Lucene search
+L

9611 matches found

Tenable Nessus
Tenable Nessus
•added 2025/08/31 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2025-8916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy...

6.3CVSS6.7AI score0.00461EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/08/31 12:00 a.m.•8 views

RHEL 8 : gdk-pixbuf2 (RHSA-2025:14618)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:14618 advisory. The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits suc...

7.5CVSS7.3AI score0.01341EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2025/08/27 4:39 p.m.•540 views

Exploit for CVE-2017-0144

Metasploit Framework Cheatsheet Introduction Metasploit i...

9.3CVSS8.5AI score0.9923EPSS
SaveExploits70
Drupal
Drupal
•added 2025/08/27 12:00 a.m.•36 views

Synchronize composer.json With Contrib Modules - Critical - Unsupported - SA-CONTRIB-2025-102

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

5.3CVSS5.8AI score0.00251EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/08/27 12:00 a.m.•21 views

Drupal Synchronize composer.json With Contrib Modules module * - Authenticated Other Vulnerability Type vulnerability

Authenticated Other Vulnerability Type vulnerability discovered by Drupal Security Site in WordPress Module Synchronize composer.json With Contrib Modules versions...

5.3CVSS5.8AI score0.00251EPSS
SaveExploits0References1Affected Software1
osv_rhsa
osv_rhsa
•added 2025/08/26 10:03 a.m.•14 views

RHSA-2025:14557 Red Hat Security Advisory: pam security update

Bulletin has no description...

7.8CVSS7.4AI score0.00472EPSS
SaveExploits0References12
RedHat Linux
RedHat Linux
•added 2025/08/26 1:34 a.m.•21 views

Important: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

7.8CVSS7.4AI score0.00472EPSS
SaveExploits0References2
osv_alsa
osv_alsa
•added 2025/08/26 12:00 a.m.•17 views

ALSA-2025:14557 Important: pam security update

Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fixes: linux-pam: Linux-pam directory Traversal CVE-2025-6020 For more details about the security issues, including the impact, a CVSS...

7.8CVSS7.5AI score0.00472EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/08/26 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2021-28693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen/arm: Boot modules are not scrubbed The bootloader will load boot modules e.g. kernel, initramfs... in a temporary area before they are copied by Xen to each...

5.5CVSS5.9AI score0.00321EPSS
SaveExploits0References2
AlmaLinux
AlmaLinux
•added 2025/08/26 12:00 a.m.•16 views

Important: pam security update

Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fixes: linux-pam: Linux-pam directory Traversal CVE-2025-6020 For more details about the security issues, including the impact, a CVSS...

7.8CVSS7.5AI score0.00472EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/08/26 12:00 a.m.•5 views

RHEL 8 : pam (RHSA-2025:14557)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:14557 advisory. Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle...

7.8CVSS7.7AI score0.00472EPSS
SaveExploits0References5
Mend
Mend
•added 2025/08/25 6:02 p.m.•10 views

CVE-2025-9413

A flaw has been found in lostvip-com ruoyi-go up to 2.1. This impacts the function SelectListByPage of the file modules/system/systemrouter.go. This manipulation of the argument orderByColumn/isAsc causes sql injection. The attack may be initiated remotely. The exploit has been published and may ...

9.8CVSS6.3AI score0.00504EPSS
SaveExploits0References8
Mend
Mend
•added 2025/08/25 5:32 p.m.•11 views

CVE-2025-9412

A vulnerability was detected in lostvip-com ruoyi-go up to 2.1. This affects the function SelectListByPage of the file modules/system/dao/DictDataDao.go. The manipulation of the argument orderByColumn/isAsc results in sql injection. The attack can be launched remotely. The exploit is now public a...

9.8CVSS6.4AI score0.0037EPSS
SaveExploits0References8
Mend
Mend
•added 2025/08/25 4:32 p.m.•8 views

CVE-2025-9410

A weakness has been identified in lostvip-com ruoyi-go up to 2.1. The affected element is the function SelectListByPage of the file modules/system/dao/GenTableDao.go. Executing manipulation of the argument isAsc/orderByColumn can lead to sql injection. It is possible to launch the attack remotely...

9.8CVSS6.4AI score0.0037EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2025/08/25 8:28 a.m.•15 views

Security update for pam

This update for pam fixes the following issues: Improve previous CVE-2024-10041 fix which led to CPU performance issues bsc1232234 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

5.7CVSS6.4AI score0.00265EPSS
SaveExploits0References6
osv_suse
osv_suse
•added 2025/08/25 8:28 a.m.•15 views

SUSE-SU-2025:02970-1 Security update for pam

This update for pam fixes the following issues: - Improve previous CVE-2024-10041 fix which led to CPU performance issues bsc1232234...

4.7CVSS6.4AI score0.00265EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/25 12:00 a.m.•7 views

CVE-2025-9413: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in lostvip-com ruoyi-go up to 2.1. This impacts the function SelectListByPage of the file modules/system/systemrouter.go. This manipulation of the argument orderByColumn/isAsc causes sql injection. The attack may be initiated remotely. The exploit has been published and may ...

9.8CVSS6.3AI score0.00504EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/25 12:00 a.m.•5 views

CVE-2025-9412: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in lostvip-com ruoyi-go up to 2.1. This affects the function SelectListByPage of the file modules/system/dao/DictDataDao.go. The manipulation of the argument orderByColumn/isAsc results in sql injection. The attack can be launched remotely. The exploit is now public a...

9.8CVSS6.4AI score0.0037EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/25 12:00 a.m.•11 views

CVE-2025-9401: Incorrect Comparison

A vulnerability has been found in HuangDou UTCMS 9. This vulnerability affects unknown code of the file app/modules/ut-frame/admin/login.php of the component Login. Such manipulation of the argument code leads to incorrect comparison. The attack can be executed remotely. The attack requires a hig...

6.3CVSS4.4AI score0.00443EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/08/25 12:00 a.m.•21 views

WhatWeb Scanner 0.6.2

WhatWeb is a next-generation web scanner. WhatWeb recognizes web technologies including content management systems CMS, blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 1800 plugins, each to recognize something different...

7.6AI score
SaveExploits0
Rows per page
Query Builder