Lucene search
+L

767 matches found

CNNVD
CNNVD
added 2025/09/09 12:0 a.m.9 views

Adobe Experience Manager 输入验证错误漏洞

Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. An input validation error vulnerability exists in Adobe...

7.7CVSS6.6AI score0.05247EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.19 views

PT-2025-36551

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP affected versions not specified Description: The application allows authenticated users with access to background processing to gain unauthorized read access to profile parameters. This results in a l...

4.3CVSS5.8AI score0.002EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/09/09 12:0 a.m.6 views

Adobe Experience Manager 输入验证错误漏洞

Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. An input validation error vulnerability exists in Adobe...

6.5CVSS6.6AI score0.00441EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/09 12:0 a.m.9 views

Adobe Experience Manager 代码问题漏洞

Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. A server-side request forgery vulnerability exists in Adobe...

6.5CVSS6.5AI score0.01811EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.11 views

PT-2025-36776

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.23.0 and earlier Description: Adobe Experience Manager versions 6.5.23.0 and earlier are susceptible to an Improper Input Validation issue that may lead to a Security feature bypass. A low-privileged...

6.5CVSS6.1AI score0.00441EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.2 views

PT-2025-36778

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.23.0 and earlier Description: Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery SSRF issue. This could result in a security feature bypass, allowing a...

6.8CVSS6.2AI score0.01811EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/09/09 12:0 a.m.7 views

SAP NetWeaver Application Server ABAP 安全漏洞

SAP NetWeaver Application Server ABAP is a platform for running and developing applications based on the ABAP language from SAP, Germany. A security vulnerability exists in SAP NetWeaver Application Server ABAP that originates from allowing unauthorized read access, which could lead to informatio...

4.3CVSS6.1AI score0.002EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-3758

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions...

5.4CVSS5.5AI score0.00577EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2018-2598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Workbench component of Oracle MySQL subcomponent: Workbench: Security: Encryption. Supported versions that are affected are 6.3.10 an...

4.3CVSS5AI score0.01046EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/08/29 5:17 p.m.4 views

CVE-2025-33037 Qsync Central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...

7.2CVSS6.3AI score0.00477EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-53029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.1.10. Easily exploitable...

2.3CVSS6.3AI score0.00219EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-22000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.44 and Prior t...

4.6CVSS6.7AI score0.00309EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-22044

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component: Hotspot. Supported versions...

3.7CVSS6.4AI score0.01354EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2017-3320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Encryption. Supported versions that are affected are 5.7.16 and...

3.5CVSS5.4AI score0.00782EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2025-21548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Python. Supported versions that are affected are 9.1.0 and prior. Easily...

6.4CVSS6.8AI score0.00452EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2021-2341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Java S...

4.3CVSS6.7AI score0.04238EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/15 9:15 p.m.4 views

DEBIAN-CVE-2025-8959

HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9...

7.5CVSS5.6AI score0.00543EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/15 9:15 p.m.6 views

UBUNTU-CVE-2025-8959

HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9...

7.5CVSS6.8AI score0.00543EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2025/08/15 8:32 p.m.29 views

CVE-2025-8959

HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9...

7.5CVSS5.6AI score0.00543EPSS
SaveExploits0
OSV
OSV
added 2025/08/15 8:32 p.m.5 views

CVE-2025-8959 HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack

HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9...

7.5CVSS6.7AI score0.00543EPSS
SaveExploits0References4
Rows per page
Query Builder