Lucene search
+L

12917 matches found

BDU FSTEC
BDU FSTEC
•added 2025/06/13 12:00 a.m.•18 views

The vulnerability of the Service Account Auditing service of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus allows a perpetrator to execute arbitrary code.

The vulnerability of the Service Account Auditing service in the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus is related to the lack of security measures for the SQL query structure. Exploitation of this vulnerability could allow a malicious actor to...

8.7CVSS6AI score0.01605EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2025/06/13 12:00 a.m.•18 views

Dell ControlVault3和Dell ControlVault3 Plus 代码问题漏洞

Dell ControlVault3 and Dell ControlVault3 Plus are both hardware-based security solutions from Dell, Inc. A code issue vulnerability exists in Dell ControlVault3 versions prior to 5.15.10.14 and Dell ControlVault3 Plus versions prior to 6.2.26.36, which stems from a deserialization vulnerability ...

8.1CVSS7.9AI score0.02574EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/06/13 12:00 a.m.•15 views

Dell ControlVault3和Dell ControlVault3 Plus 安全漏洞

Dell ControlVault3 and Dell ControlVault3 Plus are both hardware-based security solutions from Dell USA. A security vulnerability exists in Dell ControlVault3 versions prior to 5.15.10.14 and Dell ControlVault3 Plus versions prior to 6.2.26.36, which stems from an arbitrary release vulnerability ...

8.8CVSS7.8AI score0.02645EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/06/13 12:00 a.m.•18 views

The vulnerability of the built-in web server boa (/boafrm/formFilter) of TOTOLINK N302R Plus router’s microprogramming software allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the built-in web server boa /boafrm/formFilter of TOTOLINK N302R Plus router software lies in the issue of the operation exceeding the buffer in memory when processing the url parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a...

9CVSS8.3AI score0.00756EPSS
SaveExploits0References6Affected Software1
RedhatCVE
RedhatCVE
•added 2025/06/11 12:22 p.m.•14 views

CVE-2025-36528

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports...

8.3CVSS8.5AI score0.01605EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/11 11:11 a.m.•12 views

CVE-2025-27709

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports...

8.3CVSS8.5AI score0.01605EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/11 11:11 a.m.•18 views

CVE-2025-3835

Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module...

9.6CVSS9.6AI score0.02231EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/06/11 12:00 a.m.•19 views

The vulnerability of the notification module of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus allows a perpetrator to execute arbitrary code.

The vulnerability of the notification module of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

8.7CVSS6.1AI score0.01605EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/06/11 12:00 a.m.•18 views

The vulnerability of the Service Account Auditing service of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus allows a perpetrator to execute arbitrary code.

The vulnerability of the Service Account Auditing service in the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus is related to the lack of security measures for the SQL query structure. Exploitation of this vulnerability could allow a malicious actor to...

8.7CVSS8.2AI score0.01605EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/06/10 12:00 a.m.•14 views

The vulnerability of the AT+MMNAME command in the microprogramming software of Microhard IPn4Gii-NA2 and BulletLTE-NA2 allows a hacker to enhance their privileges.

The vulnerability of the AT+MMNAME command in the microprogramming software of Microhard IPn4Gii-NA2 and BulletLTE-NA2 lies in the implementation or modification of certain arguments. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.1CVSS5.5AI score0.01001EPSS
SaveExploits1References4Affected Software2
CNVD
CNVD
•added 2025/06/10 12:00 a.m.•20 views

TOTOLINK N302R Plus service_type parameter buffer overflow vulnerability

The TOTOLINK N300R Plus is a wireless router. The TOTOLINK N302R Plus buffer overflow vulnerability, which stems from a misuse of the parameter servicetype, can be exploited by an attacker to execute arbitrary code...

9CVSS8.1AI score0.00756EPSS
SaveExploits0References1
HPE Security Bulletins
HPE Security Bulletins
•added 2025/06/10 12:00 a.m.•21 views

HPESBHF04882 rev.1 - Certain HPE ProLiant AMD DL/XL Servers Using Certain AMD EPYC Processors, AMD-SB-7039: Unauthorized Access to AMD Secure Processor’s Crypto-Co-Processor, Local Unauthorized Access Vulnerability

Potential Security Impact: Local: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen10 Plus server - Prior to v3.2008-07-2024 HPE ProLiant DL325 Gen10 Plus v2 server - Prior to v3.2008-07-2024 HPE ProLiant DL345 Gen10 Plus server - Prior to...

7.9CVSS6.1AI score0.00178EPSS
SaveExploits0
OSV
OSV
•added 2025/06/09 12:15 p.m.•14 views

CVE-2025-41444

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module...

8.3CVSS5.8AI score0.01605EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/09 12:15 p.m.•28 views

CVE-2025-41444

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module...

8.3CVSS0.01605EPSS
SaveExploits0References1
OSV
OSV
•added 2025/06/09 11:15 a.m.•14 views

CVE-2025-36528

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports...

8.3CVSS5.8AI score0.01605EPSS
SaveExploits0References1
OSV
OSV
•added 2025/06/09 11:15 a.m.•18 views

CVE-2025-3835

Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module...

9.6CVSS6.2AI score0.02231EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/09 11:15 a.m.•36 views

CVE-2025-3835

Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module...

9.6CVSS0.02231EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/09 11:15 a.m.•22 views

CVE-2025-36528

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports...

8.3CVSS0.01605EPSS
SaveExploits0References1
OSV
OSV
•added 2025/06/09 11:15 a.m.•16 views

CVE-2025-27709

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports...

8.3CVSS5.8AI score0.01605EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/09 11:15 a.m.•15 views

CVE-2025-27709

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports...

8.3CVSS0.01605EPSS
SaveExploits0References1
Rows per page
Query Builder