Lucene search
+L

5882 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2014-0167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Nova EC2 API security group implementation in OpenStack Compute Nova 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies...

6CVSS5.7AI score0.01647EPSS
SaveExploits1References2
SUSE Linux
SUSE Linux
added 2025/03/03 8:45 a.m.4 views

Security update for gnutls

This update for gnutls fixes the following issues: CVE-2024-12243: quadratic complexity of DER input decoding in libtasn1 can lead to a DoS bsc1236974. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

5.3CVSS7.2AI score0.01266EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/03 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2011-4600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The networkReloadIptablesRules function in network/bridgedriver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvir...

5.9CVSS6.4AI score0.01783EPSS
SaveExploits0References2
NVD
NVD
added 2025/02/26 7:01 a.m.15 views

CVE-2022-49338

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules CT cleanup assumes that all tc rules were deleted first, and so is free to delete the CT shared resources e.g the draction fwdaction which is shared for all tuples. B...

5.5CVSS0.00218EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/02/26 2:10 a.m.18 views

CVE-2022-49338

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules CT cleanup assumes that all tc rules were deleted first, and so is free to delete the CT shared resources e.g the draction fwdaction which is shared for all tuples. B...

5.5CVSS5.6AI score0.00218EPSS
SaveExploits0
OSV
OSV
added 2025/02/26 2:10 a.m.16 views

CVE-2022-49338 net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules CT cleanup assumes that all tc rules were deleted first, and so is free to delete the CT shared resources e.g the draction fwdaction which is shared for all tuples. B...

5.3AI score
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2025/02/25 12:00 a.m.11 views

The vulnerability of the setPortForwardRules() function in TOTOLINK CP450 router microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the setPortForwardRules function in TOTOLINK CP450 router microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the comment parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

10CVSS5.7AI score0.00936EPSS
SaveExploits1References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/02/21 12:00 a.m.4 views

Cisco Secure Email Gateway Email Filter Bypass (cisco-sa-esa-mailpol-bypass-5nVcJZMw)

According to its self-reported version, Cisco Secure Email Gateway is affected by a vulnerability. - A vulnerability in the email filtering mechanism of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to bypass the configured rules and allow emails that should have been...

5.8CVSS5.8AI score0.00347EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/02/20 12:00 a.m.9 views

PT-2025-31369

Name of the Vulnerable Software and Affected Versions Moby versions prior to 28.0.0 Moby version 25.0.13 Description Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products...

5.2CVSS6.4AI score0.00155EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/02/19 12:00 a.m.6 views

Cisco Secure Email Gateway 访问控制错误漏洞

Cisco Secure Email Gateway is a secure email gateway software from the American company Cisco Cisco. An access control error vulnerability exists in Cisco Secure Email Gateway, which can be exploited by a remote attacker to submit a special email that can bypass the rules and conduct a malicious...

5.8CVSS6.8AI score0.00347EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/16 12:00 a.m.12 views

PT-2025-6884 · Pmweb · Pmweb

Name of the Vulnerable Software and Affected Versions: PMWeb version 7.2.0 Description: A problem has been detected in the Setting Handler component, leading to weak password requirements. The attack can be initiated remotely and has a high complexity, making exploitation difficult. The exploit h...

6.3CVSS7.1AI score0.01078EPSS
SaveExploits1References8
Fedora
Fedora
added 2025/02/15 2:37 a.m.15 views

[SECURITY] Fedora 41 Update: nginx-mod-fancyindex-0.5.2-10.fc41

The Fancy Index module makes possible the generation of file listings, like the built-in autoindex module does, but adding a touch of style. This is possible because the module allows a certain degree of customization of the generated content: Custom headers. Either local or stored remotely. Cust...

5.3CVSS6.4AI score0.02741EPSS
SaveExploits0
Fedora
Fedora
added 2025/02/15 2:23 a.m.20 views

[SECURITY] Fedora 40 Update: nginx-mod-fancyindex-0.5.2-8.fc40

The Fancy Index module makes possible the generation of file listings, like the built-in autoindex module does, but adding a touch of style. This is possible because the module allows a certain degree of customization of the generated content: Custom headers. Either local or stored remotely. Cust...

5.3CVSS6.4AI score0.02741EPSS
SaveExploits0
SUSE Linux
SUSE Linux
added 2025/02/14 7:19 a.m.7 views

Security update for SUSE Manager Client Tools

This update fixes the following issues: dracut-saltboot was updated to version 0.1.1728559936.c16d4fb: Added MAC based terminal naming option jscSUMA-314 golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 jscPED-11649: Security issues fixed: CVE-2024-51744: Updated...

9.4CVSS8.7AI score0.03995EPSS
SaveExploits3References62
SUSE Linux
SUSE Linux
added 2025/02/14 7:16 a.m.7 views

Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 jscPED-11649: Security issues fixed: CVE-2024-51744: Updated golang-jwt to version 5.0 to fix bad error handling bsc1232970 Highlights of other changes: Performance: Significant...

9.4CVSS8.1AI score0.03995EPSS
SaveExploits3References60
Vulnrichment
Vulnrichment
added 2025/02/14 4:53 a.m.9 views

CVE-2024-2240 Docker implementation in Brocade SANnav is missing Audit Rules.

Docker daemon in Brocade SANnav before SANnav 2.3.1b runs without auditing. The vulnerability could allow a remote authenticated attacker to execute various attacks...

8.6CVSS6.5AI score0.00495EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/14 4:53 a.m.70 views

CVE-2024-2240

CVE-2024-2240 refers to the Brocade SANnav Docker implementation missing audit rules. Connected advisories confirm that SANnav deployments prior to SANnav 2.3.1b run dockerd without auditing, enabling a remote authenticated attacker to perform various attacks. The published Red Hat/Broadcom SANna...

8.6CVSS6.5AI score0.00495EPSS
SaveExploits0References1Affected Software1
Rockylinux
Rockylinux
added 2025/02/13 8:34 p.m.38 views

tzdata bug fix and enhancement update

An update is available for tzdata. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tzdata packages contain data files with rules for various time zones. Bug...

7.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/13 12:38 a.m.14 views

CVE-2025-25524

Buffer overflow vulnerability in TOTOLink X6000R routers V9.4.0cu.652B20230116 due to the lack of length verification, which is related to the addition of Wi-Fi filtering rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary...

5.1CVSS7.7AI score0.00174EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/13 12:34 a.m.17 views

CVE-2025-25529

Buffer overflow vulnerability in Digital China DCBC Gateway 200-2.1.1 due to the lack of length verification, which is related to the configuration of static NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...

5.1CVSS7.7AI score0.00243EPSS
SaveExploits0References1
Rows per page
Query Builder