Lucene search
K

180 matches found

Positive Technologies
Positive Technologies
added 2025/09/01 12:0 a.m.2 views

PT-2025-50083

Name of the Vulnerable Software and Affected Versions Qualcomm embedded platform firmware affected versions not specified Description A flaw exists in the Qualcomm embedded platform firmware related to improper pointer dereferencing during IOCTL processing. This issue can lead to a denial of...

7.8CVSS6.4AI score0.00016EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2005-0406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of...

5.5CVSS5.5AI score0.00131EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2011-3170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gifreadlzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote...

5.1CVSS6.3AI score0.09148EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/08/14 12:0 a.m.4 views

PT-2025-33313

Name of the Vulnerable Software and Affected Versions: Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software affected versions not specified Description: A flaw in the SSL/TLS certificate processing can allow a remote, unauthenticated...

8.6CVSS6.5AI score0.0013EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2025/08/12 12:0 a.m.2 views

The vulnerability of the strongSwan microprogramming software firewall solution developed by Ruijie RG-EG306MG-P allows a intruder to disclose protected information.

The vulnerability of the strongSwan microprogramming software firewall solution from Ruijie RG-EG306MG-P lies in the lack of encryption for confidential data during the processing of the parameter “idontcareaboutsecurityanduseaggressivemodepsk”. Exploiting this vulnerability can allow a remote...

3.7CVSS5.5AI score0.00069EPSS
Exploits0References5
OSV
OSV
added 2025/06/16 10:16 p.m.1 views

CVE-2025-43200

This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed...

4.2CVSS5.8AI score0.00881EPSS
Exploits0References11
Snyk
Snyk
added 2025/06/16 5:16 p.m.0 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization when validating SSH host certificate signatures. Due to a related issue in the processing of IsUserAuthority and IsHostAuthority by x/crypto/ssh, an attacker can gain unauthorized access by providing a signed SSH...

9.8CVSS7AI score0.15302EPSS
Exploits0References2
OSV
OSV
added 2025/06/09 8:15 p.m.2 views

AZL-63759 CVE-2025-5916 affecting package cmake for versions less than 3.30.3-8

A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive WARC file that claims to have more than INT64MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow,...

5.6CVSS6.3AI score0.00102EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/06/02 12:0 a.m.2 views

The vulnerability of the h11 library, related to deficiencies in HTTP request processing, allows attackers to influence the confidentiality and integrity of the protected information.

The vulnerability of the h11 library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of the protected information...

9.4CVSS7.2AI score0.00202EPSS
Exploits0References7Affected Software4
RedhatCVE
RedhatCVE
added 2025/05/23 12:40 a.m.4 views

CVE-2022-41783

tdpServer of TP-Link RE300 V1 improperly processes its input, which may allow an attacker to cause a denial-of-service DoS condition of the product's OneMesh function...

5.5CVSS6.8AI score0.00054EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2025/05/07 12:0 a.m.6 views

Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2025-1419)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.8AI score0.01227EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:0 a.m.2 views

The vulnerability of the Apache Traffic Server web server, related to defects in the processing of HTTP request headers, allows attackers to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the Apache Traffic Server web server is related to deficiencies in the processing of HTTP request headers. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely HTTP Request Smuggling attack...

6.5CVSS6.5AI score0.00292EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2018-14633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw was found in the chapservercomputemd5 function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI...

8.3CVSS7.5AI score0.07301EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:0 a.m.10 views

Azure Linux 3.0 Security Update: ceph (CVE-2022-3854)

The version of ceph installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3854 advisory. - A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL...

6.5CVSS6.2AI score0.00307EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/27 12:0 a.m.2 views

Apple iOS和iPadOS 安全漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS version 18.3 and iPadOS version 18.3, which stems from processin...

5.5CVSS8.8AI score0.00016EPSS
Exploits0References9
CNNVD
CNNVD
added 2024/11/29 12:0 a.m.1 views

EasyTax 安全漏洞

EasyTax is a taxpayer tax filing software organized by AG Switzerland. A security vulnerability exists in EasyTax 2023 version 1.2 and earlier, which stems from an XML External Entity XXE vulnerability on multiple platforms, including Windows, Linux, and macOS...

4.6CVSS6.9AI score0.0005EPSS
Exploits1References1
OSV
OSV
added 2024/11/18 4:15 p.m.3 views

CVE-2020-3548

A vulnerability in the Transport Layer Security TLS protocol implementation of Cisco AsyncOS software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause high CPU usage on an affected device, resulting in a denial of service DoS condition. The...

7.5CVSS5.8AI score0.0043EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/25 12:0 a.m.2 views

PT-2024-30577 · Sharp +1 · Sharp Mfps +1

Name of the Vulnerable Software and Affected Versions: Sharp and Toshiba Tec MFPs affected versions not specified Description: The issue is related to the improper processing of HTTP request headers, resulting in an Out-of-bounds Read. Crafted HTTP requests may cause the affected products to cras...

7.5CVSS6.8AI score0.00478EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2024/09/18 12:0 a.m.1 views

The vulnerability of the Pandora FMS system’s monitoring and management interface allows a perpetrator to execute arbitrary SQL queries and gain unauthorized access to protected information.

The vulnerability of the Pandora FMS system’s monitoring and management interface relates to the improper processing of SQL query headers. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries and gain unauthorized access to protected information...

10CVSS6AI score0.00393EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/09/16 12:0 a.m.3 views

PT-2024-31010 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7 iOS versions prior to 17.7 iPadOS versions prior to 17.7 visionOS versions prior to 2 watchOS versions prior to 11 macOS Sequoia versions prior to 15 iOS versions prior to 18 iPadOS versions prior to 18 macOS Sono...

5.5CVSS7.2AI score0.00321EPSS
Exploits0References14
Rows per page
Query Builder