Lucene search
+L

10 matches found

Tenable Nessus
Tenable Nessus
•added 2026/02/07 12:00 a.m.•35 views

openSUSE 16 Security Update : golang-github-prometheus-prometheus (openSUSE-SU-2026:20177-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20177-1 advisory. Update to version 3.5.0: Security issues fixed: - CVE-2025-13465: prototype pollution in the .unset and .omit functions can lead to deletion of...

8.6CVSS6.6AI score0.01823EPSS
SaveExploits1References6
osv_suse
osv_suse
•added 2026/02/05 10:43 a.m.•20 views

SUSE-SU-2026:20232-1 Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: Update to version 3.5.0: Security issues fixed: - CVE-2025-13465: prototype pollution in the .unset and .omit functions can lead to deletion of methods from global bsc1257329. - CVE-2025-12816: interpretation conflict...

8.6CVSS6.4AI score0.01823EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2022-33657

Malicious code in bioql PyPI...

9.3CVSS7.6AI score0.01457EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/08/12 3:15 p.m.•21 views

CVE-2021-44720

In Ivanti Pulse Secure Pulse Connect Secure PCS before 9.1R12, the administrator password is stored in the HTML source code of the "Maintenance Push Configuration Targets Target Name" targets.cgi screen. A read-only administrative user can escalate to a read-write administrative role...

7.2CVSS5.8AI score0.0266EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/08/12 3:15 p.m.•11 views

CVE-2021-44720

In Ivanti Pulse Secure Pulse Connect Secure PCS before 9.1R12, the administrator password is stored in the HTML source code of the "Maintenance Push Configuration Targets Target Name" targets.cgi screen. A read-only administrative user can escalate to a read-write administrative role...

7.2CVSS7.2AI score0.0266EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/04/19 3:15 p.m.•10 views

CVE-2022-29315

Invicti Acunetix before 14 allows CSV injection via the Description field on the Add Targets page, if the Export CSV feature is used...

9.3CVSS5.9AI score0.01457EPSS
SaveExploits1References2
NVD
NVD
•added 2022/04/19 3:15 p.m.•50 views

CVE-2022-29315

Invicti Acunetix before 14 allows CSV injection via the Description field on the Add Targets page, if the Export CSV feature is used...

9.3CVSS0.01457EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/04/19 3:15 p.m.•22 views

CVE-2022-29315

Invicti Acunetix before 14 allows CSV injection via the Description field on the Add Targets page, if the Export CSV feature is used...

8.8CVSS7.3AI score0.01457EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/04/19 12:00 a.m.•7 views

PT-2022-19533

Name of the Vulnerable Software and Affected Versions Invicti Acunetix versions prior to 14 Description The issue allows CSV injection via the Description field on the Add Targets page, specifically when the Export CSV feature is used. This can occur when using the /api endpoint for target...

9.3CVSS5.8AI score0.01457EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/19 12:00 a.m.•11 views

CVE-2022-29315: Improper Neutralization of Formula Elements in a CSV File

Invicti Acunetix before 14 allows CSV injection via the Description field on the Add Targets page, if the Export CSV feature is used...

9.3CVSS7.8AI score0.01457EPSS
SaveExploits1References2
Rows per page
Query Builder