Lucene search
K

35 matches found

Positive Technologies
Positive Technologies
added 2026/04/21 12:0 a.m.0 views

PT-2026-33926

This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative...

8.7CVSS5.8AI score0.00025EPSS
Exploits0References2
CVE
CVE
added 2025/10/21 12:29 a.m.12 views

CVE-2025-7851

CVE-2025-7851 affects TP-Link Omada gateways. Connected documents corroborate that an attacker may obtain the root shell on the underlying OS under restricted conditions, via issues described as unauthorized root access through a residual debug code/path and improper privilege management. The vul...

9.8CVSS6.6AI score0.00059EPSS
Exploits0References5Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2002-0747

Malware in sbrugna...

7.2CVSS6.4AI score0.00067EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-17804

Malware in sbrugna...

10CVSS9.5AI score0.00339EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-15651

Malware in sbrugna...

9CVSS8.7AI score0.00054EPSS
Exploits1References3
OSV
OSV
added 2025/09/18 9:15 p.m.1 views

CVE-2025-57295

H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials. The root user account has no password set, and the H3C user account uses the default password "admin," both stored in the /etc/shadow file. Attackers with network access ca...

8CVSS6.1AI score
Exploits0References2
CNNVD
CNNVD
added 2025/08/17 12:0 a.m.2 views

Kubernetes 安全漏洞

Kubernetes K8s is an open source system for automating the deployment, scaling, and management of containerized applications from the Kubernetes open source. A security vulnerability exists in Kubernetes K8s that stems from the default credentials enablement, which could lead to unauthorized root...

7.5CVSS6.8AI score0.00071EPSS
Exploits0References3
Redos
Redos
added 2025/08/06 12:0 a.m.5 views

ROS-20250806-07

The libblockdev library vulnerability is related to file system mount and drive management as a result of incorrect access delimitation when accessing the udisks daemon. as a result of incorrect access delimitation when accessing the udisks daemon. Exploitation of the vulnerability could allow an...

7CVSS8.4AI score0.00031EPSS
Exploits18
Veracode
Veracode
added 2024/10/25 7:53 a.m.6 views

Ununauthorized Root Access

github.com/kubernetes-sigs/image-builder is vulnerable to Unauthorized Root Access. The vulnerability is due to default credentials being enabled during the image build process with the Nutanix, OVA, QEMU, or raw providers, which could allow attackers to gain root access if they reach the VM wher...

9.8CVSS7.1AI score0.05EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2024/07/24 12:0 a.m.2 views

AdTran SRG 834-5 HDC17600021F1 安全漏洞

The AdTran SRG 834-5 HDC17600021F1 is a Gigabit Ethernet gateway from Adtran USA. A security vulnerability exists in the AdTran SRG 834-5 HDC17600021F1 SmartOS version 11.1.1.1, which stems from the device having SSH enabled by default, which allows an attacker to gain unauthorized root access by...

8.8CVSS9.3AI score0.00145EPSS
Exploits0References4
OSV
OSV
added 2022/09/29 8:19 a.m.3 views

SUSE-SU-2022:3462-1 Security update for slurm_18_08

This update for slurm1808 fixes the following issues: - CVE-2022-31251: Fixed a potential security vulnerability in the test package bsc1201674. - CVE-2022-29500: Fixed an architectural flaw can be exploited to allow an unprivileged user to execute arbitrary processes as root bsc1199278. -...

9CVSS8.8AI score0.01932EPSS
Exploits1References7
CNNVD
CNNVD
added 2022/02/07 12:0 a.m.4 views

xrdp 数字错误漏洞

xrdp is an open source remote desktop protocol server from Neutrinolabs Labs. A numeric error vulnerability exists in xrdp, which stems from a product heap overflow integer underflow allowing any unauthenticated attacker with local access to the sesman server to execute code as root...

7.8CVSS7.6AI score0.0038EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2021/01/28 12:0 a.m.117 views

SUSE SLES12 Security Update : sudo (SUSE-SU-2021:0232-1)

This update for sudo fixes the following issues : A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges bsc1181090,CVE-2021-3156 It was possible for a user to test for the existence of a directory due to a Race Condition in sudoedit...

7.8CVSS7.1AI score0.92579EPSS
Exploits82References7
exploitpack
exploitpack
added 2018/10/22 12:0 a.m.24 views

Keybase keybase-redirector - $PATH Local Privilege Escalation

Keybase keybase-redirector - $PATH Local Privilege Escalation keybase-redirector is a setuid root binary. keybase-redirector calls the fusermount binary using a relative path and the application trusts the value of $PATH. This allows a local, unprivileged user to trick the application to executin...

0.2AI score
Exploits0
Exploit DB
Exploit DB
added 2018/10/22 12:0 a.m.39 views

Keybase keybase-redirector - '$PATH' Local Privilege Escalation

keybase-redirector is a setuid root binary. keybase-redirector calls the fusermount binary using a relative path and the application trusts the value of $PATH. This allows a local, unprivileged user to trick the application to executing a custom fusermount binary as root. Environment CentOS Linux...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.9 views

Gentoo Security Advisory GLSA 200409-11 (star)

The remote host is missing updates announced in advisory GLSA 200409-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7.2AI score0.00085EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.18 views

Debian: Security Advisory (DSA-139)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7.2AI score0.00153EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.17 views

Debian Security Advisory DSA 146-2 (dietlibc)

The remote host is missing an update to dietlibc announced via advisory DSA 146-2. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.5AI score0.08258EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.24 views

Debian Security Advisory DSA 143-1 (krb5)

The remote host is missing an update to krb5 announced via advisory DSA 143-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.5AI score0.08258EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.33 views

Debian Security Advisory DSA 142-1 (openafs)

The remote host is missing an update to openafs announced via advisory DSA 142-1. OpenVAS Vulnerability Test $Id: deb1421.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 142-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

10CVSS1.1AI score0.08258EPSS
Exploits3
Rows per page
Query Builder