Lucene search
+L

12257 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2021-22166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method CVE-2021-22166 Note that Nessus relies...

7.5CVSS7.3AI score0.01377EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2019-7343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Reflected - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable...

6.1CVSS7AI score0.00878EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/08/18 12:00 a.m.7 views

PT-2025-33693 · Apache +1 · Apache Commons Ognl +1

Name of the Vulnerable Software and Affected Versions: Apache Commons OGNL affected versions not specified Description: An improper neutralization of expression/command delimiters issue exists in Apache Commons OGNL. The OGNL engine, when used with the Ognl.getValue API, parses and evaluates...

8.8CVSS7AI score0.00557EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2024-22513

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their...

5.5CVSS6.2AI score0.00804EPSS
SaveExploits4References3
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-6442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected...

6.5CVSS6.2AI score0.00422EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2018-16487

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A prototype pollution vulnerability was found in lodash 4.17.11 where the functions merge, mergeWith, and defaultsDeep can be tricked into adding or modifying...

6.8CVSS5.8AI score0.01553EPSS
SaveExploits2References2
Veracode
Veracode
added 2025/08/17 5:49 p.m.11 views

Remote Code Execution (RCE)

ms-swift is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper output neutralization for logs because malicious input passed into the train method is concatenated into shell commands, allowing arbitrary command execution...

8.1AI score
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/08/15 9:29 p.m.23 views

CVE-2011-10019

Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality. The application fails to properly sanitize input passed via the searchsend parameter, which is dynamically invoked using Ruby’s send method. This allows attackers to execute...

10CVSS8.3AI score0.04038EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2021-46966

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ACPI: custommethod: fix potential use-after-free issue In cmwrite, buf is always freed when...

7.8CVSS5.6AI score0.0023EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/15 12:00 a.m.10 views

UBUNTU-CVE-2025-53859

NGINX Open Source and NGINX Plus have a vulnerability in the ngxmailsmtpmodule that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happe...

6.3CVSS5.9AI score0.00394EPSS
SaveExploits0References7
OPENSUSE Linux
OPENSUSE Linux
added 2025/08/15 12:00 a.m.4 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0297-1 Rating: important References: 1247981 Cross-References: CVE-2025-8879 CVE-2025-8880 CVE-2025-8881 CVE-2025-8882 CVE-2025-8901 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes 5...

8.8CVSS7AI score0.00303EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/14 3:32 p.m.9 views

CVE-2025-8965 linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload

A vulnerability has been found in linlinjava litemall up to 1.8.0. This vulnerability affects the function create of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminStorageController.java of the component Endpoint. The manipulation of the argument File leads to...

6.5CVSS7.1AI score0.00366EPSS
SaveExploits1References5
Metasploit
Metasploit
added 2025/08/14 12:00 a.m.783 views

Flowise Custom MCP Remote Code Execution

This module exploits a remote code execution vulnerability in Flowise versions = 2.2.7-patch.1 and use exploit/multi/http/flowise/custommcprce msf undefinedcustommcprce show actions ...actions... msf undefinedcustommcprce set ACTION msf undefinedcustommcprce show options ...show and set options...

9.8CVSS9.6AI score0.71601EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2025/08/14 12:00 a.m.13 views

Apache CXF < 3.6.8 / 4.x < 4.0.9 / 4.1.x < 4.1.3 RCE (CVE-2025-48913)

The version of Apache CXF installed on the remote host is affected by remote code execution vulnerability. If untrusted users are allowed to configure JMS for Apache CXF, previously they could use RMI or LDAP URLs, potentially leading to code execution capabilities. This interface is now restrict...

9.8CVSS7.2AI score0.00793EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/13 8:53 p.m.31 views

CVE-2011-10019

Spreecommerce before 0.60.2 is vulnerable to remote command execution via the search[send][] input, which is dynamically invoked using Ruby’s send method and not properly sanitized. This allows an unauthenticated attacker to execute arbitrary shell commands on the server. Affected component: sear...

10CVSS8.2AI score0.04038EPSS
SaveExploits2References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/13 8:53 p.m.8 views

CVE-2011-10019 Spreecommerce < 0.60.2 Search Parameter RCE

Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality. The application fails to properly sanitize input passed via the searchsend parameter, which is dynamically invoked using Ruby’s send method. This allows attackers to execute...

10CVSS8.2AI score0.04038EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2025/08/13 8:53 p.m.21 views

CVE-2011-10019 Spreecommerce < 0.60.2 Search Parameter RCE

Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality. The application fails to properly sanitize input passed via the searchsend parameter, which is dynamically invoked using Ruby’s send method. This allows attackers to execute...

10CVSS0.04038EPSS
SaveExploits2References5
OSV
OSV
added 2025/08/13 3:15 p.m.7 views

ALPINE-CVE-2025-53859

NGINX Open Source and NGINX Plus have a vulnerability in the ngxmailsmtpmodule that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happe...

6.3CVSS5.5AI score0.00394EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/13 3:15 p.m.10 views

AZL-66311 CVE-2025-53859 affecting package nginx for versions less than 1.25.4-5

NGINX Open Source and NGINX Plus have a vulnerability in the ngxmailsmtpmodule that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happe...

6.3CVSS5.9AI score0.00394EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/12 4:25 p.m.18 views

CVE-2025-55166 svg-sanitizer By-Passing Attribute Sanitization

savg-sanitizer is a PHP SVG/XML sanitizer. Prior to version 0.22.0, the sanitization logic in the cleanXlinkHrefs method only searches for lower-case attribute name, which allows to by-pass the isHrefSafeValue check. As a result this allows cross-site scripting or linking to external domains. Thi...

5.1CVSS0.0045EPSS
SaveExploits0References2
Rows per page
Query Builder