Lucene search
+L

2028 matches found

Tenable Nessus
Tenable Nessus
•added 2025/09/02 12:00 a.m.•22 views

Linux Distros Unpatched Vulnerability : CVE-2024-9026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions 8.1. before 8.1.30, 8.2. before 8.2.24, 8.3. before 8.3.12, when using PHP-FPM SAPI and it is configured to catch workers output through...

3.3CVSS6.2AI score0.00487EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2022-38725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog inp...

7.5CVSS7.1AI score0.02403EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2024-47619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - syslog-ng is an enhanced log daemo. Prior to version 4.8.2, tlswildcardmatch matches on certificates such as foo..bar although that is not allowed. It is also...

7.5CVSS7.1AI score0.00369EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/08/26 12:00 a.m.•7 views

Solaris 10 (i386): 146574-03

SunOS 5.10: SunOS 5.10x86: syslogd patch. Date this patch was last updated by Sun : Jul/14/25 %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid255251; scriptversion"1.1";...

7AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/23 6:36 p.m.•19 views

CVE-2025-7051

On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2...

8.3CVSS6.2AI score0.0028EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/21 6:15 p.m.•15 views

CVE-2025-7051

On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2...

8.3CVSS5.8AI score0.0028EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/21 6:15 p.m.•26 views

CVE-2025-7051

On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2...

8.3CVSS0.0028EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/21 5:34 p.m.•28 views

CVE-2025-7051 N-central Syslog Configuration Insecure Direct Object Reference

On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2...

8.3CVSS0.0028EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/21 5:34 p.m.•13 views

CVE-2025-7051 N-central Syslog Configuration Insecure Direct Object Reference

On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2...

8.3CVSS7AI score0.0028EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/21 5:34 p.m.•49 views

CVE-2025-7051

CVE-2025-7051 concerns N-able N-Central. Affected: N-Central deployments prior to 2025.2. Describe vulnerability: an authenticated user can read, write, and modify syslog configurations across customers on an N-Central server. This is an insecure direct object access-like issue enabling cross-ten...

8.3CVSS6.5AI score0.0028EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/08/21 12:00 a.m.•22 views

PT-2025-34268 · Solarwinds · N-Central

Name of the Vulnerable Software and Affected Versions: N-central versions prior to 2025.2 Description: An authenticated user can read, write, and modify syslog configurations across customers on an N-central server. Recommendations: Update to version 2025.2 or later...

8.3CVSS7.1AI score0.0028EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/08/21 12:00 a.m.•16 views

N‑able N-Central 安全漏洞

N-able N-Central is a powerful, customizable remote monitoring and management platform from N-able. A security vulnerability exists in N-able N-Central versions prior to 2025.2 that originates from an authenticated user being able to read and write modify syslog configuration...

8.3CVSS6.6AI score0.0028EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/21 12:00 a.m.•6 views

CVE-2025-7051: Improper Access Control

On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2...

8.3CVSS5.8AI score0.0028EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/11 1:54 p.m.•11 views

BIT-LIBPHP-2024-9026 PHP-FPM logs from children may be altered

In PHP versions 8.1. before 8.1.30, 8.2. before 8.2.24, 8.3. before 8.3.12, when using PHP-FPM SAPI and it is configured to catch workers output through catchworkersoutput = yes, it may be possible to pollute the final log or remove up to 4 characters from the log messages by manipulating log...

3.3CVSS7.1AI score0.00487EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/07/25 12:00 a.m.•16 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an over-warning by the ath6kl wifi driver of incorrect firmware inputs, which could lead to syslog...

5.5CVSS6.9AI score0.00181EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
•added 2025/07/22 12:00 a.m.•25 views

CVE-2025-54319

An issue was discovered in Westermo WeOS 5 5.24 through 5.24.4. A threat actor potentially can gain unauthorized access to sensitive information via system logging information syslog verbose logging that includes credentials...

6.3CVSS6.2AI score0.0031EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/20 12:00 a.m.•58 views

CVE-2025-54319

Westermo WeOS versions 5.24–5.24.4 are affected by CVE-2025-54319 due to verbose syslog logging that can disclose credentials, enabling potential unauthorized access to sensitive information. Root cause: logging configuration exposes credentials in syslog. Affected software: Westermo WeOS 5.x (5....

6.3CVSS6.9AI score0.0031EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/07/20 12:00 a.m.•24 views

PT-2025-30217 · Westermo · Westermo Weos

Name of the Vulnerable Software and Affected Versions: Westermo WeOS versions 5.24 through 5.24.4 Description: An issue was discovered that allows a threat actor to potentially gain unauthorized access to sensitive information via system logging information, specifically through verbose syslog...

6.3CVSS6.1AI score0.0031EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/20 12:00 a.m.•1 views

CVE-2025-54319: Insertion of Sensitive Information into Log File

An issue was discovered in Westermo WeOS 5 5.24 through 5.24.4. A threat actor potentially can gain unauthorized access to sensitive information via system logging information syslog verbose logging that includes credentials...

6.3CVSS5.8AI score0.0031EPSS
SaveExploits0References1
NCSC
NCSC
•added 2025/07/03 7:43 a.m.•18 views

Vulnerability fixed in Cisco Unified Communications Manager

Cisco has fixed a vulnerability in Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition. The vulnerability is in the hard-coded root SSH credentials that cannot be changed or deleted. This allows unauthenticated remote attackers to log in and...

10CVSS7.8AI score0.01185EPSS
SaveExploits0References1
Rows per page
Query Builder