer provided by Japan Computer Emergency Response Team Coordination Center JPCERT/CC is a tool to investigate malicious Windows logons by visualizing and analyzing Windows event logs. LogonTracer contains multiple vulnerabilities listed below. OS command injection CWE-78 -...

8.8CVSS5.7AI score0.01325EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/04/23 7:18 a.m.20 views

freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()

A null pointer dereference has been discovered in FreeRDP. A NULL pointer dereference vulnerability in rdpwritelogoninfov2 allows a malicious RDP server to crash FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0...

7.5CVSS5.7AI score0.00467EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/04/22 7:54 a.m.8 views

freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()

A null pointer dereference has been discovered in FreeRDP. A NULL pointer dereference vulnerability in rdpwritelogoninfov2 allows a malicious RDP server to crash FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0...

7.5CVSS5.7AI score0.00467EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/04/22 7:48 a.m.11 views

freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()

A null pointer dereference has been discovered in FreeRDP. A NULL pointer dereference vulnerability in rdpwritelogoninfov2 allows a malicious RDP server to crash FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0...

7.5CVSS5.7AI score0.00467EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.4 views

RHEL 9 : freerdp (RHSA-2026:9640)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:9640 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to R...

9.8CVSS6.6AI score0.00656EPSS
SaveExploits5References26
EUVD
EUVD
added 2026/04/21 9:31 p.m.13 views

EUVD-2026-24455

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

7.5CVSS5.7AI score0.00107EPSS
SaveExploits0References2
Rows per page
Query Builder