Lucene search
K

18 matches found

RedhatCVE
RedhatCVE
added 2026/02/10 7:33 a.m.5 views

CVE-2025-66606

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVRN, UNSVRN, HMIWEB,...

9.6CVSS5.4AI score0.00217EPSS
Exploits0References1
OSV
OSV
added 2026/02/09 5:16 a.m.2 views

CVE-2025-66595

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product is vulnerable to Cross-Site Request Forgery CSRF. When a user accesses a link crafted by an attacker, the user’s account could be compromised. The affected products and versions are as follows:...

5.4CVSS5.7AI score0.00095EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/09 3:37 a.m.5 views

CVE-2025-66594

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Detailed messages are displayed on the error page. This information could be exploited by an attacker for other attacks. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVRN, UNSVRN,...

6.9CVSS5.3AI score0.00204EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/09 12:0 a.m.8 views

PT-2026-7051

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts the OPTIONS method. An attacker could potentially use this information to carry out other attacks. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVRN, UNSVRN,...

2.1CVSS5.3AI score0.0026EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:0 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2025-984871)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984871 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior an...

6.5CVSS6.7AI score0.00936EPSS
Exploits0References4
Snyk
Snyk
added 2025/09/22 12:42 p.m.3 views

UNIX Symbolic Link (Symlink) Following

Overview txtai is an All-in-one open-source AI framework for semantic search, LLM orchestration and language model workflows Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following via the validate function due to improper sanitization of symbolic links within the...

9.2CVSS7.1AI score0.00427EPSS
Exploits0References2
OSV
OSV
added 2024/05/24 10:15 a.m.43 views

UBUNTU-CVE-2024-5315

Vulnerabilities in Dolibarr ERP - CRM that affect version 9.0.1 and allow SQL injection. These vulnerabilities could allow a remote attacker to send a specially crafted SQL query to the system and retrieve all the information stored in the database through the parameters viewstatut in...

9.1CVSS5.9AI score0.32872EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/11/03 12:0 a.m.3 views

FRRouting FRR Security Vulnerabilities

FRRouting FRR is a suite of software that implements and manages various IPV4 and IPV6 routing protocols. A security vulnerability exists in FRRouting FRR version 9.0.1 and earlier versions. An attacker could exploit this vulnerability to cause a system crash...

7.5CVSS6.6AI score0.00911EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/11/03 12:0 a.m.4 views

PT-2023-9208 · Unknown +10 · Frrouting Frr +10

Name of the Vulnerable Software and Affected Versions: FRRouting FRR versions through 9.0.1 Description: An issue was discovered in FRRouting where a crash can occur when a malformed BGP UPDATE message with an EOR is processed. This happens because the presence of EOR does not lead to a...

9.8CVSS7.6AI score0.02152EPSS
Exploits10References184
SUSE CVE
SUSE CVE
added 2023/02/15 4:34 a.m.5 views

SUSE CVE-2018-2638

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Deployment. Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

8.3CVSS7.2AI score0.03328EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/07/28 12:0 a.m.13 views

Veritas NetBackup 安全漏洞

Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection of environmental data such as metadata and virtual environments. A security vulnerabilit...

9.6CVSS6.7AI score0.0058EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2022/05/05 10:55 p.m.4 views

CVE-2022-29167 ReDoS vulnerability in header parsing in hawk

Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification of the request and response, covering the HTTP method, request URI, host, and optionally the request payload. Hawk used a regular expression to parse Host HTTP...

7.4CVSS7.4AI score0.01028EPSS
Exploits0References2
CNVD
CNVD
added 2020/11/23 12:0 a.m.2 views

HCL Domino Denial of Service Vulnerability (CNVD-2020-66308)

HCL Domino is a server for collaborative client-server software platforms. A denial of service vulnerability exists in HCL Domino versions 9.0.1 FP10 IF6, prior to 10.0.1. The vulnerability stems from improper validation of user-supplied input. An attacker could exploit the vulnerability to cause...

7.5CVSS6.6AI score0.01031EPSS
Exploits0References1
CNVD
CNVD
added 2020/11/23 12:0 a.m.1 views

HCL Domino Denial of Service Vulnerability

HCL Domino is a server for collaborative client-server software platforms. A denial of service vulnerability exists in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP5, and prior to 11.0.1. The vulnerability stems from improper validation of user-supplied input. A remote, unauthenticated attacker...

7.5CVSS6.8AI score0.01247EPSS
Exploits0References1
CNNVD
CNNVD
added 2020/11/20 12:0 a.m.9 views

HCL Technologies Domino 输入验证错误漏洞

HCL Domino is a server for collaborative client-server software platforms. A denial of service vulnerability exists in HCL Domino versions 9.0.1 FP10 IF6, prior to 10.0.1. The vulnerability stems from improper validation of user-supplied input. An attacker could exploit the vulnerability to cause...

7.5CVSS7.2AI score0.01031EPSS
Exploits0References3
OSV
OSV
added 2019/06/25 4:15 p.m.2 views

CVE-2019-4135

IBM Security Access Manager 9.0.1 through 9.0.6 is affected by a security vulnerability that could allow authenticated users to impersonate other users. IBM X-Force ID: 158331...

8.8CVSS7.1AI score0.01534EPSS
Exploits0References2
CNVD
CNVD
added 2018/07/13 12:0 a.m.1 views

IBM iNotes Cross-Site Scripting Vulnerability (CNVD-2018-13098)

IBM iNotes also known as IBM Lotus iNotes is a set of Web-based e-mail software from IBM in the United States. The software helps different types of users online and offline users to effectively manage business-critical information and collaboration. A cross-site scripting vulnerability exists in...

5.4CVSS5.2AI score0.00699EPSS
Exploits0References1
CNVD
CNVD
added 2017/01/04 12:0 a.m.5 views

IBM Security AppScan Source Information Disclosure Vulnerability

IBM AppScan Source is a security scanner for iPhone and iPad from IBM USA. A security vulnerability exists in IBM AppScan Source versions 9.0.1, 9.0.2, and 9.0.3. An attacker can exploit the vulnerability to obtain sensitive information...

5.3CVSS6.6AI score0.01029EPSS
Exploits0References1
Rows per page
Query Builder