Lucene search
+L

598 matches found

Positive Technologies
Positive Technologies
added 2025/10/31 12:0 a.m.7 views

PT-2025-44623

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 Description The software may allow a non-root user to gain elevated privileges within a container environment. This is due to the application running with unnecessary...

7.8CVSS6.6AI score0.00125EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/23 9:31 p.m.9 views

EUVD-2025-35712

A container privilege escalation flaw was found in certain Container-native Virtualization images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container,...

5.2CVSS6.8AI score0.00164EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/10/22 12:0 a.m.6 views

PT-2025-43401

Name of the Vulnerable Software and Affected Versions AMQ Broker affected versions not specified Description A container privilege escalation flaw exists in certain AMQ Broker images. The issue arises from the /etc/passwd file being created with group-writable permissions during the build process...

5.2CVSS7.1AI score0.00193EPSS
Exploits0References6
CNVD
CNVD
added 2025/10/17 12:0 a.m.19 views

ZTE ZXCDN Struts Remote Code Execution Vulnerability

ZTE ZXCDN is a unified network management platform from China's ZTE Corporation ZTE. ZTE ZXCDN suffers from a Struts remote code execution vulnerability, which can be exploited by an attacker to remotely execute commands with non-root privileges...

9.8CVSS6.5AI score0.00748EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/10/15 1:45 p.m.9 views

CVE-2025-46581

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

9.8CVSS8.5AI score0.00748EPSS
Exploits0References1
NVD
NVD
added 2025/10/14 9:15 a.m.5 views

CVE-2025-46581

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

9.8CVSS0.00748EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/14 8:54 a.m.5 views

CVE-2025-46581 ZTE ZXCDN product has a Struts RCE Vulnerability

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

9.8CVSS8.2AI score0.00748EPSS
Exploits0References1
CVE
CVE
added 2025/10/14 8:54 a.m.16 views

CVE-2025-46581

CVE-2025-46581 affects ZTE ZXCDN, with an Apache Struts remote code execution vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges. Several connected sources corroborate a Struts-based RCE affecting ZXCDN, but none provide concrete product version(s) o...

9.8CVSS8.2AI score0.00748EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/14 8:54 a.m.11 views

CVE-2025-46581 ZTE ZXCDN product has a Struts RCE Vulnerability

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

9.8CVSS0.00748EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.6 views

PT-2025-41861

Name of the Vulnerable Software and Affected Versions ZTE ZXCDN product affected versions not specified Description The ZTE ZXCDN product is susceptible to a remote code execution RCE issue stemming from a flaw in the Struts framework. An attacker who does not need to be authenticated can execute...

9.8CVSS7.7AI score0.00748EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.5 views

ZTE ZXCDN 安全漏洞

ZTE ZXCDN is a unified network management platform from ZTE Corporation ZTE, China. A security vulnerability exists in ZTE ZXCDN, which originates from an Apache Struts remote code execution vulnerability that could lead to remote command execution with non-root privileges...

9.8CVSS8AI score0.00748EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2025/10/09 6:47 p.m.9 views

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.16.4 security update

Important: Red Hat OpenShift GitOps v1.16.4 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-6703 After Upgrade to v.1.16 not able to add --metrics-application-labels in spec.controller.extraCommandArgs with multiple values GITOPS-7180...

7.5CVSS6.7AI score0.00563EPSS
Exploits3References8
OSV
OSV
added 2025/10/09 3:49 p.m.9 views

CLSA-2025-1760024944 Fix CVE(s): CVE-2025-6297

SECURITY UPDATE: Fix directory cleanup vulnerability - dpkg-deb/info.c: Fix cleanup for control member with restricted directories - Add treewalk to set proper permissions before removal for non-root users - CVE-2025-6297...

8.2CVSS7.3AI score0.00341EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-26172

Malware in sbrugna...

6.2CVSS6AI score0.00225EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2005-1818

Malware in sbrugna...

4.6CVSS6.4AI score0.00496EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2007-2756

Malware in sbrugna...

7.8CVSS5.5AI score0.02401EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2015-1515

Malware in sbrugna...

7.5CVSS7.6AI score0.01723EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2016-7702

Malware in sbrugna...

9.8CVSS9.2AI score0.05592EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-2962

Malware in sbrugna...

7.8CVSS6.5AI score0.01414EPSS
Exploits3References14
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-12552

Malware in sbrugna...

6.5CVSS6.5AI score0.00221EPSS
Exploits0References3
Rows per page
Query Builder