Lucene search
+L

2895 matches found

Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2016-2167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The canonicalizeusername function in svnserve/cyrusauth.c in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4, when Cyrus SASL authentication is used,...

6.8CVSS7AI score0.06814EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2017-9800

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrar...

9.8CVSS7.8AI score0.18892EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
•added 2025/03/03 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2007-2448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Subversion 1.4.3 and earlier does not properly implement the partial access privilege for users who have access to changed paths but not copied paths, which...

2.1CVSS8.3AI score0.01525EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/02/13 12:00 a.m.•12 views

Mageia: Security Advisory (MGASA-2025-0058)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6AI score0.0193EPSS
SaveExploits1References4
osv_mgasa
osv_mgasa
•added 2025/02/12 6:29 p.m.•43 views

MGASA-2025-0058 Updated subversion packages fix security vulnerability

Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. CVE-2024-46901...

4.3CVSS6AI score0.0193EPSS
SaveExploits1References3
Mageia
Mageia
•added 2025/02/12 6:29 p.m.•38 views

Updated subversion packages fix security vulnerability

Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. CVE-2024-46901...

4.3CVSS6.1AI score0.0193EPSS
SaveExploits1References2
NVD
NVD
•added 2025/02/11 11:15 p.m.•27 views

CVE-2022-37660

In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the...

6.5CVSS0.00378EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2025/02/11 11:15 p.m.•19 views

UBUNTU-CVE-2022-37660

In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the...

6.5CVSS7AI score0.00378EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•6 views

CVE-2022-37660: Reusing a Nonce, Key Pair in Encryption

In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the...

6.5CVSS7.1AI score0.00378EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2025/02/11 12:00 a.m.•23 views

CVE-2022-37660

In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the...

6.5CVSS6.4AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/02/11 12:00 a.m.•16 views

CVE-2022-37660

In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the...

7AI score0.00378EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/02/11 12:00 a.m.•34 views

CVE-2022-37660

In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the...

6.5CVSS7AI score0.00378EPSS
SaveExploits0
Cvelist
Cvelist
•added 2025/02/11 12:00 a.m.•63 views

CVE-2022-37660

In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the...

0.00378EPSS
SaveExploits0References2
CVE
CVE
•added 2025/02/11 12:00 a.m.•115 views

CVE-2022-37660

In hostapd version 2.10 and earlier , a vulnerability exists because the PKEX code remains active even after a successful PKEX association. An attacker who previously bootstrapped public keys with an entity using PKEX can subvert future bootstrapping by passively observing public keys and reusing...

6.5CVSS7AI score0.00378EPSS
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
•added 2025/02/10 12:00 a.m.•12 views

Huawei EulerOS: Security Advisory for subversion (EulerOS-SA-2025-1198)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6AI score0.0193EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/02/10 12:00 a.m.•25 views

EulerOS 2.0 SP12 : subversion (EulerOS-SA-2025-1182)

According to the versions of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated...

4.3CVSS5.9AI score0.0193EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/02/10 12:00 a.m.•23 views

EulerOS 2.0 SP12 : subversion (EulerOS-SA-2025-1198)

According to the versions of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated...

4.3CVSS5.9AI score0.0193EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2025/02/10 12:00 a.m.•8 views

Huawei EulerOS: Security Advisory for subversion (EulerOS-SA-2025-1167)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6AI score0.0193EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/02/10 12:00 a.m.•24 views

EulerOS 2.0 SP11 : subversion (EulerOS-SA-2025-1167)

According to the versions of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated...

4.3CVSS5.9AI score0.0193EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/02/10 12:00 a.m.•28 views

EulerOS 2.0 SP11 : subversion (EulerOS-SA-2025-1148)

According to the versions of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated...

4.3CVSS5.9AI score0.0193EPSS
SaveExploits1References2
Rows per page
Query Builder