Lucene search
+L

11607 matches found

attackerkb
attackerkb
•added 2026/03/25 10:27 a.m.•12 views

CVE-2026-23323

In the Linux kernel, the following vulnerability has been resolved: hwmon: macsmc Fix regressions in Apple Silicon SMC hwmon driver The recently added macsmc-hwmon driver contained several critical bugs in its sensor population logic and float conversion routines. Specifically: - The voltage...

6.8AI score0.00134EPSS
SaveExploits0References3Affected Software1
SUSE Linux
SUSE Linux
•added 2026/03/25 10:21 a.m.•23 views

Maintenance update for Multi-Linux Manager 4.3 Release Notes Release Notes

Description: This update fixes the following issues: release-notes-susemanager-proxy: Update to SUSE Manager 4.3.17 CVEs Fixed: CVE-2024-29371, CVE-2026-27727, CVE-2026-27830 Bugs mentioned: bsc1227577, bsc1227579, bsc1236799, bsc1243241, bsc1244724 bsc1248741, bsc1251995, bsc1253068, bsc1253773...

9.8CVSS6.7AI score0.02039EPSS
SaveExploits4References120
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•27 views

Codra Panorama Suite 安全漏洞

Codra Panorama Suite is an industrial process monitoring software platform developed by the French company Codra. There is a security vulnerability in Codra Panorama Suite, which allows attackers to potentially read files on the Web HMI server...

9.2CVSS5.8AI score0.00531EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•35 views

Nats-Server 安全漏洞

Nats-Server is a high-performance server developed by Nats Open Source, used in Nats.io, cloud, and edge native messaging systems. There were security vulnerabilities in versions of Nats-Server before 2.11.15 and 2.12.6. These vulnerabilities stemmed from the incorrect classification of MQTT...

8.6CVSS7AI score0.00631EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•7 views

CVE-2026-33247: Insertion of Sensitive Information Into Debugging Code

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run with static credentials for all clients provided via argv the command-line, then those credentials are visible to any user who can see the...

7.5CVSS6.9AI score0.00538EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•30 views

Nats-Server 安全漏洞

Nats-Server is a high-performance server developed by Nats Open Source, used for native message delivery systems on Nats.io, cloud, and edge environments. There were security vulnerabilities in versions of NATS-Server prior to 2.11.15 and 2.12.6. These vulnerabilities stemmed from credentials...

7.4CVSS7AI score0.00538EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•25 views

SANYO DENKI SANUPS SOFTWARE 代码问题漏洞

SANYO DENKI SANUPS SOFTWARE is a software developed by SANYO DENKI Corporation in Japan. It is used for monitoring UPS devices, managing their operation, and analyzing power supply status. SANYO DENKI SANUPS SOFTWARE has code vulnerabilities; these vulnerabilities stem from the Windows service fi...

8.4CVSS6.9AI score0.00198EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•4 views

CVE-2026-33216: Plaintext Storage of a Password

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, for MQTT deployments using usercodes/passwords: MQTT passwords are incorrectly classified as a non-authenticating identity statement JWT and exposed via monitoring...

8.6CVSS7AI score0.00631EPSS
SaveExploits0References6
Snyk
Snyk
•added 2026/03/24 9:42 p.m.•9 views

Credential Exposure

Overview github.com/nats-io/nats-server/v2/server is an A simple, secure and performant communications system for digital systems, services and devices. Affected versions of this package are vulnerable to Credential Exposure through the MQTT authentication processing in...

9.2CVSS6.9AI score0.00631EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/03/24 9:42 p.m.•25 views

NATS has MQTT plaintext password disclosure

Background NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. The nats-server provides an MQTT client interface. Problem Description For MQTT deployments using usercodes/passwords: MQTT passwords are...

8.6CVSS7AI score0.00631EPSS
SaveExploits0References5Affected Software2
osv-ghsa
osv-ghsa
•added 2026/03/24 9:42 p.m.•17 views

GHSA-V722-JCV5-W7MC NATS has MQTT plaintext password disclosure

Background NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. The nats-server provides an MQTT client interface. Problem Description For MQTT deployments using usercodes/passwords: MQTT passwords are...

