Lucene search
K

20 matches found

Github Security Blog
Github Security Blog
added 2026/04/08 12:18 a.m.4 views

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

CVSSv3.1 Rating: Medium CVSSv3.1 Score: 5.9 CVSSv3.1 Vector String: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Summary and Impact An issue exists in the the EventStream header decoder in AWS SDK for Go v2 in versions predating 2026-03-23. An actor can send a malformed EventStream response frame...

5.9AI score
Exploits0References3Affected Software12
OSV
OSV
added 2026/01/15 9:16 p.m.3 views

CVE-2026-21918

A Double Free vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on SRX and MX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. On all SRX and MX Series platforms, when during TCP session establishment a specific sequence of...

7.5CVSS5.8AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/15 8:16 p.m.4 views

CVE-2025-60007

A NULL Pointer Dereference vulnerability in the chassis daemon chassisd of Juniper Networks Junos OS on MX, SRX and EX Series allows a local attacker with low privileges to cause a Denial-of-Service DoS. When a user executes the 'show chassis' command with specifically crafted options, chassisd...

6.8CVSS5.8AI score0.0013EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.5 views

PT-2026-3129

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series versions 23.2R2-S2 through 23.2R2-S4 Juniper Networks Junos OS on SRX Series versions 23.4R2-S1 through 23.4R2-S4 Juniper Networks Junos OS on SRX Series versions prior to 24.2R2-S2 Juniper Networks Juno...

8.7CVSS6.6AI score0.00375EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/11/13 9:24 a.m.7 views

CVE-2025-64265 WordPress Frontend File Manager plugin <= 23.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through = 23.2...

4.3CVSS0.00163EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/13 9:24 a.m.2 views

CVE-2025-64265 WordPress Frontend File Manager plugin <= 23.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through = 23.2...

4.3CVSS6.6AI score0.00163EPSS
Exploits0References1
CVE
CVE
added 2025/10/09 3:44 p.m.17 views

CVE-2025-59958

This CVE affects Juniper Networks Junos OS Evolved on PTX Series (Packet Forwarding Engine). Affected component: firewall filters (output, on WAN/revenue interfaces). Root cause: improper handling when action is 'reject' causing matching packets to be sent to the Routing Engine, consuming RE reso...

6.9CVSS6.3AI score0.00258EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.2 views

Juniper Junos OS Evolved 代码问题漏洞

Juniper Junos OS Evolved is a network operating system from Juniper USA. A code issue vulnerability exists in Juniper Junos OS Evolved versions prior to 22.4R3-EVO and 23.2 to prior to 23.2R2-EVO, which arises from not properly checking for an exception condition that could result in...

6.9CVSS6.8AI score0.00258EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2025/05/27 12:58 a.m.11 views

Low: Red Hat Security Advisory: openldap security update

An update for openldap is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS6.8AI score0.01947EPSS
Exploits0References2
Circl
Circl
added 2025/03/22 1:39 p.m.8 views

CVE-2025-2186

creationtimestamp| type| source ---|---|--- 2025-03-22 13:39:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkxtza7vvq2x 2025-03-22 14:00:34+00:00| seen| Telegram/1ETDR3cINztmrc4FfbKm5GJx5h-N5WBr3FoPGxl4NIHDSU 2025-03-22 17:03:54+00:00| seen| https://t.me/cvedetector/20875...

7.5CVSS8.7AI score0.00391EPSS
Exploits0References3
Circl
Circl
added 2025/02/23 5:20 a.m.14 views

CVE-2025-1576

creationtimestamp| type| source ---|---|--- 2025-02-23 05:20:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5082 2025-02-23 07:41:53+00:00| seen| https://t.me/cvedetector/18736 2025-02-23 08:12:52+00:00| seen|...

9.8CVSS6.5AI score0.00493EPSS
Exploits1References3
Circl
Circl
added 2024/10/28 9:28 a.m.5 views

CVE-2024-38821

creationtimestamp| type| source ---|---|--- 2024-10-28 09:28:03+00:00| seen| https://t.me/cvedetector/9093 2024-10-29 05:03:03+00:00| seen| https://t.me/CyberBulletin/26249 2024-10-29 05:03:03+00:00| seen| https://t.me/CyberBulletin/1305 2025-01-23 13:31:51+00:00| seen|...

9.1CVSS6.2AI score0.01712EPSS
Exploits2References5
Positive Technologies
Positive Technologies
added 2024/06/25 12:0 a.m.3 views

PT-2024-5561 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions 23.2R2-EVO through 23.2R2-S1-EVO Junos OS Evolved versions 23.4R1-EVO through 23.4R2-EVO Description: An issue in the console port control of Juniper Networks Junos OS Evolved allows an attacker with physical access ...

7.2CVSS7.4AI score0.00216EPSS
Exploits0References9
CNNVD
CNNVD
added 2024/03/08 12:0 a.m.2 views

OpenText Documentum D2 Security Vulnerability

OpenText Documentum D2 is a component of an Enterprise Content Management ECM solution from OpenText. A security vulnerability exists in OpenText Documentum D2 versions 16.5.1 through CE 23.2. An attacker can exploit the vulnerability to upload arbitrary code and execute code on a client computer...

5.8CVSS7.6AI score0.00172EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/12/07 12:0 a.m.3 views

Ericsson Network Manager Security Vulnerability

Ericsson Network Manager is a network manager from Ericsson, Sweden. It covers monitoring, troubleshooting, configuration, automation and optimization of networks. A security vulnerability exists in Ericsson Network Manager versions prior to 23.2, which stems from improper handling of access...

8.8CVSS8.7AI score0.00776EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/10/19 12:0 a.m.4 views

PT-2023-18881 · M Files · M-Files Classic Web

Name of the Vulnerable Software and Affected Versions: M-Files Classic Web versions before 23.10 M-Files Classic Web LTS Service Release Versions before 23.2 LTS SR4 M-Files Classic Web LTS Service Release Versions before 23.8 LTS SR1 Description: The issue allows an attacker to execute a script ...

7.3CVSS5.9AI score0.00431EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2023/05/01 12:0 a.m.7 views

CVE-2023-29681

Cleartext Transmission in cookie:ecospw: in Tenda N301 v6.0, firmware v12.03.01.06pt allows an authenticated attacker on the LAN or WLAN to intercept communications with the router and obtain the password...

5.5AI score0.00401EPSS
Exploits1References2
OSV
OSV
added 2023/04/13 1:4 p.m.7 views

SUSE-SU-2023:1837-1 Security update for apache2-mod_auth_openidc

This update for apache2-modauthopenidc fixes the following issues: - CVE-2022-23527: Fixed open redirect in oidcvalidateredirecturl using tab character bsc1206441. - CVE-2023-28625: Fixed NULL pointer dereference when OIDCStripCookies was set and a crafted Cookie header was supplied bsc1210073...

7.5CVSS6.6AI score0.01327EPSS
Exploits0References6
Circl
Circl
added 2017/06/23 12:0 a.m.13 views

CVE-2017-8483

creationtimestamp| type| source ---|---|--- 2017-06-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42243...

5CVSS6.9AI score0.0511EPSS
Exploits2References1
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.5 views

2026-04 Cumulative Update for Windows 11 Version 23H2 for arm64-based Systems (KB5082052)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

5.8AI score
Exploits0
Rows per page
Query Builder