Lucene search
K

24 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-29742

Malware in sbrugna...

7.8CVSS7.5AI score0.00315EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-29764

Malware in sbrugna...

9.3CVSS7.5AI score0.00353EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-11512

Malicious code in bioql PyPI...

8.5CVSS6.6AI score0.00166EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-8933

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role roles/compute.osLogi...

9.3CVSS7.2AI score0.00353EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2020-8903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role roles/compute.osLogi...

7.8CVSS7.5AI score0.00315EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 5:11 p.m.7 views

CVE-2020-8903

A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...

7.8CVSS6.5AI score0.00315EPSS
Exploits1References1
CVE
CVE
added 2025/04/30 11:25 a.m.44 views

CVE-2025-24342

CVE-2025-24342 affects the web-based login functionality of ctrlX OS. The root cause is an improper login process that enables remote, unauthenticated attackers to enumerate valid usernames by sending multiple crafted HTTP requests. This can facilitate targeted credential-guessing attempts agains...

5.3CVSS7.2AI score0.00353EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/30 11:25 a.m.4 views

CVE-2025-24342

A vulnerability in the login functionality of the web application of ctrlX OS allows a remote unauthenticated attacker to guess valid usernames via multiple crafted HTTP requests...

5.3CVSS7.2AI score0.00353EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/25 4:25 p.m.6 views

CVE-2025-2903

An attacker with knowledge of creating user accounts during VM deployment on Google Cloud Platform GCP using the OS Login feature, can login via SSH gaining command-line control of the operating system. This allows an attacker to gain access to sensitive data stored on the VM, install malicious...

8.5CVSS6.9AI score0.00166EPSS
Exploits0References3
NVD
NVD
added 2025/04/17 7:15 a.m.14 views

CVE-2025-2903

An attacker with knowledge of creating user accounts during VM deployment on Google Cloud Platform GCP using the OS Login feature, can login via SSH gaining command-line control of the operating system. This allows an attacker to gain access to sensitive data stored on the VM, install malicious...

8.5CVSS0.00166EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/03/21 12:0 a.m.5 views

PT-2025-16942 · Google · Google Cloud Platform

Name of the Vulnerable Software and Affected Versions: Google Cloud Platform affected versions not specified Description: The issue allows an attacker with knowledge of creating user accounts during VM deployment on Google Cloud Platform GCP using the OS Login feature to login via SSH, gaining...

8.5CVSS5.9AI score0.00166EPSS
Exploits0References11
Debian CVE
Debian CVE
added 2023/11/06 4:58 p.m.18 views

CVE-2023-40660

A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock a...

6.6CVSS6.6AI score0.00925EPSS
Exploits0
Veracode
Veracode
added 2023/10/06 4:32 a.m.20 views

Authentication Bypass

libopensc.so is vulnerable to Authentication Bypass. The vulnerability exists in the scpkcs15verifypin function of pkcs15-pin.c when a token or card is plugged into the system and authenticated by one process, but can be utilized for cryptographic operations by another process when an empty,...

6.6CVSS7AI score0.00925EPSS
Exploits0References14Affected Software2
SUSE CVE
SUSE CVE
added 2023/02/15 4:1 a.m.2 views

SUSE CVE-2020-8903

A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...

7.8CVSS6.9AI score0.00315EPSS
Exploits1References7
BDU FSTEC
BDU FSTEC
added 2020/08/28 12:0 a.m.2 views

The vulnerability of the Google Cloud OS guest-oslogin entry environment, related to incorrect default access permissions settings, allows attackers to escalate their privileges.

The vulnerability of the Google Cloud OS guest-oslogin entry environment is related to incorrect default access settings. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS7.2AI score0.00309EPSS
Exploits1References6Affected Software2
CNVD
CNVD
added 2020/06/23 12:0 a.m.3 views

Google Cloud Platform guest-oslogin elevation of privilege vulnerability

Google Cloud Platform is a cloud computing platform that provides cloud computing, data storage, data analytics and machine learning services. guest-oslogin is one of the operating system login components. A security vulnerability exists in guest-oslogin versions 20190304 through 20200507 in Goog...

9.3CVSS6.7AI score0.00353EPSS
Exploits1References1
CNVD
CNVD
added 2020/06/23 12:0 a.m.3 views

Google Cloud Platform guest-oslogin elevation of privilege vulnerability (CNVD-2020-60516)

Google Cloud Platform is a cloud computing platform that provides cloud computing, data storage, data analytics and machine learning services. guest-oslogin is one of the operating system login components. A security vulnerability exists in guest-oslogin versions 20190304 through 20200507 in Goog...

9.3CVSS6.7AI score0.00309EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2020/06/22 2:15 p.m.18 views

CVE-2020-8903

A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...

7.8CVSS7.2AI score0.00315EPSS
Exploits1References4
OSV
OSV
added 2020/06/22 2:15 p.m.2 views

UBUNTU-CVE-2020-8933

A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using the membership to the "lxd" group, an attacker can attach host devices and filesystems. Within ...

9.3CVSS5.8AI score0.00353EPSS
Exploits1References5
OSV
OSV
added 2020/06/22 2:15 p.m.0 views

UBUNTU-CVE-2020-8903

A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...

7.8CVSS5.9AI score0.00315EPSS
Exploits1References5
Rows per page
Query Builder