Lucene search
+L

67635 matches found

Vulnrichment
Vulnrichment
added 2025/10/31 4:41 p.m.5 views

CVE-2025-6075 Quadratic complexity in os.path.expandvars() with user-controlled template

If the value passed to os.path.expandvars is user-controlled a performance degradation is possible when expanding environment variables...

1.8CVSS6.5AI score0.00139EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2025/10/31 4:41 p.m.7 views

CVE-2025-6075

If the value passed to os.path.expandvars is user-controlled a performance degradation is possible when expanding environment variables...

5.5CVSS5.9AI score0.00139EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/10/31 3:11 p.m.12 views

CVE-2025-46422

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

7.8CVSS7.2AI score0.00511EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/31 2:13 p.m.12 views

CVE-2025-43940

Dell Unity, versions 5.5 and Prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

7.8CVSS6.5AI score0.0059EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/10/31 12:00 a.m.12 views

F5 Networks F5OS-A FIPS HSM Information Disclosure (K000148625)

The version of F5 Networks F5OS-A installed on the remote host is affected by a vulnerability as referenced in the K000148625 advisory. - A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive FIPS hardware security module HSM...

5.6CVSS5.6AI score0.00123EPSS
SaveExploits0References2
Photon
Photon
added 2025/10/31 12:00 a.m.13 views

Critical Photon OS Security Update - PHSA-2025-5.0-0664

Updates of 'linux', 'strongswan', 'linux-esx', 'linux-rt', 'ImageMagick' packages of Photon OS have been released...

8.8CVSS6.9AI score0.00843EPSS
SaveExploits5
Photon
Photon
added 2025/10/31 12:00 a.m.13 views

Important Photon OS Security Update - PHSA-2025-5.0-90-0665

Updates of 'libtiff' packages of Photon OS have been released...

8.8CVSS6.2AI score0.00792EPSS
SaveExploits0
Photon
Photon
added 2025/10/31 12:00 a.m.6 views

Important Photon OS Security Update - PHSA-2025-4.0-0897

Updates of 'strongswan', 'libtiff' packages of Photon OS have been released...

5.4AI score
SaveExploits0
Photon
Photon
added 2025/10/31 12:00 a.m.13 views

Important Photon OS Security Update - PHSA-2025-4.0-0896

Updates of 'openjdk21', 'linux', 'openjdk11' packages of Photon OS have been released...

7.5CVSS6.7AI score0.00647EPSS
SaveExploits0
NVD
NVD
added 2025/10/30 3:15 p.m.10 views

CVE-2025-46422

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

7.8CVSS0.00511EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/30 3:15 p.m.12 views

CVE-2025-46423

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

7.8CVSS0.00511EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/30 2:23 p.m.16 views

CVE-2025-43942

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

7.8CVSS0.0059EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/30 2:23 p.m.24 views

CVE-2025-43942

Dell Unity OS has an OS Command Injection vulnerability (CVE-2025-43942) affecting Dell Unity versions 5.5 and earlier. The issue arises from improper neutralization of special elements in OS commands, allowing a low-privilege, locally-accessible attacker to achieve command execution and privileg...

7.8CVSS6.2AI score0.0059EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2025/10/30 2:19 p.m.27 views

CVE-2025-46422

CVE-2025-46422 affects Dell Unity OS, with Dell Unity, version 5.5 and earlier, vulnerable to an OS Command Injection due to improper neutralization of special elements. A low-privileged, locally authenticated attacker can exploit this to run arbitrary commands with root privileges. Multiple sour...

7.8CVSS6.9AI score0.00511EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/10/30 2:19 p.m.13 views

EUVD-2025-37006

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

7.8CVSS6.7AI score0.00511EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/30 2:15 p.m.9 views

CVE-2025-43940

Dell Unity, versions 5.5 and Prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

7.8CVSS5.9AI score0.0059EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/30 2:15 p.m.13 views

CVE-2025-43939

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

7.8CVSS6AI score0.0059EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/30 2:14 p.m.13 views

EUVD-2025-37007

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

7.8CVSS6.7AI score0.00511EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/30 2:10 p.m.14 views

EUVD-2025-37010

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

7.8CVSS6.2AI score0.0059EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/30 2:10 p.m.8 views

CVE-2025-43939

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

7.8CVSS6.3AI score0.0059EPSS
SaveExploits0References1
Rows per page
Query Builder