Lucene search
+L

1139 matches found

OSV
OSV
added 2025/06/24 8:15 p.m.8 views

CVE-2025-49851

ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to an improper authentication vulnerability which could allow an attacker to bypass authentication and gain permissions in the product...

9.8CVSS5.8AI score0.00497EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/24 12:0 a.m.7 views

Control iD iDSecure On-premises 代码问题漏洞

Control iD iDSecure On-premises is an access control software from Control iD, a Brazilian company, used to manage personnel and vehicle access. A code issue vulnerability exists in Control iD iDSecure On-premises version 4.7.48.0 and prior versions, which stems from server-side request forgery a...

8.7CVSS6.8AI score0.0037EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/24 12:0 a.m.9 views

Control iD iDSecure On-premises 授权问题漏洞

Control iD iDSecure On-premises is an access control software from Control iD, a Brazilian company, used to manage personnel and vehicle access. An authorization issue vulnerability exists in Control iD iDSecure On-premises version 4.7.48.0 and prior versions, which stems from improper...

9.8CVSS6.8AI score0.00497EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/24 12:0 a.m.11 views

Control iD iDSecure On-premises 注入漏洞

Control iD iDSecure On-premises is an access control software from Control iD, a Brazilian company, used to manage personnel and vehicle access. A SQL injection vulnerability exists in Control iD iDSecure On-premises version 4.7.48.0 and prior versions, which originates from SQL injection and cou...

9.3CVSS7.9AI score0.00461EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/17 8:15 p.m.9 views

CVE-2025-30679

A Server-side Request Forgery SSRF vulnerability in Trend Micro Apex Central on-premise modOSCE component could allow an attacker to manipulate certain parameters leading to information disclosure on affected installations...

7.5CVSS5.8AI score0.00299EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 10:1 a.m.15 views

CVE-2024-25656

Improper input validation in AVSystem Unified Management Platform UMP 23.07.0.16567LTS can result in unauthenticated CPE Customer Premises Equipment devices storing arbitrarily large amounts of data during registration. This can potentially lead to DDoS attacks on the application database and,...

5.9CVSS7.1AI score0.00465EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:35 a.m.10 views

CVE-2023-41264

Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, leading to privilege escalation. This only occurs if the configuration omits the required restSettings.AuthorizedClientId and restSettings.AuthorizedSecret...

9.8CVSS7.2AI score0.01045EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:12 a.m.10 views

CVE-2023-24546

On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision could enable a malicious actor with network access to CloudVision to get broader access to telemetry and configuration data within the system than intended. This advisory impacts...

8.1CVSS6.7AI score0.00474EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:48 a.m.15 views

CVE-2022-22380

IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to spoof a trusted entity due to improperly validating certificates. IBM X-Force ID: 221957...

5CVSS6.3AI score0.00243EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/05/23 12:0 a.m.8 views

Wazuh 4.10.2

Wazuh is a free and open source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments. This is the source code release...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 8:37 p.m.11 views

CVE-2021-35037

Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises. An attacker may craft a URL that appears to be for a customer's Jamf Pro instance, but when clicked will forward a user to an arbitrary URL that may b...

6.1CVSS6.4AI score0.00587EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:17 p.m.5 views

CVE-2020-0656

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'...

5.4CVSS4.7AI score0.01475EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:8 p.m.12 views

CVE-2020-1063

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'...

5.4CVSS5.7AI score0.01414EPSS
SaveExploits0References1
NCSC
NCSC
added 2025/05/14 8:16 a.m.12 views

Vulnerability fixed in Ivanti Neurons for ITSM

Ivanti has fixed a vulnerability in Ivanti Neurons On-prem for ITSM Versions for 2023.4, 2024.2, and 2024.3 The vulnerability involves a critical authentication bypass that allows remote, unauthenticated attackers to gain administrative access. This could lead to unauthorized actions within the...

9.8CVSS9.4AI score0.02119EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/13 4:15 p.m.9 views

CVE-2025-22462

An authentication bypass in Ivanti Neurons for ITSM on-prem only before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote unauthenticated attacker to gain administrative access to the system...

9.8CVSS7.6AI score0.02119EPSS
SaveExploits0References1
Citrix
Citrix
added 2025/05/13 12:0 a.m.19 views

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 11

Package name: xms10.15.0.11117.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.11009.bin,xms10.15.0.10915.bin, xms10.15.0.10808.bin, xms10.15.0.10731.bin, xms10.15.0.10624.bin, xms10.15.0.10517.bin, xms10.15.0.10417.bin, xms10.15.0.10327.bin,...

7AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/05/08 12:0 a.m.5 views

Wazuh 4.12.0

Wazuh is a free and open source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments. This is the source code release...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.12 views

The vulnerability of the DNSServer software’s microprogramming system in Wi-Fi amplifiers, subscriber terminals, DSL/Ethernet CPE routers allows a perpetrator to execute arbitrary commands.

The vulnerability of the DNSServer software, a microprogramming-based system for Wi-Fi amplifiers, subscriber terminals, Fiber ONTs, and DSL/Ethernet CPEs exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability allows an attacker operating remotely to...

9CVSS5.8AI score0.0106EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
added 2025/04/23 12:0 a.m.11 views

Case Study: Fine-Tuning Small Language Models for Accurate and Private CWE Detection in Python Code

Large Language Models LLMs have demonstrated significant capabilities in understanding and analyzing code for security vulnerabilities, such as Common Weakness Enumerations CWEs. However, their reliance on cloud infrastructure and substantial computational requirements pose challenges for analyzi...

7AI score
SaveExploits0
Citrix
Citrix
added 2025/04/15 12:0 a.m.12 views

Latency using any Cloud application with 49" Inch Monitor ( using 5K resolution [5120*1440] )

After switching from On-Prem 1912 CU6 to Cloud 2203 CU3 - There is sluggish performance using a higher resolution monitors & increased in number of Monitors - Problem appears on 6 monitors with a resolution of 19201200 - Problemappears on 1x monitor with 49" curved monitor with a resolution of...

7AI score
SaveExploits0
Rows per page
Query Builder