Lucene search
+L

7073 matches found

Snyk
Snyk
added 2025/06/18 8:49 a.m.2 views

Uncontrolled Search Path Element

Overview Affected versions of this package are vulnerable to Uncontrolled Search Path Element via the unpack function, when using the CLI flag --remote-image on untrusted container images. An attacker can write arbitrary files to the host system. This allows the attacker to create or overwrite...

6.5CVSS7.2AI score0.00217EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/06/17 7:52 p.m.6 views

Security Bulletin: Security Vulnerability in Apache Commons IO Affect IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2024-47554)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerability in Apache Commons IO Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The...

4.3CVSS6.7AI score0.01315EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2025/06/17 7:15 p.m.10 views

CVE-2025-49487

An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services WFBSS agent could have allowed an attacker with physical access to a machine to execute arbitrary code on affected installations. An attacker must have had physical access to the target system in...

6.8CVSS6.2AI score0.00283EPSS
SaveExploits0References2
OSV
OSV
added 2025/06/17 7:15 p.m.9 views

CVE-2025-49155

An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations...

8.8CVSS6.3AI score0.00915EPSS
SaveExploits0References2
NVD
NVD
added 2025/06/17 7:15 p.m.12 views

CVE-2025-49155

An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations...

8.8CVSS0.00915EPSS
SaveExploits0References2
OSV
OSV
added 2025/06/17 7:15 p.m.12 views

CVE-2025-49158

An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

7.8CVSS6AI score0.00161EPSS
SaveExploits0References2
NVD
NVD
added 2025/06/17 7:15 p.m.12 views

CVE-2025-49158

An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

7.8CVSS0.00161EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/06/17 6:43 p.m.8 views

CVE-2025-49487

An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services WFBSS agent could have allowed an attacker with physical access to a machine to execute arbitrary code on affected installations. An attacker must have had physical access to the target system in...

6.8CVSS7.6AI score0.00283EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/06/17 6:42 p.m.4 views

CVE-2025-49158

An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

6.7CVSS7.5AI score0.00161EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/06/17 6:42 p.m.17 views

CVE-2025-49158

An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

6.7CVSS0.00161EPSS
SaveExploits0References2
CVE
CVE
added 2025/06/17 6:42 p.m.46 views

CVE-2025-49158

CVE-2025-49158 is an uncontrolled search path vulnerability in Trend Micro Apex One security agent that could allow a local attacker to escalate privileges, given the attacker already has the ability to run low-privileged code. Connected sources confirm affected product is Trend Micro Apex One (s...

7.8CVSS6.8AI score0.00161EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/17 6:42 p.m.7 views

CVE-2025-49155

An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations...

8.8CVSS7.8AI score0.00915EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/06/17 6:42 p.m.22 views

CVE-2025-49155

An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations...

8.8CVSS0.00915EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/17 12:00 a.m.9 views

Trend Micro Apex One 代码问题漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that stems from an uncontrolled search path that could lead to local elevation of privilege...

7.8CVSS6.1AI score0.00161EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/06/17 12:00 a.m.10 views

Trend Micro Apex One Data Loss Prevention 代码问题漏洞

Trend Micro Apex One Data Loss Prevention is a data exfiltration prevention system from Trend Micro. A security vulnerability exists in Trend Micro Apex One Data Loss Prevention that stems from an uncontrolled search path that could lead to the execution of arbitrary code...

8.8CVSS6.7AI score0.00915EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/06/17 12:00 a.m.7 views

PT-2025-34322

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: The Foxit PDF Reader Update Service contains a local privilege escalation issue due to an uncontrolled search path element. This allows for potential exploitation by a local...

7.8CVSS7.5AI score0.00178EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/06/17 12:00 a.m.12 views

Trend Micro Worry-Free Business Security Services 代码问题漏洞

Trend Micro Worry-Free Business Security Services is an endpoint security solution from Trend Micro. A security vulnerability exists in Trend Micro Worry-Free Business Security Services that stems from an uncontrolled search path that could lead to the execution of arbitrary code...

6.8CVSS6.8AI score0.00283EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2025/06/16 4:26 p.m.25 views

Moderate: Red Hat Security Advisory: wireshark security update

An update for wireshark is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.8CVSS6.1AI score0.00301EPSS
SaveExploits0References3
OSV
OSV
added 2025/06/16 12:00 a.m.9 views

ALSA-2025:9121 Moderate: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes: wireshark: Uncontrolled Recursion in Wireshark CVE-2025-1492 For more details about the security issues, including the impact, a CVSS score,...

7.8CVSS7.1AI score0.00301EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.7 views

RHEL 10 : wireshark (RHSA-2025:9121)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9121 advisory. The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes:...

7.8CVSS5.8AI score0.00301EPSS
SaveExploits0References6
Rows per page
Query Builder