Lucene search
+L

4985 matches found

Positive Technologies
Positive Technologies
•added 2025/02/21 12:00 a.m.•17 views

PT-2025-7418 · Ibm · Ibm Security Verify Gateway For Windows Login +2

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Bridge Directory Sync versions 1.0.1 through 1.0.12 IBM Security Verify Gateway for Windows Login versions 1.0.1 through 1.0.10 IBM Security Verify Gateway for Radius versions 1.0.1 through 1.0.11 Description: The issue...

3.3CVSS6.4AI score0.00155EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/02/21 12:00 a.m.•20 views

PT-2025-7417 · Ibm · Ibm Security Verify Gateway For Windows Login +2

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Bridge Directory Sync versions 1.0.1 through 1.0.12 IBM Security Verify Gateway for Windows Login versions 1.0.1 through 1.0.10 IBM Security Verify Gateway for Radius versions 1.0.1 through 1.0.11 Description: The issue...

5.5CVSS5.6AI score0.00136EPSS
SaveExploits0References6
OSV
OSV
•added 2025/02/20 4:15 p.m.•16 views

CVE-2025-0161

IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation...

7.8CVSS6.1AI score0.00237EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/20 4:02 p.m.•19 views

CVE-2025-0161 IBM Security Verify Access Appliance code injection

IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation...

7.8CVSS7.8AI score0.00237EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/20 4:02 p.m.•47 views

CVE-2025-0161 IBM Security Verify Access Appliance code injection

IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation...

7.8CVSS0.00237EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/20 4:02 p.m.•84 views

CVE-2025-0161

IBM Security Verify Access Appliance (Affecting 10.0.0.0–10.0.9.0 and 11.0.0.0) is vulnerable to local code execution due to improper restrictions on code generation (CWE-94). The IBM Security Bulletin details that a local user could exploit this to execute arbitrary code. Remediation is to upgra...

7.8CVSS7.8AI score0.00237EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/20 12:00 a.m.•3 views

CVE-2025-0161: Improper Control of Generation of Code

IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation...

7.8CVSS6.4AI score0.00237EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/20 12:00 a.m.•16 views

PT-2025-7457 · Ibm · Ibm Security Verify Access Appliance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance versions 10.0.0.0 through 10.0.0.9 and version 11.0.0.0 Description: The issue allows a local user to execute arbitrary code due to improper restrictions on code generation. Recommendations: For versions...

7.8CVSS7.7AI score0.00237EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/02/20 12:00 a.m.•14 views

IBM Security Verify Access 代码注入漏洞

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. A code injection vulnerability exists in IBM Security Verify Access versions 10.0.0.0 through 10.0.0.9 and 11.0.0.0, which stems from improper restrictions on code generation...

7.8CVSS7.5AI score0.00237EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2025/02/18 7:33 p.m.•21 views

Security Bulletin: A Security Vulnerability was discovered in IBM Security Verify Directory (CVE-2024-45650)

Summary A Security Vulnerability was addressed in IBM Security Verify Directory. Vulnerability Details CVEID:CVE-2024-45650 DESCRIPTION: IBM Security Verify Directory 10.0 is vulnerable to a denial of service when sending an LDAP extended operation. CWE:CWE-754: Improper Check for Unusual or...

7.5CVSS7.5AI score0.00401EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/02/18 7:32 p.m.•27 views

Security Bulletin: A Security Vulnerability discovered in IBM Security Verify Directory (CVE-2022-2068) has been addressed.

Summary A Security Vulnerability discovered in IBM Security Verify Directory Server containers has been addressed Vulnerability Details CVEID:CVE-2022-2068 DESCRIPTION: OpenSSL could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of user-supplie...

10CVSS9.8AI score0.95404EPSS
SaveExploits1Affected Software1
OSV
OSV
•added 2025/02/18 7:15 p.m.•11 views

DEBIAN-CVE-2025-26465

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. Fo...

6.8CVSS6.3AI score0.07723EPSS
SaveExploits4References1
OSV
OSV
•added 2025/02/18 7:15 p.m.•16 views

AZL-56894 CVE-2025-26465 affecting package openssh for versions less than 9.8p1-3

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. Fo...

6.8CVSS7.1AI score0.07723EPSS
SaveExploits4References1
GithubExploit
GithubExploit
•added 2025/02/18 4:53 p.m.•987 views

Exploit for Detection of Error Condition Without Action in Openbsd Openssh

CVE-2025-26465 The OpenSSH client contains a logic error betw...

6.8CVSS6.6AI score0.07723EPSS
SaveExploits4
SUSE Linux
SUSE Linux
•added 2025/02/18 4:42 p.m.•12 views

Security update for openssh

This update for openssh fixes the following issues: CVE-2025-26465: Fixed MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client bsc1237040. CVE-2025-26466: Fixed DoS attack against OpenSSH's client and server bsc1237041. Patch Instructions: To install this SUSE update use the SUSE...

8.2CVSS6.9AI score0.39845EPSS
SaveExploits6References8
SUSE CVE
SUSE CVE
•added 2025/02/18 1:36 p.m.•13 views

SUSE CVE-2025-26465

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. Fo...

6.8CVSS6.5AI score0.07723EPSS
SaveExploits4References13
IBM Security Bulletins
IBM Security Bulletins
•added 2025/02/18 8:47 a.m.•23 views

Security Bulletin: IBM Db2 used by IBM Security Verify Governance - Container has multiple vulnerabilities

Summary IBM Security Verify Governance ISVG - Container uses IBM Db2. Information about security vulnerabilities affecting IBM Db2 has been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...

7.5CVSS6.9AI score0.00725EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2025/02/18 12:00 a.m.•18 views

UBUNTU-CVE-2025-26465

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. Fo...

6.8CVSS6.6AI score0.07723EPSS
SaveExploits4References4
CNVD
CNVD
•added 2025/02/17 12:00 a.m.•21 views

IBM Security Verify Access Cross-Site Request Forgery Vulnerability

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated acce...

6.5CVSS6.3AI score0.00208EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/02/17 12:00 a.m.•22 views

IBM Security Verify Access Information Disclosure Vulnerability (CNVD-2025-06210)

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated acce...

7.5CVSS5.9AI score0.00248EPSS
SaveExploits0References1
Rows per page
Query Builder