Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-0144

Malware in sbrugna...

9.8CVSS8.6AI score0.03303EPSS
Exploits0References10
Cvelist
Cvelist
added 2025/08/12 11:17 a.m.4 views

CVE-2025-40769

A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions V3.0. The affected application uses a Content Security Policy that allows unsafe script execution methods. This could allow an attacker to execute unauthorized scripts, potentially leading to cross-site...

7.5CVSS0.00025EPSS
Exploits0References1
CVE
CVE
added 2025/08/12 11:17 a.m.10 views

CVE-2025-40769

CVE-2025-40769 affects Siemens SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) prior to version 3.0. Root cause: a Content Security Policy that allows unsafe script execution methods, enabling potential cross-site scripting via unauthorized scripts. Impact is described as high for confidentiality, in...

7.5CVSS6.6AI score0.00025EPSS
Exploits0References1
OSV
OSV
added 2023/08/16 3:30 p.m.23 views

GHSA-4VQP-PCM3-73XP Jenkins Folders Plugin cross-site request forgery vulnerability

Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to copy an item, which could potentially automatically approve unsandboxed scripts and allo...

8CVSS8.6AI score0.00149EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2023/08/16 3:30 p.m.27 views

Jenkins Folders Plugin cross-site request forgery vulnerability

Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to copy an item, which could potentially automatically approve unsandboxed scripts and allo...

8.8CVSS6.8AI score0.00149EPSS
Exploits0References4Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 4:39 a.m.2 views

SUSE CVE-2017-14867

Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands such as cvsserver, which allows attackers to execute arbitrary OS commands via shell metacharacters in a module name. The vulnerable code i...

7.8CVSS7.9AI score0.06534EPSS
Exploits0References10
OSV
OSV
added 2008/06/16 9:41 p.m.1 views

DEBIAN-CVE-2008-2712

Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using 1 filetype.vim, 3 xpm.vim, 4 gzipvim, and 5 netrw. NOTE: the...

9.3CVSS7.8AI score0.16974EPSS
Exploits0References1
Rows per page
Query Builder