Lucene search
+L

8731 matches found

Cvelist
Cvelist
added 2025/09/02 7:47 p.m.23 views

CVE-2025-8614 NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

7.8CVSS0.00265EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/02 7:47 p.m.51 views

CVE-2025-8614

CVE-2025-8614 concerns NoMachine. The flaw is in OpenSSL configuration handling: the product loads an OpenSSL configuration file from an unsecured location, enabling local attackers who already have low-privilege code execution to escalate privileges and execute arbitrary code in the context of t...

7.8CVSS7.2AI score0.00265EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/09/02 5:15 p.m.6 views

CVE-2025-55373

Incorrect access control in Beakon Application before v5.4.3 allows authenticated attackers with low-level privileges to escalate privileges and execute commands with Administrator rights...

5.3CVSS5.9AI score0.00449EPSS
SaveExploits1References3
NVD
NVD
added 2025/09/02 8:15 a.m.8 views

CVE-2025-41690

A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user Maintenance by viewing the device’s event log. This vulnerability could allow the Operator to authenticate as the Maintenance user, thereby gaining unauthorized access to sensitive...

7.4CVSS0.00246EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/02 8:12 a.m.1 views

CVE-2025-41690 Endress+Hauser: Proline 10 Maintenance credentials may be exposed under certain conditions

A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user Maintenance by viewing the device’s event log. This vulnerability could allow the Operator to authenticate as the Maintenance user, thereby gaining unauthorized access to sensitive...

7.4CVSS6.2AI score0.00246EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/02 12:00 a.m.11 views

PT-2025-35606

Name of the Vulnerable Software and Affected Versions: Realtek RTL8811AU drivers affected versions not specified Description: A flaw exists within the N6CQueryInformationHandleCustomized11nOids function in Realtek RTL8811AU drivers. The issue is due to insufficient validation of user-supplied dat...

3.8CVSS4.4AI score0.00134EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2025/09/02 12:00 a.m.16 views

Realtek RTL8811AU rtwlanu.sys N6CQueryInformationHandleCustomized11nOids Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Realtek RTL8811AU drivers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

3.8CVSS6AI score0.00134EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/02 12:00 a.m.8 views

Endress+hauser Ecograph 日志信息泄露漏洞

The Endress+hauser Ecograph is a data logger from Endress+hauser, Switzerland. It is used to securely and completely record and visualize all process sequences. The Endress+hauser Ecograph suffers from a log information disclosure vulnerability that stems from a password disclosure that could lea...

7.4CVSS6.2AI score0.00246EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/08/30 6:20 p.m.12 views

CVE-2025-34521

A reflected cross-site scripting XSS vulnerability exists in the web interface of the Arcserve Unified Data Protection UDP, where unsanitized user input is improperly reflected in HTTP responses. This flaw allows remote attackers with low privileges to craft malicious links that, when visited by...

5.4CVSS6AI score0.00212EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:19 p.m.11 views

CVE-2025-20347

A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device. This vulnerability exists because of...

5.4CVSS6.7AI score0.00249EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:18 p.m.11 views

CVE-2025-34161

Coolify versions prior to v4.0.0-beta.420.7 are vulnerable to a remote code execution vulnerability in the project deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary shell commands via the Git Repository field during project creatio...

9.4CVSS8.8AI score0.02939EPSS
SaveExploits3References1
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2019-2696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.28 and...

8.8CVSS7.2AI score0.0053EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2018-2842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.36 and...

8.8CVSS7.2AI score0.00462EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2019-2863

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and...

6.5CVSS6.9AI score0.00463EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2019-2501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and...

3.8CVSS6.8AI score0.00526EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2021-2128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.18. Easily...

6.5CVSS6.8AI score0.00488EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2020-2951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to...

6.5CVSS6.9AI score0.00364EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2022-21295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.32. Easily...

3.8CVSS6.6AI score0.00369EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2019-2657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.28 and...

7.8CVSS7.1AI score0.0053EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2019-2451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and...

6.5CVSS6.9AI score0.00526EPSS
SaveExploits0References2
Rows per page
Query Builder