Lucene search
K

91 matches found

EUVD
EUVD
added 2026/03/10 6:31 p.m.2 views

EUVD-2025-208481

Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering a legitimate user to import a specially crafted trace file...

9.6CVSS5.8AI score0.00056EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/10 6:31 p.m.4 views

EUVD-2025-208482

Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering a legitimate user to import a specially crafted trace file...

9.6CVSS5.8AI score0.00056EPSS
Exploits0References2
NVD
NVD
added 2026/03/10 6:17 p.m.1 views

CVE-2025-40943

Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering an authorized user, who has the function right "Read diagnostics", to import a specially crafted trace file. The malicious trace file is insufficiently sanitiz...

9.6CVSS0.00056EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/10 4:7 p.m.1 views

CVE-2025-40943

Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering an authorized user, who has the function right "Read diagnostics", to import a specially crafted trace file. The malicious trace file is insufficiently sanitiz...

9.6CVSS6.1AI score0.00056EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/10 12:0 a.m.1 views

PT-2026-24217

Name of the Vulnerable Software and Affected Versions Siemens PLCs affected versions not specified Description The software does not properly sanitize the contents of trace files. This could allow an attacker to inject code by socially engineering a legitimate user to import a specially crafted...

9.6CVSS6.3AI score0.00056EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/11/27 6:23 a.m.1 views

CVE-2025-13674

A flaw in the BPv7 Bundle Protocol v7 dissector in Wireshark 4.6.0 can cause the application to crash when processing certain malformed packets or trace files. The bug was discovered during internal fuzzing and occurs due to a use-after-free memory error triggered while decoding BPv7 elements...

5.5CVSS6.6AI score0.00013EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-7887

Malware in sbrugna...

5CVSS6.4AI score0.00211EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-27374

Malware in sbrugna...

6.2CVSS5.6AI score0.00264EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-25745

Malware in sbrugna...

4.4CVSS4.6AI score0.0004EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-4104

Malware in sbrugna...

9.3CVSS6.1AI score0.01498EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2018-14257

Malware in sbrugna...

8.4CVSS8.2AI score0.00271EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-4354

Malware in sbrugna...

7.5CVSS7.5AI score0.00177EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2016-4665

Malware in sbrugna...

5.5CVSS5.6AI score0.0011EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-38594

Malicious code in bioql PyPI...

5.5CVSS5.6AI score0.00107EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-53952

Malicious code in bioql PyPI...

4.7CVSS6.4AI score0.0005EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/08/30 6:19 p.m.1 views

CVE-2025-1501

An access control vulnerability was discovered in the Request Trace and Download Trace functionalities of CMC before 25.1.0 due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can request and download...

5.3CVSS6.8AI score0.00052EPSS
Exploits0References1
NVD
NVD
added 2025/08/26 11:15 a.m.2 views

CVE-2025-1501

An access control vulnerability was discovered in the Request Trace and Download Trace functionalities of CMC before 25.1.0 due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can request and download...

5.3CVSS0.00052EPSS
Exploits0References1
CVE
CVE
added 2025/08/26 10:25 a.m.7 views

CVE-2025-1501

The CVE-2025-1501 vulnerability affects Nozomi Networks Guardian/CMC prior to v25.1.0, where improper access controls in the Request Trace and Download Trace features allow an authenticated user with limited privileges to request and download trace files, potentially exposing unauthorized network...

5.3CVSS6.4AI score0.00052EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:8 p.m.3 views

CVE-2022-35719

IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user...

5.5CVSS6AI score0.00107EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:30 p.m.1 views

CVE-2020-6224

SAP NetWeaver AS Java HTTP Service, versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker with administrator privileges to access user sensitive data such as passwords in trace files, when the user logs in and sends request with login credentials, leading to Information Disclosure...

6.2CVSS6.7AI score0.00264EPSS
Exploits0References1
Rows per page
Query Builder