Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2025/10/31 10:7 p.m.3 views

CVE-2023-7325

Anheng Mingyu Operation and Maintenance Audit and Risk Control System up to 2023-08-10 contains a server-side request forgery SSRF vulnerability in the xmlrpc.sock handler. The product accepts specially crafted XML-RPC requests that can be used to instruct the server to connect to internal unix...

9.3CVSS7.1AI score0.00059EPSS
Exploits0References1
NVD
NVD
added 2025/10/30 10:15 p.m.5 views

CVE-2023-7325

Anheng Mingyu Operation and Maintenance Audit and Risk Control System up to 2023-08-10 contains a server-side request forgery SSRF vulnerability in the xmlrpc.sock handler. The product accepts specially crafted XML-RPC requests that can be used to instruct the server to connect to internal unix...

9.3CVSS0.00059EPSS
Exploits0References3
VulnCheck KEV
VulnCheck KEV
added 2025/10/30 12:0 a.m.2 views

VulnCheck KEV: CVE-2023-7325

Anheng Mingyu Operation and Maintenance Audit and Risk Control System up to 2023-08-10 contains a server-side request forgery SSRF vulnerability in the xmlrpc.sock handler. The product accepts specially crafted XML-RPC requests that can be used to instruct the server to connect to internal unix...

9.3CVSS5.9AI score0.00059EPSS
In wildExploits0References100
OSV
OSV
added 2024/12/04 2:15 a.m.0 views

CVE-2024-42456

A vulnerability in Veeam Backup & Replication platform allows a low-privileged user with a specific role to exploit a method that updates critical configuration settings, such as modifying the trusted client certificate used for authentication on a specific port. This can result in unauthorized...

8.8CVSS5.8AI score0.0029EPSS
Exploits0References1
CVE
CVE
added 2024/12/04 1:6 a.m.65 views

CVE-2024-42456

CVE-2024-42456 affects Veeam Backup & Replication . A low-privileged user with a specific role can exploit a method with insufficient permission checks to modify critical configuration settings (e.g., trusted client certificate on a port), potentially allowing calls to privileged methods and init...

8.8CVSS7.1AI score0.0029EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/04 1:6 a.m.18 views

CVE-2024-42456

A vulnerability in Veeam Backup & Replication platform allows a low-privileged user with a specific role to exploit a method that updates critical configuration settings, such as modifying the trusted client certificate used for authentication on a specific port. This can result in unauthorized...

8.8CVSS7.1AI score0.0029EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/04 1:6 a.m.19 views

CVE-2024-42456

A vulnerability in Veeam Backup & Replication platform allows a low-privileged user with a specific role to exploit a method that updates critical configuration settings, such as modifying the trusted client certificate used for authentication on a specific port. This can result in unauthorized...

8.8CVSS0.0029EPSS
Exploits0References1
0day.today
0day.today
added 2017/02/06 12:0 a.m.69 views

Oracle Java AtomicReferenceFieldUpdater Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS9.5AI score0.01126EPSS
Exploits1
0day.today
0day.today
added 2017/02/06 12:0 a.m.51 views

Oracle Java Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the creation of an...

6.8CVSS9.5AI score0.00645EPSS
Exploits1
Zero Day Initiative
Zero Day Initiative
added 2017/01/24 12:0 a.m.49 views

Oracle Java AtomicReferenceFieldUpdater Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS3.3AI score0.01126EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2017/01/24 12:0 a.m.91 views

Oracle Java Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the creation of an...

6.8CVSS4.5AI score0.00645EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2013/03/11 6:48 p.m.0 views

OpenJDK: MethodFinder insufficient checks for cached results (Beans, 7200493)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans. NOTE: the previous information is from the February 20...

7.6CVSS7.3AI score0.08026EPSS
Exploits0References5
Rows per page
Query Builder