Lucene search
K

4643 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/08 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-47324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - watchdog: Fix possible use-after-free in wdtstartup This module's remove path calls deltimer. However, that function does not wait until the timer handler...

8.8CVSS6.2AI score0.0116EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2022-50005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Fix use-after-free bugs caused by pn532cmdtimeout When the pn532 uart device is...

7.8CVSS6AI score0.00202EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-47323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - watchdog: sc520wdt: Fix possible use-after-free in wdtturnoff This module's remove path calls deltimer. However, that function does not wait until the timer...

8.8CVSS6.5AI score0.0116EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/08/05 12:14 a.m.9 views

CVE-2025-53544 Trilium Notes is Vulnerable to Brute-force Protection Bypass via Initial Sync Seed Retrieval

Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. In versions below 0.97.0, a brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess the login...

7.5CVSS0.00337EPSS
Exploits0References3
CVE
CVE
added 2025/08/05 12:14 a.m.18 views

CVE-2025-53544

CVE-2025-53544 concerns Trilium Notes prior to 0.97.0, where a brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess the login password without triggering rate limiting. The app is described as a single-user, username-less system, with...

7.5CVSS6.8AI score0.00337EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2025/08/04 4:35 p.m.2 views

xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation if the server runs with extended privileges, or...

7.8CVSS6.3AI score0.01229EPSS
Exploits0References4
OSV
OSV
added 2025/08/03 8:15 a.m.2 views

MAL-2025-47452 Malicious code in secmeasure (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security f566db2e1359b455ca36524d9c066854754e71ac92deca9706f69d3d71cc8414 This package installs the SilentSync remote access trojan and allows remote code execution and data exfiltration. Windows machines are...

7AI score
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/07/31 12:33 a.m.7 views

CVE-2025-52490

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollectinfooptions.log and syncgateway.log, there are cleartext passwords in redacted and unredacted output...

7.3CVSS7.2AI score0.00173EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/07/31 12:0 a.m.7 views

PT-2025-34383

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.16.0+ 94 Description: A flaw exists in the Linux kernel related to the md Multiple Devices subsystem. A test case triggers a kernel panic due to a NULL pointer dereference within the rdev addable function. The...

5.5CVSS5.8AI score0.00128EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2025/07/29 11:23 p.m.9 views

SUSE CVE-2025-38409

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix another leak in the submit error path putunusedfd doesn't free the installed file, if we've already done fdinstall. So we need to also free the syncfile. Patchwork: https://patchwork.freedesktop.org/patch/653583/...

3.3CVSS6.5AI score0.00156EPSS
Exploits0References22
Github Security Blog
Github Security Blog
added 2025/07/29 9:30 p.m.9 views

Couchbase Sync Gateway shows cleartext passwords in redacted and unredacted output

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollectinfooptions.log and syncgateway.log, there are cleartext passwords in redacted and unredacted output...

7.3CVSS5.4AI score0.00173EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2025/07/29 9:30 p.m.5 views

GHSA-PQHP-4XFC-HJGQ Couchbase Sync Gateway shows cleartext passwords in redacted and unredacted output

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollectinfooptions.log and syncgateway.log, there are cleartext passwords in redacted and unredacted output...

7.3CVSS5.4AI score0.00173EPSS
Exploits0References5
NVD
NVD
added 2025/07/29 8:15 p.m.4 views

CVE-2025-52490

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollectinfooptions.log and syncgateway.log, there are cleartext passwords in redacted and unredacted output...

7.3CVSS0.00173EPSS
Exploits0References3
PyPA
PyPA
added 2025/07/29 8:15 p.m.10 views

PYSEC-2025-101

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollectinfooptions.log and syncgateway.log, there are cleartext passwords in redacted and unredacted output...

7.3CVSS5.8AI score0.00173EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2025/07/29 8:15 p.m.3 views

CVE-2025-52490

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollectinfooptions.log and syncgateway.log, there are cleartext passwords in redacted and unredacted output...

7.3CVSS5.8AI score0.00173EPSS
Exploits0References3
OSV
OSV
added 2025/07/29 8:15 p.m.6 views

PYSEC-2025-101

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollectinfooptions.log and syncgateway.log, there are cleartext passwords in redacted and unredacted output...

7.3CVSS5.8AI score0.00173EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/07/29 12:0 a.m.7 views

CVE-2025-52490

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollectinfooptions.log and syncgateway.log, there are cleartext passwords in redacted and unredacted output...

0.00173EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/07/29 12:0 a.m.2 views

Couchbase Sync Gateway 安全漏洞

Couchbase Sync Gateway is a secure web gateway for data access and data synchronization over the web from Couchbase, Inc. A security vulnerability exists in Couchbase Sync Gateway versions prior to 3.2.6, which stems from logs containing plaintext passwords that could lead to information disclosu...

7.3CVSS6.3AI score0.00173EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/07/29 12:0 a.m.3 views

CVE-2025-52490

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollectinfooptions.log and syncgateway.log, there are cleartext passwords in redacted and unredacted output...

6.6AI score0.00173EPSS
Exploits0References3
CVE
CVE
added 2025/07/29 12:0 a.m.25 views

CVE-2025-52490

CVE-2025-52490 affects Couchbase Sync Gateway versions prior to 3.2.6. The issue arises from cleartext passwords appearing in redacted and unredacted output in sgcollect_info_options.log and sync_gateway.log, enabling potential information disclosure. The linked advisories indicate upgrading to a...

7.3CVSS7.2AI score0.00173EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder