Lucene search
+L

26769 matches found

CVE
CVE
added 2026/01/16 12:12 a.m.25 views

CVE-2025-64729

The CVE-2025-64729 entry concerns AVEVA Process Optimization. Affected software: Process Optimization with user-authenticated access (OS Standard User). The documented vulnerability allows an authenticated attacker to tamper with Process Optimization project files, embed code, and escalate privil...

8.6CVSS6.5AI score0.00174EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/01/16 12:12 a.m.41 views

CVE-2025-64729 AVEVA Process Optimization Missing Authorization

The vulnerability, if exploited, could allow an authenticated miscreant OS Standard User to tamper with Process Optimization project files, embed code, and escalate their privileges to the identity of a victim user who subsequently interacts with the project files...

8.6CVSS0.00174EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
added 2026/01/16 12:00 a.m.10 views

Shaping a Quantum-Resistant Future: Strategies for Post-Quantum PKI

As the quantum computing era approaches, securing classical cryptographic protocols becomes imperative. Public key cryptography is widely used for signature and key exchange but it is the type of cryptography more threatened by quantum computing. Its application typically requires support via a...

5.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.7 views

MiracleLinux 4 : jakarta-taglibs-standard-1.1.1-11.7.0.1.AXS4 (AXSA:2015-477:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2015-477:01 advisory. This package contains Jakarta Taglibs's open-source implementation of the JSP Standard Tag Library JSTL, version 1.1. JSTL is a standard under the Java...

7.5CVSS7AI score0.1326EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.10 views

MiracleLinux 4 : java-1.7.0-openjdk-1.7.0.131-2.6.9.0.AXS4 (AXSA:2017-1294:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1294:01 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2016-5546 Vulnerability in the Java SE, Java SE Embedded, JRockit...

9.6CVSS6.5AI score0.32839EPSS
SaveExploits6References12
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.7 views

MiracleLinux 4 : glibc-2.12-1.132.AXS4.4 (AXSA:2014-509:05)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-509:05 advisory. Description : The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory...

7.5CVSS8.5AI score0.18099EPSS
SaveExploits4References3
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.7 views

MiracleLinux 4 : glibc-2.12-1.209.AXS4 (AXSA:2017-1373:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1373:01 advisory. The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as ...

9.8CVSS8.7AI score0.05966EPSS
SaveExploits2References5
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.7 views

MiracleLinux 3 : glibc-2.5-107.4.0.1.AXS3 (AXSA:2013-422:02)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-422:02 advisory. The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as t...

5CVSS7.7AI score0.04113EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2026/01/16 12:00 a.m.18 views

PT-2026-3199

The vulnerability, if exploited, could allow an authenticated miscreant OS Standard User to trick Process Optimization services into loading arbitrary code and escalate privileges to OS System, potentially resulting in complete compromise of the Model Application Server...

9.3CVSS7.2AI score0.00261EPSS
SaveExploits0References4
Veracode
Veracode
added 2026/01/15 12:23 p.m.12 views

Authentication Scheme Parsing Bypass

org.keycloak, keycloak-parent is vulnerable to Authentication Scheme Parsing Bypass. The vulnerability is due to an overly permissive Authorization header parser that accepts non-standard separators such as tabs and improper case variations for the “Bearer” scheme, which allows an attacker to...

5.3CVSS5.9AI score0.00383EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/01/15 12:00 a.m.12 views

ALSA-2026:0719 Important: gnupg2 security update

The GNU Privacy Guard GnuPG or GPG is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. Security Fixes: GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write CVE-2025-68973 For more details about...

7.8CVSS7.7AI score0.00148EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2026/01/14 7:25 p.m.13 views

CVE-2025-68701

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses deterministic AES IV derivation from a passphrase. This vulnerability is fixed in 2.2...

8.7CVSS6.8AI score0.00215EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/14 3:19 p.m.3 views

CVE-2026-22211

TinyOS versions up to and including 2.1.2 contain a global buffer overflow vulnerability in the printfUART formatted output implementation used within the ZigBee / IEEE 802.15.4 networking stack. The implementation formats output into a fixed-size global buffer and concatenates strings for %s...

5.1CVSS5.8AI score0.00155EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/01/14 12:31 a.m.10 views

EUVD-2026-2600

EUVD-2026-2600...

8.6CVSS6.4AI score0.01154EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:00 a.m.10 views

MiracleLinux 4 : glibc-2.12-1.7.AXS4.5 (AXSA:2011-142:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-142:02 advisory. The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as t...

6.9CVSS8.3AI score0.14323EPSS
SaveExploits4References4
EUVD
EUVD
added 2026/01/13 7:17 p.m.16 views

EUVD-2026-2022

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, AES/CBC/PKCS5Padding lacks authentication, making it vulnerable to padding oracle attacks and ciphertext manipulation. This vulnerability is fixed in 2.2...

8.7CVSS6.3AI score0.00183EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/01/13 3:29 p.m.8 views

EUVD-2026-2284

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid updating zero-sized extent in extent cache As syzbot reported: F2FS-fs loop0: updateextenttreerange: extent len is zero, type: 0, extent 0, 0, 0, age 0, 0 ------------ cut here ------------ kernel BUG at...

5.9AI score0.00183EPSS
SaveExploits0References6
OSV
OSV
added 2026/01/13 2:56 p.m.14 views

GHSA-GXP5-MV27-VJCJ Jervis's AES CBC Mode is Without Authentication

Vulnerability https://github.com/samrocketman/jervis/blob/157d2b63ffa5c4bb1d8ee2254950fd2231de2b05/src/main/groovy/net/gleske/jervis/tools/SecurityIO.groovyL682-L684...

8.7CVSS6.8AI score0.00183EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/01/13 12:00 a.m.9 views

Jervis 加密问题漏洞

Jervis is an automation tool from the personal developer Sam Gleske. Versions of Jervis prior to 2.2 suffer from a cryptographic issue vulnerability that stems from the lack of authentication in AES/CBC/PKCS5Padding, which makes it susceptible to padded predicate attacks and ciphertext manipulati...

8.7CVSS5.8AI score0.00183EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/01/13 12:00 a.m.11 views

EUVD-2026-2268

Tenda AX-3 v16.03.12.10CN was discovered to contain a stack overflow in the wanMTU2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.1AI score0.00408EPSS
SaveExploits1References2
Rows per page
Query Builder