Lucene search
+L

2420 matches found

Vulnrichment
Vulnrichment
added 2025/09/09 9:2 p.m.3 views

CVE-2025-23342

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to a privileged account . A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure and data tampering...

8.2CVSS6.7AI score0.00297EPSS
SaveExploits0References3
NVD
NVD
added 2025/09/09 2:15 a.m.5 views

CVE-2025-42958

Due to a missing authentication check in the SAP NetWeaver application on IBM i-series, the application allows high privileged unauthorized users to read, modify, or delete sensitive information, as well as access administrative or privileged functionalities. This results in a high impact on the...

9.1CVSS0.00663EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.7 views

PT-2025-36563

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver affected versions not specified Description: A missing authentication check in the SAP NetWeaver application on IBM i-series allows unauthorized users with high privileges to read, modify, or delete sensitive information, and...

9.1CVSS6.2AI score0.00663EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.14 views

PT-2025-36970

Name of the Vulnerable Software and Affected Versions: NVIDIA NVDebug tool affected versions not specified Description: The NVIDIA NVDebug tool contains an issue that may allow an actor to gain access to a privileged account. A successful exploit may lead to code execution, denial of service,...

8.2CVSS6.8AI score0.00297EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/09/08 5:31 p.m.7 views

CVE-2023-31325

Improper isolation of shared resources on System-on-a-chip SOC could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in loss of confidentiality and integrity...

7.2CVSS6.6AI score0.00133EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/05 7:5 a.m.11 views

CVE-2025-48395

An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI. This security issue has been fixed in the latest version of NMC G2 which is available on the Eaton download center...

4.7CVSS0.00268EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/05 7:5 a.m.4 views

CVE-2025-48395

An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI. This security issue has been fixed in the latest version of NMC G2 which is available on the Eaton download center...

4.7CVSS6AI score0.00268EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/05 12:34 a.m.14 views

CVE-2025-56689

One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password OTP/Multifactor Authentication MFA bypass using response manipulation. An attacker who intercepts or captures a valid OTP response can bypass the OTP verification step by replaying th...

4.6CVSS7AI score0.01269EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/03 5:15 p.m.6 views

CVE-2025-56689

One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password OTP/Multifactor Authentication MFA bypass using response manipulation. An attacker who intercepts or captures a valid OTP response can bypass the OTP verification step by replaying th...

4.6CVSS0.01269EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/03 2:15 p.m.7 views

CVE-2025-47421

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in CRESTRON TOUCHSCREENS x70 allows Argument Injection.This issue affects TOUCHSCREENS x70: from 3.001.0031.001 through 3.001.0034.001. A specially crafted SCP command sent via SSH login string can lead...

8.6CVSS0.00342EPSS
SaveExploits0References3
CVE
CVE
added 2025/09/03 12:0 a.m.33 views

CVE-2025-56689

Summary: CVE-2025-56689 affects One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903. The issue is an OTP/MFA bypass via response manipulation, where an attacker who captures or intercepts a valid OTP response could replay it to bypass OTP verification and gain access to...

4.6CVSS6.7AI score0.01269EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2025/09/01 12:0 a.m.12 views

ASB-A-397438392

In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation...

7.1CVSS6.5AI score0.00088EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/30 6:17 p.m.7 views

CVE-2025-53118

An authentication bypass vulnerability exists which allows an unauthenticated attacker to control administrator backup functions, leading to compromise of passwords, secrets, and application session tokens stored by the Unified PAM...

9.8CVSS7.1AI score0.2946EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2020-14881

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily...

6CVSS6.6AI score0.00723EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2020-14700

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to...

5.3CVSS6.8AI score0.00543EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-2120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.18. Easily...

6CVSS6.7AI score0.00475EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/25 4:17 p.m.10 views

CVE-2025-6737 Securden Unified PAM Shared SSH Key and Cloud Infrastructure

Securden’s Unified PAM Remote Vendor Gateway access portal shares infrastructure and access tokens across multiple tenants. A malicious actor can obtain authentication material and access the gateway server with low-privilege permissions...

7.2CVSS0.00259EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/25 4:17 p.m.3 views

CVE-2025-6737 Securden Unified PAM Shared SSH Key and Cloud Infrastructure

Securden’s Unified PAM Remote Vendor Gateway access portal shares infrastructure and access tokens across multiple tenants. A malicious actor can obtain authentication material and access the gateway server with low-privilege permissions...

7.2CVSS7.5AI score0.00259EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/25 4:15 p.m.7 views

CVE-2025-53118

An authentication bypass vulnerability exists which allows an unauthenticated attacker to control administrator backup functions, leading to compromise of passwords, secrets, and application session tokens stored by the Unified PAM...

9.8CVSS0.2946EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/25 4:11 p.m.19 views

CVE-2025-53120

CVE-2025-53120 concerns Securden Unified PAM. A path-traversal flaw in the unauthenticated file-upload feature lets an attacker craft arbitrary file names/paths to place binaries or scripts into the server’s configuration and web root directories, achieving remote code execution on the Unified PA...

9.4CVSS7.6AI score0.09239EPSS
SaveExploits0References1
Rows per page
Query Builder