Lucene search
+L

491 matches found

Positive Technologies
Positive Technologies
•added 2025/01/23 12:00 a.m.•19 views

PT-2025-2633 · Ibm · Bigfix Patch Download Plug-Ins

Name of the Vulnerable Software and Affected Versions: BigFix Patch Download Plug-ins affected versions not specified Description: The issue is related to an insecure protocol support in BigFix Patch Download Plug-ins, which can lead to improper handling of SSL certificates validation. This may...

2.8CVSS6.9AI score0.00078EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/23 12:00 a.m.•8 views

CVE-2024-42182: Server-Side Request Forgery (SSRF)

BigFix Patch Download Plug-ins are affected by Server-Side Request Forgery SSRF vulnerability. It may allow the application to download files from an internally hosted server on localhost...

2.5CVSS5.8AI score0.00118EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/23 12:00 a.m.•11 views

CVE-2024-42187: Improper Limitation of a Pathname to a Restricted Directory

BigFix Patch Download Plug-ins are affected by path traversal vulnerability. The application could allow operators to download files from a local repository which is vulnerable to path traversal attacks...

5.3CVSS5.8AI score0.00156EPSS
SaveExploits0References1
Fedora
Fedora
•added 2024/12/22 2:13 a.m.•22 views

[SECURITY] Fedora 40 Update: mingw-gstreamer1-plugins-bad-free-1.24.10-1.fc40

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...

9.8CVSS7.4AI score0.01728EPSS
SaveExploits2
Fedora
Fedora
•added 2024/12/22 2:03 a.m.•31 views

[SECURITY] Fedora 41 Update: mingw-gstreamer1-plugins-bad-free-1.24.10-1.fc41

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...

9.8CVSS7.4AI score0.01728EPSS
SaveExploits2
Veeam
Veeam
•added 2024/12/19 12:00 a.m.•38 views

Veeam Product Upgrade Guides

Upgrade Guides This article provides a list with links to the upgrade guides available within each product's user guide. Veeam Data Platform Veeam Backup & Replication Veeam ONE Veeam Recovery Orchestrator Veeam Plug-ins for Enterprise Applications Veeam Plug-in for SAP HANA Veeam Plug-in for...

5.9AI score
SaveExploits0
AlmaLinux
AlmaLinux
•added 2024/12/16 12:00 a.m.•34 views

Important: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer1-plugins-good: uninitialized stack memory in...

9.8CVSS6.8AI score0.01728EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2024/11/07 12:00 a.m.•18 views

Logpoint security vulnerabilities

Logpoint is a network security application from the Danish company Logpoint. A security vulnerability exists in Logpoint versions prior to 7.5.0 that stems from a lack of proper authorization checks on endpoints used to create, edit, or delete third-party authentication modules, allowing...

7.5CVSS6.8AI score0.00326EPSS
SaveExploits0References3
Fedora
Fedora
•added 2024/10/09 1:31 a.m.•76 views

[SECURITY] Fedora 40 Update: perl-App-cpanminus-1.7047-4.fc40

Why? It's dependency free, requires zero configuration, and stands alone but it's maintainable and extensible with plug-ins and friendly to shell scripting. When running, it requires only 10 MB of RAM...

9.8CVSS6.7AI score0.00737EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2024/09/24 12:00 a.m.•23 views

RHEL 8 : dovecot (RHSA-2024:6973)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6973 advisory. Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3...

7.5CVSS7.3AI score0.01295EPSS
SaveExploits2References7
CNNVD
CNNVD
•added 2024/09/05 12:00 a.m.•20 views

Stripe CLI security vulnerabilities

Stripe CLI is a command line tool for the Stripe e-commerce platform from Stripe Ireland. A security vulnerability exists in Stripe CLI version 1.11.1 and later versions, which stems from the inclusion of plug-in packages with formatting errors that can overwrite arbitrary files...

7.5CVSS6.8AI score0.00195EPSS
SaveExploits0References2
NVD
NVD
•added 2024/07/08 11:15 a.m.•38 views

CVE-2024-27903

OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service...

9.8CVSS0.08922EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/07/08 10:27 a.m.•19 views

CVE-2024-27903

OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service...

7.2CVSS7.1AI score
SaveExploits0References5
osv_alsa
osv_alsa
•added 2024/04/30 12:00 a.m.•57 views

ALSA-2024:2287 Moderate: gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fixes: gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with...

8.8CVSS7.9AI score0.02256EPSS
SaveExploits0References10
OpenVAS
OpenVAS
•added 2024/04/03 12:00 a.m.•18 views

Fedora: Security Advisory for csmock (FEDORA-2024-816ffc9598)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.01053EPSS
SaveExploits0References2
Fedora
Fedora
•added 2024/03/29 2:42 a.m.•45 views

[SECURITY] Fedora 38 Update: csmock-3.5.3-1.fc38

This is a metapackage pulling in csmock-common and basic csmock plug-ins...

8.8CVSS6.7AI score0.01053EPSS
SaveExploits0
Fedora
Fedora
•added 2024/03/29 1:11 a.m.•32 views

[SECURITY] Fedora 39 Update: csmock-3.5.3-1.fc39

This is a metapackage pulling in csmock-common and basic csmock plug-ins...

8.8CVSS6.7AI score0.01053EPSS
SaveExploits0
Fedora
Fedora
•added 2024/03/29 12:21 a.m.•31 views

[SECURITY] Fedora 40 Update: csmock-3.5.3-1.fc40

This is a metapackage pulling in csmock-common and basic csmock plug-ins...

8.8CVSS6.7AI score0.01053EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2024/03/29 12:00 a.m.•29 views

Fedora: Security Advisory (FEDORA-2024-bd9e53683a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.01053EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2024/01/05 9:15 a.m.•24 views

CVE-2020-13880

IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+1cbf heap-based out-of-bounds write...

9.8CVSS5.8AI score0.00562EPSS
SaveExploits0References1
Rows per page
Query Builder