Lucene search
+L

6 matches found

Wiz blog
Wiz blog
•added 2026/05/12 1:24 p.m.•50 views

Introducing Wiz Audit History: Track Every Change Across your Environment

Wiz Audit History is now GA, providing a continuous, cross-cloud timeline of changes to resource configurations and findings to accelerate incident response and simplify compliance...

5.8AI score
SaveExploits0
CVE
CVE
•added 2025/09/27 12:51 a.m.•56 views

CVE-2025-59932

Summary: CVE-2025-59932 affects Flag Forge (FlagForgeCTF). From versions 2.0.0 up to before 2.3.1, the /api/resources endpoint allowed POST and DELETE requests without proper authentication or authorization, enabling unauthorized users to create, modify, or delete resources. The issue has been fi...

8.6CVSS5.7AI score0.00367EPSS
SaveExploits0References1Affected Software1
osv_azl
osv_azl
•added 2025/09/16 1:15 p.m.•27 views

AZL-71206 CVE-2025-39810 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix memory corruption when FW resources change during ifdown bnxtsetdfltrings assumes that it is always called before any TC has been created. So it doesn't take bp-numtc into account and assumes that it is always 0 or 1...

7.8CVSS6.7AI score0.00199EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/02/08 12:00 a.m.•26 views

PT-2023-19941 · Wings · Wings

Name of the Vulnerable Software and Affected Versions: Wings versions prior to v1.11.3 Wings versions prior to v1.7.3 Description: The vulnerability in Wings allows attackers to create new files and directory structures on the host system, potentially enabling them to change resource allocations,...

8.8CVSS6.8AI score0.00682EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2023/01/09 12:00 a.m.•18 views

PT-2023-12724 · Weave · Weave Gitops

Name of the Vulnerable Software and Affected Versions: Weave GitOps versions prior to v0.12.0 Description: The communication between GitOps Run and the local S3 bucket is not encrypted, allowing privileged users or processes to tap the local traffic and gain information permitting access to the S...

7.3CVSS6.9AI score0.0025EPSS
SaveExploits0References10
attackerkb
attackerkb
•added 2020/03/26 3:15 p.m.•13 views

CVE-2020-7944

In Continuous Delivery for Puppet Enterprise CD4PE before 3.4.0, changes to resources or classes containing Sensitive parameters can result in the Sensitive parameters ending up in the impact analysis report...

7.7CVSS7.4AI score0.00859EPSS
SaveExploits0References2
Rows per page
Query Builder