8.6CVSS7AI score0.00631EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/03/24 8:44 p.m.•50 views

NATS credentials are exposed in monitoring port via command-line argv

Background NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. The nats-server provides an optional monitoring port, which provides access to sensitive data. The nats-server can take certain configuratio...

7.5CVSS7AI score0.00538EPSS
SaveExploits0References5Affected Software1
osv-ghsa
osv-ghsa
•added 2026/03/24 8:44 p.m.•14 views

GHSA-X6G4-F6Q3-FQVV NATS credentials are exposed in monitoring port via command-line argv

Background NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. The nats-server provides an optional monitoring port, which provides access to sensitive data. The nats-server can take certain configuratio...

7.4CVSS7AI score0.00538EPSS
SaveExploits0References5
CVE
CVE
•added 2026/03/24 11:27 a.m.•31 views

CVE-2019-25629

AIDA64 Extreme 5.99.4900 is affected by a structured exception handler (SEH) buffer overflow in the logging functionality. The vulnerability allows local code execution by supplying a malicious CSV log file path; an attacker can inject shellcode via the Hardware Monitoring logging preferences, tr...

8.6CVSS7.1AI score0.00217EPSS
SaveExploits1References4Affected Software1
attackerkb
attackerkb
•added 2026/03/24 11:27 a.m.•55 views

CVE-2019-25629

AIDA64 Extreme 5.99.4900 contains a structured exception handler buffer overflow vulnerability in the logging functionality that allows local attackers to execute arbitrary code by supplying a malicious CSV log file path. Attackers can inject shellcode through the Hardware Monitoring logging...

8.6CVSS6.8AI score0.00217EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/03/24 12:00 a.m.•33 views

PT-2026-27363

AIDA64 Extreme 5.99.4900 contains a structured exception handler buffer overflow vulnerability in the logging functionality that allows local attackers to execute arbitrary code by supplying a malicious CSV log file path. Attackers can inject shellcode through the Hardware Monitoring logging...

8.6CVSS6.8AI score0.00217EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/03/24 12:00 a.m.•23 views

PT-2026-27613

Name of the Vulnerable Software and Affected Versions NATS-Server versions prior to 2.11.15 NATS-Server versions prior to 2.12.6 Description NATS-Server, a high-performance server for NATS.io, a cloud and edge native messaging system, contains an issue where MQTT passwords are incorrectly...

8.6CVSS6.8AI score0.00631EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/03/24 12:00 a.m.•33 views

Zabbix 安全漏洞

Zabbix is an open-source monitoring system developed by Zabbix Inc. This system supports network monitoring, server monitoring, cloud monitoring, and application monitoring. Zabbix has security vulnerabilities, which stem from improper reuse of JavaScript environments. These vulnerabilities may...

7.1CVSS5.8AI score0.00244EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/03/24 12:00 a.m.•11 views

The vulnerability of the netlink_group_mask() function in the net/netlink/af_netlink.c module allows a hacker to cause a service failure in Linux kernel-based NETLINK session monitoring interfaces.

The vulnerability of the netlinkgroupmask function in the net/netlink/afnetlink.c module relates to the handling of socket monitoring interfaces in Linux kernel-based operating systems. This vulnerability allows an attacker to cause a service failure...

5.5CVSS6.1AI score0.00276EPSS
SaveExploits0References23Affected Software3
Positive Technologies
Positive Technologies
•added 2026/03/24 12:00 a.m.•17 views

PT-2026-27620

Name of the Vulnerable Software and Affected Versions NATS-Server versions prior to 2.11.15 NATS-Server versions prior to 2.12.6 Description NATS-Server is a high-performance server for NATS.io, a cloud and edge native messaging system. If a nats-server is run with static credentials for all...

7.5CVSS6.9AI score0.00538EPSS
SaveExploits0
Rows per page
Query Builder