Lucene search
+L

661 matches found

Github Security Blog
Github Security Blog
added 2025/12/26 6:26 p.m.25 views

Self-hosted n8n has Legacy Code node that enables arbitrary file read/write

Impact In self-hosted n8n instances where the Code node runs in legacy non-task-runner JavaScript execution mode, authenticated users with workflow editing access can invoke internal helper functions from within the Code node. This allows a workflow editor to perform actions on the n8n host with...

7.1CVSS6.9AI score0.00252EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/10 8:36 a.m.7 views

CVE-2025-41746

An XSS vulnerability in pxcportSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-lev...

7.1CVSS6.3AI score0.09765EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.7 views

EUVD-2025-201896

An XSS vulnerability in pxcportSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-lev...

7.1CVSS5.8AI score0.09765EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/09 4:17 p.m.12 views

CVE-2025-41746

An XSS vulnerability in pxcportSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-lev...

7.1CVSS5.8AI score0.09765EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/12/08 12:00 a.m.7 views

The vulnerability of the `sndctl LedSysfs_Add()` function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, allows a hacker to cause a service failure.

The vulnerability of the sndctl LedSysfsAdd function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

5.5CVSS6.7AI score0.0022EPSS
SaveExploits0References10Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/05 1:37 p.m.8 views

Security Bulletin: Security Configuration vulnerability in WebSphere Application Server Liberty affects IBM Spectrum Protect Operations Center (CVE-2024-56339)

Summary IBM WebSphere Application Server Liberty is vulnerable to a security configuration attack which can affect IBM Spectrum Protect formerly Tivoli Storage Manager Operations Center. Vulnerability Details CVEID:CVE-2024-56339 DESCRIPTION: IBM WebSphere Application Server 9.0 and WebSphere...

7.5CVSS6AI score0.004EPSS
SaveExploits0Affected Software1
CVE
CVE
added 2025/12/04 9:43 p.m.31 views

CVE-2025-12195

CVE-2025-12195 describes an out-of-bounds write vulnerability in the WatchGuard Fireware OS CLI. An authenticated privileged user can trigger arbitrary code execution by sending specially crafted IPSec configuration CLI commands. Affected versions span Fireware OS 11.0–11.12.4+541730, 12.0–12.11....

8.6CVSS7.8AI score0.00675EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/12/03 12:00 a.m.9 views

The vulnerability of the tcf_block_playback_offloads() function in the net/sched/cls_api.c module of the network/sched subsystem of the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the tcfblockplaybackoffloads function in the net/sched/clsapi.c module of the net/sched subsystem of the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to access protected information or cause service...

7.1CVSS6.7AI score0.00238EPSS
SaveExploits0References13Affected Software4
EUVD
EUVD
added 2025/11/08 12:31 a.m.11 views

EUVD-2025-38342

Improper Authorization in Elastic Cloud Enterprise can lead to Privilege Escalation where the built-in readonly user can call APIs that should not be allowed. The list of APIs that are affected by this issue is: post:/platform/configuration/security/service-accounts...

8.8CVSS6.3AI score0.00375EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/31 7:39 p.m.8 views

Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server Liberty affect IBM InfoSphere Information Server

Summary There are multiple vulnerabilities in IBM® WebSphere Application Server Liberty that is used by IBM InfoSphere Information Server. These are addressed. Vulnerability Details CVEID:CVE-2025-36047 DESCRIPTION: IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable ...

7.5CVSS7AI score0.67821EPSS
SaveExploits1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2017-16907

Malware in sbrugna...

6.3CVSS6.5AI score0.00344EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-9899

Malware in sbrugna...

4.6CVSS4.7AI score0.00318EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2002-2028

Malware in sbrugna...

7.5CVSS6.4AI score0.0159EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2012-2195

Malware in sbrugna...

7.5CVSS7.6AI score0.01693EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2016-8033

Malware in sbrugna...

6.9CVSS6.8AI score0.00378EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2020-19460

Malware in sbrugna...

5.5CVSS4.8AI score0.00533EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2020-26446

Malware in sbrugna...

5.5CVSS5.3AI score0.00465EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-12662

Malware in sbrugna...

5.3CVSS5.6AI score0.00278EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2019-13288

Malware in sbrugna...

5.5CVSS5.6AI score0.00231EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-0261

Malware in sbrugna...

6.5CVSS6.4AI score0.00625EPSS
SaveExploits1References4
Rows per page
Query Builder