Lucene search
+L

14248 matches found

CNVD
CNVD
added 2025/08/18 12:00 a.m.8 views

Kenwood DMX958XR Command Injection Vulnerability (CNVD-2025-20298)

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

6.8CVSS8.1AI score0.00929EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/08/18 12:00 a.m.6 views

Kenwood DMX958XR Command Injection Vulnerability (CNVD-2025-20421)

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

6.8CVSS8.1AI score0.009EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/08/18 12:00 a.m.5 views

Kenwood DMX958XR Command Injection Vulnerability (CNVD-2025-20297)

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

6.8CVSS8.1AI score0.00668EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/08/18 12:00 a.m.9 views

Kenwood DMX958XR Command Injection Vulnerability

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

6.8CVSS8.1AI score0.009EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2022-41974

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users...

7.8CVSS7.2AI score0.00677EPSS
SaveExploits5References2
CNVD
CNVD
added 2025/08/18 12:00 a.m.8 views

Kenwood DMX958XR Command Injection Vulnerability (CNVD-2025-20302)

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

6.8CVSS8.1AI score0.00929EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/08/18 12:00 a.m.5 views

Kenwood DMX958XR JKWifiService Function OS Command Injection Vulnerability

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. An operating system command injection vulnerability exists in the Kenwood DMX958XR JKWifiService function, which can be exploited by an attacker to execute code in a root context...

6.8CVSS8.1AI score0.00668EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2021-20188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. This flaw can be abuse...

7CVSS6.7AI score0.00261EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/18 12:00 a.m.27 views

CVE-2025-55584

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain insecure credentials for the telnet service and root account...

0.00287EPSS
SaveExploits1References1
Exploit DB
Exploit DB
added 2025/08/18 12:00 a.m.661 views

PHPMyAdmin 3.0 - Bruteforce Login Bypass

""" Exploit-Title: PHPMyAdmin 3.0 - Bruteforce Login Bypass Author: Nikola Markovic [email protected] Date: 2023 Google-Dork: intext: phpMyAdmin Vendor: https://www.phpmyadmin.net/ Version: 3.0 & 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 Tested on: win/linux/unix Python-Version: 3.0 CVE...

5CVSS8.3AI score0.0979EPSS
SaveExploits2
OSV
OSV
added 2025/08/17 11:15 p.m.13 views

CVE-2025-7342

A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nutanix or VMware OVA providers. These credentials, which allow root access, are disabled at the conclusion of the build. Kubernetes clusters...

7.5CVSS5.8AI score0.00349EPSS
SaveExploits0References3
NVD
NVD
added 2025/08/17 11:15 p.m.14 views

CVE-2025-7342

A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nutanix or VMware OVA providers. These credentials, which allow root access, are disabled at the conclusion of the build. Kubernetes clusters...

7.5CVSS0.00349EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/08/17 11:03 p.m.9 views

CVE-2025-7342 VM images built with Kubernetes Image Builder Nutanix or OVA providers use default credentials for Windows images if user did not override

A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nutanix or VMware OVA providers. These credentials, which allow root access, are disabled at the conclusion of the build. Kubernetes clusters...

7.5CVSS6.5AI score0.00349EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/17 11:03 p.m.21 views

CVE-2025-7342 VM images built with Kubernetes Image Builder Nutanix or OVA providers use default credentials for Windows images if user did not override

A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nutanix or VMware OVA providers. These credentials, which allow root access, are disabled at the conclusion of the build. Kubernetes clusters...

7.5CVSS0.00349EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/17 11:03 p.m.60 views

CVE-2025-7342

CVE-2025-7342 affects the Kubernetes Image Builder when using Nutanix or VMware OVA providers. During Windows image builds, default credentials are enabled, allowing root access. The credentials are disabled after the build. Affected clusters are those that use VM images created via the Image Bui...

7.5CVSS6.5AI score0.00349EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/17 12:00 a.m.14 views

Kubernetes 安全漏洞

Kubernetes K8s is an open source system for automating the deployment, scaling, and management of containerized applications from the Kubernetes open source. A security vulnerability exists in Kubernetes K8s that stems from the default credentials enablement, which could lead to unauthorized root...

7.5CVSS6.8AI score0.00349EPSS
SaveExploits0References3
NVD
NVD
added 2025/08/14 5:15 p.m.8 views

CVE-2025-20238

A vulnerability in Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. To exploit this...

6CVSS0.00146EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/14 5:15 p.m.10 views

CVE-2025-20220

A vulnerability in the CLI of Cisco Secure Firewall Management Center FMC Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. This vulnerability is due to improper inp...

6CVSS0.00173EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/08/14 4:40 p.m.3 views

CVE-2025-20220

A vulnerability in the CLI of Cisco Secure Firewall Management Center FMC Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. This vulnerability is due to improper inp...

6CVSS6.1AI score0.00173EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2025/08/14 4:40 p.m.19 views

CVE-2025-20220

A vulnerability in the CLI of Cisco Secure Firewall Management Center FMC Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. This vulnerability is due to improper inp...

6CVSS0.00173EPSS
SaveExploits0References1
Rows per page
Query Builder