Lucene search
+L

9964 matches found

Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2024-40647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sentry-sdk is the official Python SDK for Sentry.io. A bug in Sentry's Python SDK 2.8.0 allows the environment variables to be passed to subprocesses despite th...

5.3CVSS5.8AI score0.002EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2021-32747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Icinga Web 2 is an open source monitoring web interface, framework, and command-line interface. A vulnerability in which custom variables are exposed to...

6.5CVSS6.3AI score0.01381EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2016-8628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variable...

9.1CVSS8.2AI score0.03211EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2020-14370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible...

5.3CVSS6.3AI score0.01402EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2016-7543

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables. CVE-2016-7543 Note th...

8.4CVSS7.8AI score0.00576EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/03/02 4:22 p.m.•42 views

CVE-2025-0985

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD stores potentially sensitive information in environment variables that could be obtained by a local user...

6.5CVSS5.8AI score0.00262EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/28 5:15 p.m.•32 views

CVE-2025-0985

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD stores potentially sensitive information in environment variables that could be obtained by a local user...

6.5CVSS0.00262EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/02/28 5:15 p.m.•21 views

CVE-2025-0985

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD stores potentially sensitive information in environment variables that could be obtained by a local user...

5.5CVSS5.7AI score0.00262EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/28 4:21 p.m.•15 views

CVE-2025-0985 IBM MQ information disclosure

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD stores potentially sensitive information in environment variables that could be obtained by a local user...

5.5CVSS5.7AI score0.00262EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/28 4:21 p.m.•114 views

CVE-2025-0985

Summary (CVE-2025-0985): IBM MQ 9.3 LTS/9.3 CD and 9.4 LTS/9.4 CD may store potentially sensitive information in environment variables that could be obtained by a local user. The CVSSv3.1 base score is 6.5 (Medium), with impact on confidentiality only. No exploitation details are provided in the ...

6.5CVSS5.7AI score0.00262EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/02/28 4:21 p.m.•41 views

CVE-2025-0985 IBM MQ information disclosure

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD stores potentially sensitive information in environment variables that could be obtained by a local user...

5.5CVSS0.00262EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/28 12:00 a.m.•26 views

IBM MQ security vulnerabilities

IBM MQ is a messaging middleware product from International Business Machines IBM. The product focuses on providing a reliable and validated messaging backbone for Service Oriented Architecture SOA. A security vulnerability exists in IBM MQ that stems from storing sensitive information in...

6.5CVSS5.8AI score0.00262EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/02/28 12:00 a.m.•22 views

PT-2025-9114 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 9.3 LTS through 9.4 CD Description: The issue concerns the storage of potentially sensitive information in environment variables, which could be accessed by a local user. Recommendations: For IBM MQ versions 9.3 LTS through 9....

6.5CVSS5.7AI score0.00262EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/02/27 12:00 a.m.•25 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the firmware: qcom: scm module not cleaning up global variables when probing fails...

5.5CVSS6.4AI score0.00204EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/02/26 3:29 p.m.•38 views

CVE-2025-27336

Cross-Site Request Forgery CSRF vulnerability in Alex Prokopenko / JustCoded Just Variables just-wp-variables allows Cross Site Request Forgery.This issue affects Just Variables: from n/a through = 1.2.3...

4.3CVSS8.6AI score0.00152EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/26 7:01 a.m.•18 views

CVE-2022-49638

In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl. While reading icmp sysctl variables, they can be changed concurrently. So, we need to add READONCE to avoid data-races...

4.7CVSS0.00178EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2025/02/26 2:23 a.m.•12 views

CVE-2022-49638 icmp: Fix data-races around sysctl.

In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl. While reading icmp sysctl variables, they can be changed concurrently. So, we need to add READONCE to avoid data-races...

5.8AI score0.00178EPSS
SaveExploits0References8
CVE
CVE
•added 2025/02/26 2:23 a.m.•196 views

CVE-2022-49639

CVE-2022-49639 refers to a Linux kernel issue in the cipso subsystem where sysctl read operations could race with concurrent writes. The root cause is missing synchronization while reading cipso sysctl variables, and the fix is to add READ_ONCE() to prevent data races. Public documents in the con...

4.7CVSS5.8AI score0.00178EPSS
SaveExploits0References8Affected Software1
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•18 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from uninitialized variables in usbread8 and related functions in the staging rtl8712 driver...

5.5CVSS6.4AI score0.00262EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•10 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a page error in Apple firmware code when reading db and dbx efi variables on Apple T2 Macs...

5.5CVSS6.4AI score0.0017EPSS
SaveExploits0References7
Rows per page
Query Builder