Lucene search
+L

505 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2025/05/12 3:48 p.m.•15 views

Security Bulletin: Denial of Service Vulnerability in IBM 4769 Developers Toolkit (CVE-2025-3632)

Summary A vulnerability has been discovered in the IBM 4769 Developers Toolkit that could allow a remote attacker to cause a denial of service against the hardware security module HSM. Vulnerability Details CVEID:CVE-2025-3632 DESCRIPTION: IBM 4769 Developers Toolkit could allow a remote attacker...

7.5CVSS6.9AI score0.00477EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/12 12:00 a.m.•3 views

CVE-2025-3632: Memory Allocation with Excessive Size Value

IBM 4769 Developers Toolkit 7.0.0 through 7.5.52 could allow a remote attacker to cause a denial of service in the Hardware Security Module HSM due to improper memory allocation of an excessive size...

7.5CVSS5.9AI score0.00477EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/02 4:15 p.m.•18 views

UBUNTU-CVE-2023-53055

In the Linux kernel, the following vulnerability has been resolved: fscrypt: destroy keyring after securitysbdelete fscryptdestroykeyring must be called after all potentially-encrypted inodes were evicted; otherwise it cannot safely destroy the keyring. Since inodes that are in-use by the Landloc...

5.5CVSS6AI score0.00202EPSS
SaveExploits0References7
OSV
OSV
•added 2025/05/02 3:55 p.m.•21 views

CVE-2023-53055 fscrypt: destroy keyring after security_sb_delete()

In the Linux kernel, the following vulnerability has been resolved: fscrypt: destroy keyring after securitysbdelete fscryptdestroykeyring must be called after all potentially-encrypted inodes were evicted; otherwise it cannot safely destroy the keyring. Since inodes that are in-use by the Landloc...

5AI score
SaveExploits0References7
CNNVD
CNNVD
•added 2025/04/30 12:00 a.m.•19 views

Tesla Model 3 输入验证错误漏洞

The Tesla Model 3 is an electric vehicle from Tesla USA. The Tesla Model 3 suffers from an input validation error vulnerability that stems from an integer overflow in the VCSEC module and could lead to remote code execution...

7.5CVSS8.2AI score0.00383EPSS
SaveExploits2References1
OSV
OSV
•added 2025/04/07 4:15 a.m.•13 views

CVE-2024-58127

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

9.1CVSS5.8AI score0.00212EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/07 3:48 a.m.•48 views

CVE-2024-58127

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

8.4CVSS0.00212EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/04/03 12:00 a.m.•18 views

The vulnerability of the IBM Common Cryptographic Architecture (CCA) lies in the writing beyond the buffer boundaries in memory, which allows a attacker to trigger a failure in the operation of the Hardware Security Module (HSM).

The vulnerability of the IBM Common Cryptographic Architecture CCA lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a failure in the Hardware Security Module HSM’s security hardware module by usin...

6.8CVSS5.7AI score0.00384EPSS
SaveExploits0References3Affected Software2
Packet Storm
Packet Storm
•added 2025/04/03 12:00 a.m.•565 views

📄 Tomcat Partial PUT Java Deserialization

This Metasploit module exploits a Java deserialization vulnerability in Apache Tomcats session restoration functionality that can be exploited with a partial HTTP PUT request to place an attacker controlled deserialization payload in the tomcatrootdir/webapps/ROOT/ directory. For the exploit to...

9.8CVSS8.1AI score0.99927EPSS
SaveExploits51
NVD
NVD
•added 2025/03/31 7:15 a.m.•21 views

CVE-2025-3019

KNIME Business Hub is affected by several cross-site scripting vulnerabilities in its web pages. If a user clicks on a malicious link or opens a malicious web page, arbitrary Java Script may be executed with this user's permissions. This can lead to information loss and/or modification of existin...

7.2CVSS0.00266EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/31 6:49 a.m.•10 views

CVE-2025-3019 Cross-site scripting vulnerabilities in KNIME Business Hub web pages

KNIME Business Hub is affected by several cross-site scripting vulnerabilities in its web pages. If a user clicks on a malicious link or opens a malicious web page, arbitrary Java Script may be executed with this user's permissions. This can lead to information loss and/or modification of existin...

5.3CVSS6.1AI score0.00266EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•16 views

PT-2025-13669 · Unknown +1 · Nuxt-Security +1

Name of the Vulnerable Software and Affected Versions: KNIME Business Hub versions prior to 1.12.4 KNIME Business Hub versions prior to 1.13.3 Description: The issue is caused by a bug in the widely used nuxt-security module, which leads to cross-site scripting vulnerabilities in KNIME Business...

5.3CVSS5.9AI score0.00266EPSS
SaveExploits0References10
Metasploit
Metasploit
•added 2025/03/27 6:50 p.m.•517 views

SonicWall HTTP Login Scanner

This module adds HTTP Login scanning for SonicWall NSv. It allows scanning both admin and user accounts. Module Options msf use auxiliary/scanner/sonicwall/sonicwalllogin msf auxiliarysonicwalllogin show actions ...actions... msf auxiliarysonicwalllogin set ACTION msf auxiliarysonicwalllogin show...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/03/13 5:37 p.m.•16 views

CVE-2024-49823

IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an authenticated user to cause a denial of service in the Hardware Security Module HSM using a specially crafted sequence of valid requests...

6.5CVSS6.4AI score0.00384EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/12 12:00 a.m.•17 views

PT-2025-11057 · Google · Android

Name of the Vulnerable Software and Affected Versions: main.cpp affected versions not specified Description: A logic error in the code within main of main.cpp may allow bypassing SELinux. This could lead to local escalation of privilege without requiring additional execution privileges or user...

8.8CVSS7.5AI score0.00302EPSS
SaveExploits0References5
OSV
OSV
•added 2025/03/11 1:15 a.m.•8 views

CVE-2024-49823

IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an authenticated user to cause a denial of service in the Hardware Security Module HSM using a specially crafted sequence of valid requests...

6.5CVSS5.8AI score
SaveExploits0References1
NVD
NVD
•added 2025/03/11 1:15 a.m.•21 views

CVE-2024-49823

IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an authenticated user to cause a denial of service in the Hardware Security Module HSM using a specially crafted sequence of valid requests...

6.5CVSS0.00384EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/11 12:48 a.m.•74 views

CVE-2024-49823

IBM Common Cryptographic Architecture (CCA) vulnerability CVE-2024-49823 affects CCA versions 7.0.0–7.5.51. An authenticated user could cause a denial of service in the IBM Hardware Security Module (HSM) by sending a specially crafted sequence of valid requests. The bulletin lists CWE-787 (Out-of...

6.5CVSS6.7AI score0.00384EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/03/11 12:48 a.m.•44 views

CVE-2024-49823 IBM Common Cryptographic Architecture denial of service

IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an authenticated user to cause a denial of service in the Hardware Security Module HSM using a specially crafted sequence of valid requests...

6.5CVSS0.00384EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/11 12:48 a.m.•15 views

CVE-2024-49823 IBM Common Cryptographic Architecture denial of service

IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an authenticated user to cause a denial of service in the Hardware Security Module HSM using a specially crafted sequence of valid requests...

6.5CVSS6.7AI score0.00384EPSS
SaveExploits0References1
Rows per page
Query Builder