Lucene search
K

92 matches found

EUVD
EUVD
added 2026/03/10 6:31 p.m.3 views

EUVD-2025-208481

Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering a legitimate user to import a specially crafted trace file...

9.6CVSS5.8AI score0.00458EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/10 6:31 p.m.7 views

EUVD-2025-208482

Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering a legitimate user to import a specially crafted trace file...

9.6CVSS5.8AI score0.00458EPSS
Exploits0References2
NVD
NVD
added 2026/03/10 6:17 p.m.2 views

CVE-2025-40943

Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering an authorized user, who has the function right "Read diagnostics", to import a specially crafted trace file. The malicious trace file is insufficiently sanitiz...

9.6CVSS0.00458EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/10 4:7 p.m.5 views

CVE-2025-40943

Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering an authorized user, who has the function right "Read diagnostics", to import a specially crafted trace file. The malicious trace file is insufficiently sanitiz...

9.6CVSS6.1AI score0.00458EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/10 12:0 a.m.4 views

PT-2026-24217

Name of the Vulnerable Software and Affected Versions Siemens PLCs affected versions not specified Description The software does not properly sanitize the contents of trace files. This could allow an attacker to inject code by socially engineering a legitimate user to import a specially crafted...

9.6CVSS6.3AI score0.00458EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/11/27 6:23 a.m.7 views

CVE-2025-13674

A flaw in the BPv7 Bundle Protocol v7 dissector in Wireshark 4.6.0 can cause the application to crash when processing certain malformed packets or trace files. The bug was discovered during internal fuzzing and occurs due to a use-after-free memory error triggered while decoding BPv7 elements...

5.5CVSS6.6AI score0.00094EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2014-4104

Malware in sbrugna...

9.3CVSS6.1AI score0.05926EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2020-25745

Malware in sbrugna...

4.4CVSS4.6AI score0.00291EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2016-4665

Malware in sbrugna...

5.5CVSS5.6AI score0.00375EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-14257

Malware in sbrugna...

8.4CVSS8.2AI score0.01577EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-27374

Malware in sbrugna...

6.2CVSS5.6AI score0.01087EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2015-7887

Malware in sbrugna...

5CVSS6.4AI score0.01808EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-4354

Malware in sbrugna...

7.5CVSS7.5AI score0.00861EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-53952

Malicious code in bioql PyPI...

4.7CVSS6.4AI score0.00119EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2022-38594

Malicious code in bioql PyPI...

5.5CVSS5.6AI score0.00171EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/08/30 6:19 p.m.3 views

CVE-2025-1501

An access control vulnerability was discovered in the Request Trace and Download Trace functionalities of CMC before 25.1.0 due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can request and download...

5.3CVSS6.8AI score0.00192EPSS
Exploits0References1
NVD
NVD
added 2025/08/26 11:15 a.m.3 views

CVE-2025-1501

An access control vulnerability was discovered in the Request Trace and Download Trace functionalities of CMC before 25.1.0 due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can request and download...

5.3CVSS0.00192EPSS
Exploits0References1
CVE
CVE
added 2025/08/26 10:25 a.m.13 views

CVE-2025-1501

The CVE-2025-1501 vulnerability affects Nozomi Networks Guardian/CMC prior to v25.1.0, where improper access controls in the Request Trace and Download Trace features allow an authenticated user with limited privileges to request and download trace files, potentially exposing unauthorized network...

5.3CVSS6.4AI score0.00192EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:8 p.m.5 views

CVE-2022-35719

IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user...

5.5CVSS6AI score0.00171EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:30 p.m.3 views

CVE-2020-6224

SAP NetWeaver AS Java HTTP Service, versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker with administrator privileges to access user sensitive data such as passwords in trace files, when the user logs in and sends request with login credentials, leading to Information Disclosure...

6.2CVSS6.7AI score0.01087EPSS
Exploits0References1
Rows per page
Query Builder