Lucene search
+L

9925 matches found

OSV
OSV
added 2025/10/01 8:15 a.m.8 views

DEBIAN-CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7CVSS6.1AI score0.00181EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/01 8:15 a.m.8 views

CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7CVSS0.00181EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2025/10/01 8:15 a.m.4 views

CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7CVSS6.3AI score0.00181EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/01 8:15 a.m.5 views

UBUNTU-CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7CVSS6.1AI score0.00181EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/10/01 7:26 a.m.16 views

CVE-2025-11226 Conditional processing of logback.xml configuration file, in conjuction with Spring Framework and Janino

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7CVSS0.00181EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/01 7:26 a.m.71 views

CVE-2025-11226

CVE-2025-11226 is an ACE vulnerability in logback-core’s conditional configuration file processing. The attackable path is present in Java applications using logback-core versions up to 1.5.18 (some sources reference up to 1.5.34); exploitation can enable arbitrary code execution by compromising ...

7CVSS7.4AI score0.00181EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/01 7:26 a.m.14 views

CVE-2025-11226 Conditional processing of logback.xml configuration file, in conjuction with Spring Framework and Janino

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7CVSS7.4AI score0.00181EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/10/01 7:26 a.m.5 views

CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7CVSS6.1AI score0.00181EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/10/01 12:0 a.m.9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a contention condition in the lastcmd variable that could lead to post-release reuse or double release...

6.1AI score0.00106EPSS
SaveExploits0References4
GitLab Advisory Database
GitLab Advisory Database
added 2025/10/01 12:0 a.m.19 views

QOS.CH logback-core is vulnerable to Arbitrary Code Execution through file processing

QOS.CH logback-core versions up to 1.5.18 contain an ACE vulnerability in conditional configuration file processing in Java applications. This vulnerability allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting a malicious environment...

7CVSS7.3AI score0.00181EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2025/09/30 1:17 p.m.8 views

CVE-2025-9232 Out-of-bounds read in HTTP client no_proxy handling

Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...

5.9CVSS7AI score
SaveExploits0References15
Vulnrichment
Vulnrichment
added 2025/09/30 1:17 p.m.3 views

CVE-2025-9232 Out-of-bounds read in HTTP client no_proxy handling

Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...

6.7AI score0.02251EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/09/30 1:17 p.m.32 views

CVE-2025-9232 Out-of-bounds read in HTTP client no_proxy handling

Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...

0.02251EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/09/30 12:0 a.m.7 views

NewStart CGSL MAIN 6.06 : dbus Multiple Vulnerabilities (NS-SA-2025-0231)

The remote NewStart CGSL host, running version MAIN 6.06, has dbus packages installed that are affected by multiple vulnerabilities: - dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 and in some, less common, uses o...

7.1CVSS7AI score0.04477EPSS
SaveExploits9References33
Snyk
Snyk
added 2025/09/29 5:53 p.m.5 views

XML Injection

Overview Affected versions of this package are vulnerable to XML Injection when processing XML data with tags containing references to system properties or environment variables. An attacker can access sensitive information, such as credentials, file paths, or system configuration details, by...

8.7CVSS7.2AI score0.00458EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/29 3:16 p.m.9 views

CVE-2025-57516

OS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b allowing attackers to execute arbitrary commands via crafted DATABASE, USERNAME, or PASSWORD variables to the backupDB.bat file...

8.2CVSS0.01147EPSS
SaveExploits1References1
Redos
Redos
added 2025/09/24 12:0 a.m.11 views

ROS-20250924-09

The sftpdecodechanneldatatopacket function of the libssh library has a vulnerability related to integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service Vulnerability in libssh library's sshgetfingerprinthash function is...

8.8CVSS8.1AI score0.0144EPSS
SaveExploits0
Redos
Redos
added 2025/09/23 12:0 a.m.4 views

ROS-20250923-21

A vulnerability in the Golang programming language is related to insufficient validation of the PATH environment variable in the LookPath. Exploitation of the vulnerability could allow a remote attacker to escalate privileges on the system...

6.5CVSS6.5AI score0.00489EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2025/09/22 3:36 p.m.9 views

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.2.9 Security Update

New Red Hat build of Keycloak 26.2.9 packages are available from the Customer Portal Red Hat build of Keycloak 26.2.9 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security fixes...

4.9CVSS5.8AI score0.00727EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2025/09/22 3:35 p.m.7 views

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.2.9 Images Security Update

New images are available for Red Hat build of Keycloak 26.2.9 and Red Hat build of Keycloak 26.2.9 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...

4.9CVSS5.8AI score0.00727EPSS
SaveExploits0References1
Rows per page
Query Builder