Lucene search
+L

18240 matches found

Snyk
Snyk
added 2025/10/15 5:39 p.m.6 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength via the SMTP process. An attacker can intercept sensitive information by performing a man-in-the-middle attack that prevents the use of TLS, causing data to be sent over an unencrypted connection...

8.2CVSS8.6AI score0.00671EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/10/15 5:39 p.m.8 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength via the SMTP process. An attacker can intercept sensitive information by performing a man-in-the-middle attack that prevents the use of TLS, causing data to be sent over an unencrypted connection...

8.2CVSS8.6AI score0.00671EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/10/15 4:43 p.m.9 views

CVE-2025-11498

An Improper Neutralization of Formula Elements in a CSV File vulnerability exists in System Diagnostics Manager SDM of B Automation Runtime versions before 6.4 enabling a remote attacker to inject formula data into a generated CSV file. The exploitation of this vulnerability requires the attacker...

6.1CVSS6.8AI score0.00297EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2025/10/15 4:34 p.m.18 views

Important: Red Hat Security Advisory: .NET 9.0 security update

An update for .NET 9.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

9.9CVSS7.5AI score0.65838EPSS
SaveExploits5References4
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/15 4:29 p.m.13 views

Security Bulletin: IBM Java Updates to Address Latest Vulnerabilities

Summary This update addresses recent vulnerabilities found in the Java Runtime Environment JRE. It addresses the following CVEs: CVE-2025-50106, CVE-2025-30749, CVE-2025-30761, and CVE-2025-30754. Vulnerability Details CVEID:CVE-2025-50106 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle...

8.1CVSS6.3AI score0.01058EPSS
SaveExploits1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/10/15 12:0 a.m.7 views

RHEL 8 : .NET 8.0 (RHSA-2025:18148)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:18148 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

9.9CVSS8.8AI score0.65838EPSS
SaveExploits5References8
AlmaLinux
AlmaLinux
added 2025/10/15 12:0 a.m.12 views

Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.121 and .NET Runtime...

9.9CVSS6.4AI score0.65838EPSS
SaveExploits5References8
Tenable Nessus
Tenable Nessus
added 2025/10/15 12:0 a.m.4 views

Amazon Linux 2023 : cuda-runtime-12 (ALAS2023NVIDIA-2025-212)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-212 advisory. NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to...

5.7CVSS5.4AI score0.00141EPSS
SaveExploits0References4
OSV
OSV
added 2025/10/15 12:0 a.m.6 views

ALSA-2025:18151 Important: .NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.111 and .NET Runtime...

9.9CVSS6.4AI score0.65838EPSS
SaveExploits5References8
BDU FSTEC
BDU FSTEC
added 2025/10/15 12:0 a.m.12 views

The vulnerability of the Runtime UI component of the Oracle Configurator application, a part of the Oracle E-Business Suite, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the Runtime UI component of the Oracle Configurator application, a part of the Oracle E-Business Suite, is related to improper authorization. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.4AI score0.97788EPSS
SaveExploits6References4Affected Software2
EUVD
EUVD
added 2025/10/14 9:30 p.m.9 views

EUVD-2022-55123

In the Linux kernel, the following vulnerability has been resolved: highmem: fix checks in kmaplocalschedin,out When CONFIGDEBUGKMAPLOCAL is enabled kmaplocalschedin,out check that even slots in the tsk-kmapctrl.pteval are unmapped. The slots are initialized with 0 value, but the check is done wi...

5.5CVSS5.3AI score0.00241EPSS
SaveExploits0References5
Snyk
Snyk
added 2025/10/14 8:32 p.m.8 views

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the interpretation of chunke...

9.9CVSS9.2AI score0.65838EPSS
SaveExploits5References2
Snyk
Snyk
added 2025/10/14 8:32 p.m.7 views

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.linux-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the interpretation of...

9.9CVSS9.2AI score0.65838EPSS
SaveExploits5References2
Snyk
Snyk
added 2025/10/14 8:32 p.m.10 views

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.win-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the interpretation of...

9.9CVSS9.2AI score0.65838EPSS
SaveExploits5References2
Snyk
Snyk
added 2025/10/14 8:32 p.m.11 views

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via the interpretation of chunked HTTP requests. An attacker can bypass security restrictions and potentially access or manipulate sensitive data by sending specially crafted HTTP requests that exploit...

9.9CVSS9.2AI score0.65838EPSS
SaveExploits5References2
Snyk
Snyk
added 2025/10/14 8:32 p.m.11 views

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the interpretation ...

9.9CVSS9.2AI score0.65838EPSS
SaveExploits5References2
Snyk
Snyk
added 2025/10/14 8:32 p.m.7 views

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.win-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the interpretation of chunke...

9.9CVSS9.2AI score0.65838EPSS
SaveExploits5References2
Snyk
Snyk
added 2025/10/14 8:32 p.m.5 views

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.win-x86 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the interpretation of chunke...

9.9CVSS9.2AI score0.65838EPSS
SaveExploits5References2
Snyk
Snyk
added 2025/10/14 8:32 p.m.8 views

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.linux-musl-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the interpretation of...

9.9CVSS9.2AI score0.65838EPSS
SaveExploits5References2
Snyk
Snyk
added 2025/10/14 8:32 p.m.9 views

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.linux-musl-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the interpretation of...

9.9CVSS9.2AI score0.65838EPSS
SaveExploits5References2
Rows per page
Query Builder