Lucene search
K

43 matches found

OSV
OSV
added 2026/05/03 9:55 a.m.4 views

OESA-2026-2140 PackageKit security update

PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API. Security Fixes: PackageKit is a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro,...

8.8CVSS6AI score0.00153EPSS
Exploits10References2
Positive Technologies
Positive Technologies
added 2026/04/21 12:0 a.m.0 views

PT-2026-33926

This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative...

8.7CVSS5.8AI score0.00025EPSS
Exploits0References2
CVE
CVE
added 2025/10/21 12:29 a.m.9 views

CVE-2025-7851

CVE-2025-7851 affects TP-Link Omada gateways. Connected documents corroborate that an attacker may obtain the root shell on the underlying OS under restricted conditions, via issues described as unauthorized root access through a residual debug code/path and improper privilege management. The vul...

9.8CVSS6.6AI score0.00059EPSS
Exploits0References5Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-17804

Malware in sbrugna...

10CVSS9.5AI score0.00339EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-15651

Malware in sbrugna...

9CVSS8.7AI score0.00054EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2002-0747

Malware in sbrugna...

7.2CVSS6.4AI score0.00067EPSS
Exploits0References5
OSV
OSV
added 2025/09/18 9:15 p.m.0 views

CVE-2025-57295

H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials. The root user account has no password set, and the H3C user account uses the default password "admin," both stored in the /etc/shadow file. Attackers with network access ca...

8CVSS6.1AI score
Exploits0References2
CNNVD
CNNVD
added 2025/08/17 12:0 a.m.1 views

Kubernetes 安全漏洞

Kubernetes K8s is an open source system for automating the deployment, scaling, and management of containerized applications from the Kubernetes open source. A security vulnerability exists in Kubernetes K8s that stems from the default credentials enablement, which could lead to unauthorized root...

7.5CVSS6.8AI score0.00071EPSS
Exploits0References3
Redos
Redos
added 2025/08/06 12:0 a.m.3 views

ROS-20250806-07

The libblockdev library vulnerability is related to file system mount and drive management as a result of incorrect access delimitation when accessing the udisks daemon. as a result of incorrect access delimitation when accessing the udisks daemon. Exploitation of the vulnerability could allow an...

7CVSS8.4AI score0.00031EPSS
Exploits18
Veracode
Veracode
added 2024/10/25 7:53 a.m.6 views

Ununauthorized Root Access

github.com/kubernetes-sigs/image-builder is vulnerable to Unauthorized Root Access. The vulnerability is due to default credentials being enabled during the image build process with the Nutanix, OVA, QEMU, or raw providers, which could allow attackers to gain root access if they reach the VM wher...

9.8CVSS7.1AI score0.04868EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2024/07/24 12:0 a.m.2 views

AdTran SRG 834-5 HDC17600021F1 安全漏洞

The AdTran SRG 834-5 HDC17600021F1 is a Gigabit Ethernet gateway from Adtran USA. A security vulnerability exists in the AdTran SRG 834-5 HDC17600021F1 SmartOS version 11.1.1.1, which stems from the device having SSH enabled by default, which allows an attacker to gain unauthorized root access by...

8.8CVSS9.3AI score0.00145EPSS
Exploits0References4
OSV
OSV
added 2022/09/29 8:19 a.m.3 views

SUSE-SU-2022:3462-1 Security update for slurm_18_08

This update for slurm1808 fixes the following issues: - CVE-2022-31251: Fixed a potential security vulnerability in the test package bsc1201674. - CVE-2022-29500: Fixed an architectural flaw can be exploited to allow an unprivileged user to execute arbitrary processes as root bsc1199278. -...

9CVSS8.8AI score0.01932EPSS
Exploits1References7
CNNVD
CNNVD
added 2022/02/07 12:0 a.m.1 views

xrdp 数字错误漏洞

xrdp is an open source remote desktop protocol server from Neutrinolabs Labs. A numeric error vulnerability exists in xrdp, which stems from a product heap overflow integer underflow allowing any unauthenticated attacker with local access to the sesman server to execute code as root...

7.8CVSS7.6AI score0.0038EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2021/01/28 12:0 a.m.117 views

SUSE SLES12 Security Update : sudo (SUSE-SU-2021:0232-1)

This update for sudo fixes the following issues : A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges bsc1181090,CVE-2021-3156 It was possible for a user to test for the existence of a directory due to a Race Condition in sudoedit...

7.8CVSS7.1AI score0.92579EPSS
Exploits82References7
Exploit DB
Exploit DB
added 2018/10/22 12:0 a.m.39 views

Keybase keybase-redirector - '$PATH' Local Privilege Escalation

keybase-redirector is a setuid root binary. keybase-redirector calls the fusermount binary using a relative path and the application trusts the value of $PATH. This allows a local, unprivileged user to trick the application to executing a custom fusermount binary as root. Environment CentOS Linux...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2018/10/22 12:0 a.m.24 views

Keybase keybase-redirector - $PATH Local Privilege Escalation

Keybase keybase-redirector - $PATH Local Privilege Escalation keybase-redirector is a setuid root binary. keybase-redirector calls the fusermount binary using a relative path and the application trusts the value of $PATH. This allows a local, unprivileged user to trick the application to executin...

0.2AI score
Exploits0
seebug.org
seebug.org
added 2018/01/11 12:0 a.m.59 views

Sophos XG from Unauthenticated Persistent XSS to Unauthorized Root Access(CVE-2017-18014)

Vulnerability Summary The following advisory describes an unauthenticated persistent XSS that leads to unauthorized root access found in Sophos XG version 17. Sophos XG Firewall “provides unprecedented visibility into your network, users, and applications directly from the all-new control center...

6.9AI score0.00178EPSS
Exploits2
OpenVAS
OpenVAS
added 2009/05/05 12:0 a.m.11 views

HP-UX Update for CIFS Server (Samba) HPSBUX00251

Check for the Version of CIFS Server Samba OpenVAS Vulnerability Test HP-UX Update for CIFS Server Samba HPSBUX00251 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

7.4AI score
Exploits0References2
OpenVAS
OpenVAS
added 2009/05/05 12:0 a.m.9 views

HP-UX Update for CIFS Server (Samba) HPSBUX00254

Check for the Version of CIFS Server Samba OpenVAS Vulnerability Test HP-UX Update for CIFS Server Samba HPSBUX00254 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

7.4AI score
Exploits0References2
OpenVAS
OpenVAS
added 2009/05/05 12:0 a.m.9 views

HP-UX Update for CIFS Server (Samba) HPSBUX00251

Check for the Version of CIFS Server Samba OpenVAS Vulnerability Test HP-UX Update for CIFS Server Samba HPSBUX00251 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

7.4AI score
Exploits0References2
Rows per page
Query Builder