Lucene search
+L

26897 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/07 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2019-10214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container...

6.4CVSS6.6AI score0.01604EPSS
SaveExploits0References2
NVD
NVD
added 2025/08/06 4:15 p.m.11 views

CVE-2025-48393

The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack. This security issue has been fixed in the latest firmware version of Eaton G4 PDU which is available on the Eaton...

5.7CVSS0.00202EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/06 3:25 p.m.27 views

CVE-2025-48393

CVE-2025-48393 affects Eaton G4 PDU where the server identity check during firmware upgrade via command shell is insecure, enabling potential MITM disruption. The issue, documented across multiple feeds (NVD, Red Hat, CVE list, CNVD, etc.), states that a fix is available in the latest Eaton firmw...

5.7CVSS5.4AI score0.00202EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/06 3:25 p.m.19 views

CVE-2025-48393

The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack. This security issue has been fixed in the latest firmware version of Eaton G4 PDU which is available on the Eaton...

5.7CVSS0.00202EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/06 3:25 p.m.6 views

CVE-2025-48393

The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack. This security issue has been fixed in the latest firmware version of Eaton G4 PDU which is available on the Eaton...

5.7CVSS5.4AI score0.00202EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/08/06 3:25 p.m.4 views

CVE-2025-48393

The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack. This security issue has been fixed in the latest firmware version of Eaton G4 PDU which is available on the Eaton...

5.7CVSS5.4AI score0.00202EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/06 12:00 a.m.41 views

PT-2025-32183

Name of the Vulnerable Software and Affected Versions Eaton affected versions not specified Description The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented, potentially allowing an attacker to perform a Man-in-the-middle attack...

5.7CVSS5.5AI score0.00202EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/08/06 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-49146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pgjdbc is an open source postgresql JDBC Driver. From 42.7.4 and until 42.7.7, when the PostgreSQL JDBC driver is configured with channel binding set to require...

8.2CVSS7.2AI score0.00486EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/06 12:00 a.m.17 views

mccms 安全漏洞

mccms Man City CMS is a rapid website builder system for individual developers of China Smokey River South chshcms. A security vulnerability exists in mccms version v2.7.0, which originates from improper handling of the pic parameter in the sysappscontrollersapiGf.php file, which may lead to SSRF...

6.5CVSS6.7AI score0.00246EPSS
SaveExploits1References3
NVD
NVD
added 2025/08/05 3:15 p.m.15 views

CVE-2025-44964

A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information...

3.9CVSS0.00105EPSS
SaveExploits1References1
OSV
OSV
added 2025/08/05 3:15 p.m.15 views

CVE-2025-44964

A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information...

3.9CVSS5.9AI score0.00105EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/08/05 12:00 a.m.20 views

PT-2025-31933 · Bluestacks · Bluestacks

Name of the Vulnerable Software and Affected Versions: BlueStacks version 5.20 Description: A lack of SSL certificate validation allows attackers to execute a man-in-the-middle attack and obtain sensitive information. Recommendations: At the moment, there is no information about a newer version...

3.9CVSS6.3AI score0.00105EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2025/08/05 12:00 a.m.8 views

CVE-2025-44964

A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information...

7.2AI score0.00105EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/08/05 12:00 a.m.12 views

BlueStacks 安全漏洞

BlueStacks is an Android emulator on Windows from BlueStacks, Inc. in the United States. A security vulnerability exists in BlueStacks version v5.20, which stems from a lack of SSL certificate validation and could lead to a man-in-the-middle attack...

3.9CVSS6.6AI score0.00105EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2025/08/05 12:00 a.m.8 views

CVE-2025-44964

A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information...

3.9CVSS6AI score0.00105EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/08/05 12:00 a.m.24 views

CVE-2025-44964

A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information...

0.00105EPSS
SaveExploits1References1
CVE
CVE
added 2025/08/05 12:00 a.m.50 views

CVE-2025-44964

CVE-2025-44964 concerns BlueStacks, version 5.20, with a reported lack of SSL certificate validation. This defect enables potential man-in-the-middle attacks and exposure of sensitive information. The NVD/CVE entry lists a CVSS v3.1 base score of 3.9 (LOW) with adjacent attack vector, high comple...

3.9CVSS7.2AI score0.00105EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/05 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2025-49812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In some modssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack a...

7.4CVSS7.2AI score0.00557EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2025/08/04 11:00 a.m.21 views

Man-in-the-Middle Attack Prevention Guide

Some of the most devastating cyberattacks don’t rely on brute force, but instead succeed through stealth. These quiet intrusions often go unnoticed until long after the attacker has disappeared. Among the most insidious are man-in-the-middle MITM attacks, where criminals exploit weaknesses in...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/08/04 9:33 a.m.20 views

CVE-2025-54792

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle MitM vulnerability in the software's discovery protocol allows an unauthenticated attacke...

9.3CVSS7.2AI score0.00257EPSS
SaveExploits1References1
Rows per page
Query Builder