Lucene search
+L

27470 matches found

osv_usn
osv_usn
•added 2025/09/08 2:23 p.m.•23 views

USN-7740-1 libetpan vulnerability

It was discovered that LibEtPan incorrectly handled memory when parsing IMAP STATUS responses. A remote attacker could possibly use this issue to cause LibEtPan to crash, resulting in a denial of service...

5.5CVSS5.8AI score0.00558EPSS
SaveExploits1References2
Ubuntu
Ubuntu
•added 2025/09/08 2:23 p.m.•19 views

USN-7740-1: LibEtPan vulnerability

It was discovered that LibEtPan incorrectly handled memory when parsing IMAP STATUS responses. A remote attacker could possibly use this issue to cause LibEtPan to crash, resulting in a denial of service...

5.5CVSS5.8AI score0.00558EPSS
SaveExploits1
Circl
Circl
•added 2025/09/08 7:40 a.m.•37 views

CVE-2025-10081

creationtimestamp| type| source ---|---|--- 2025-09-08 07:40:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lycpazp2zq2t...

7.2CVSS5.3AI score0.00463EPSS
SaveExploits1References1
NVD
NVD
•added 2025/09/06 8:15 p.m.•19 views

CVE-2025-58445

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to identify and target known...

7.5CVSS0.00456EPSS
SaveExploits1References1
CVE
CVE
•added 2025/09/06 7:47 p.m.•56 views

CVE-2025-58445

CVE-2025-58445 concerns the Atlantis self-hosted Go application. The connected document GO-2025-3940 describes Atlantis exposing the service version publicly via the "/status" API endpoint in github.com/runatlantis/atlantis. The Initial document states that this information disclosure could allow...

7.5CVSS8.1AI score0.00456EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/09/06 7:47 p.m.•52 views

CVE-2025-58445 Atlantis Exposes Service Version Publicly on /status API Endpoint

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to identify and target known...

6.9CVSS0.00456EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/09/06 7:47 p.m.•10 views

CVE-2025-58445 Atlantis Exposes Service Version Publicly on /status API Endpoint

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to identify and target known...

6.9CVSS8.1AI score0.00456EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/09/06 7:47 p.m.•12 views

CVE-2025-58445 Atlantis Exposes Service Version Publicly on /status API Endpoint

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to identify and target known...

6.9CVSS6.1AI score
SaveExploits0References3
Mend
Mend
•added 2025/09/06 7:47 p.m.•22 views

CVE-2025-58445

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to identify and target known...

7.5CVSS8.1AI score0.00456EPSS
SaveExploits1References4
Gitee
Gitee
•added 2025/09/06 1:01 p.m.•112 views

Exploit for Observable Discrepancy in Intel Atom_C

This is a tool for checking the state of software mitigations against Spectre and Meltdown vulnerabilities. It uses the NtQuerySystemInformation API call to report the data as seen by the Windows Kernel. The tool is currently optimized for Microsoft Windows 7-10 and uses the best-working exploit...

5.6CVSS7.3AI score0.93838EPSS
SaveExploits14
Circl
Circl
•added 2025/09/06 7:44 a.m.•41 views

CVE-2025-9493

creationtimestamp| type| source ---|---|--- 2025-09-06 07:44:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly5ojlplrr2d...

6.4CVSS5.7AI score0.00244EPSS
SaveExploits0References1
Circl
Circl
•added 2025/09/06 4:33 a.m.•22 views

CVE-2025-48523

creationtimestamp| type| source ---|---|--- 2025-09-06 04:33:00+00:00| seen| Telegram/ggl3aR0Zomy6tbkIzotyQv6nNno-mBvmzvIrWqiwOPhmuE...

7.8CVSS7.3AI score0.00091EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/09/06 12:00 a.m.•28 views

PT-2025-36447

CVE-2025-58909 - OpenVAS Scanner Not Used CVE ID : CVE-2025-58909 Published : Sept. 6, 2025, 3:15 a.m. | 3 hours, 53 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

6.7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/06 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2025-39698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/futex: ensure iofutexwait cleans up properly on failure The iofutexdata is allocated upfront and assigned to the iokiocb asyncdata field, but the reques...

8.8CVSS7.5AI score0.00194EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/06 12:00 a.m.•3 views

CVE-2025-58445: Exposure of Sensitive Information to an Unauthorized Actor

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to identify and target known...

7.5CVSS8.3AI score0.00456EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/09/06 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2025-39685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - comedi: pcl726: Prevent invalid irq number The reproducer passed in an irq number0x80008000 that was too large, which triggered the oob. Added an interrupt numb...

7.1CVSS6.6AI score0.00165EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/09/05 9:18 p.m.•51 views

Atlantis Exposes Service Version Publicly on /status API Endpoint

Summary Atlantis publicly exposes detailed version information on its /status endpoint. This information disclosure could allow attackers to identify and target known vulnerabilities associated with the specific versions, potentially compromising the service's security posture. Details The /statu...

7.5CVSS8.1AI score0.00456EPSS
SaveExploits1References3Affected Software1
osv_ghsa
osv_ghsa
•added 2025/09/05 9:18 p.m.•59 views

GHSA-XH7V-965R-23F7 Atlantis Exposes Service Version Publicly on /status API Endpoint

Summary Atlantis publicly exposes detailed version information on its /status endpoint. This information disclosure could allow attackers to identify and target known vulnerabilities associated with the specific versions, potentially compromising the service's security posture. Details The /statu...

7.5CVSS8.1AI score0.00456EPSS
SaveExploits1References3
Snyk
Snyk
•added 2025/09/05 9:18 p.m.•8 views

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the /status endpoint, which returns detailed version and build information. An attacker can gain insights into the software version and configuration by sending unauthenticated requests to this endpoint and...

7.5CVSS8.1AI score0.00456EPSS
SaveExploits1References2
SUSE Linux
SUSE Linux
•added 2025/09/05 12:55 p.m.•14 views

Security update for cloud-init

This update for cloud-init fixes the following issues: Update to version 25.1.3: CVE-2024-6174: Unpriveleged user could trigger hotplug-hook commands bsc1245403. None security fixes: Rebase cloud-init to 24.4 or higher bsc1239715, jscPED-8680. Fixed cloud-init --debug status bsc1228414. Using...

8.8CVSS6.3AI score0.00264EPSS
SaveExploits0References26
Rows per page
Query Builder