Lucene search
+L

4963 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/14 1:30 a.m.3 views

Malicious code in projects_workspace_events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1577d2b286c60b8eded2d7d5b4a2393205ed7407c3173cabd9c87ed769e025cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2025/03/14 1:30 a.m.5 views

MAL-2025-2403 Malicious code in projects_workspace_events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1577d2b286c60b8eded2d7d5b4a2393205ed7407c3173cabd9c87ed769e025cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2025/03/11 12:00 a.m.5 views

VulnCheck KEV: CVE-2021-22054

Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request forgery SSRF vulnerability that could allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information...

7.5CVSS7.3AI score0.97369EPSS
SaveExploits1References1
The Hacker News
The Hacker News
added 2025/03/10 11:00 a.m.22 views

Why The Modern Google Workspace Needs Unified Security

The Need For Unified Security Google Workspace is where teams collaborate, share ideas, and get work done. But while it makes work easier, it also creates new security challenges. Cybercriminals are constantly evolving, finding ways to exploit misconfigurations, steal sensitive data, and hijack...

7AI score
SaveExploits0
Citrix
Citrix
added 2025/03/07 12:00 a.m.20 views

Citrix Cloud: Workspace App configuration is missing silent plugin install for teams or other apps

To understand reason for certainplugin install for teams or other apps is currently unavailable along workspace configuration of Daas console On trying to enable the "Updates and Plug-ins" options for MSTeam, WebEx or Zoom the options to enabled or disable the below are not showing or missing in...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2025/02/25 12:00 a.m.7 views

openSUSE Security Advisory (openSUSE-SU-2024:0161-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.1AI score0.00296EPSS
SaveExploits0References5
Citrix
Citrix
added 2025/02/10 12:00 a.m.20 views

Citrix Workspace App for Windows - Blank window and no authentication prompt

Citrix Workspace App for Windows SelfService does not display authentication prompt. It stays with a blank screen. End user can browse the store URL, login and launch apps/desktops successfully...

7.3AI score
SaveExploits0
Citrix
Citrix
added 2025/02/09 12:00 a.m.696 views

VDA launch failure via Workspace and browser with error "VDA refused connection"

While launching the applications after successful gateway authentication from the browser and Citrix workspace app. users get error "Gateway authentication failed because VDA refused connection "...

7.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/05 12:13 a.m.18 views

CVE-2024-4287

In mintplex-labs/anything-llm, a vulnerability exists due to improper input validation in the workspace update process. Specifically, the application fails to validate or format JSON data sent in an HTTP POST request to /api/workspace/:workspace-slug/update, allowing it to be executed as part of ...

8.1CVSS7.9AI score0.0061EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/04 10:48 p.m.11 views

CVE-2024-44106

Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

8.8CVSS8.5AI score0.00245EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:47 p.m.7 views

CVE-2024-44104

An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

8.8CVSS8.6AI score0.00237EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:47 p.m.6 views

CVE-2024-44105

Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to obtain OS credentials...

8.2CVSS7.7AI score0.00163EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:46 p.m.7 views

CVE-2024-44103

DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

8.8CVSS8.5AI score0.00245EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:46 p.m.12 views

CVE-2024-44107

DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges and achieve arbitrary code execution...

8.8CVSS8.7AI score0.00266EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:42 p.m.9 views

CVE-2024-8012

An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

7.8CVSS7.8AI score0.00268EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:41 p.m.11 views

CVE-2024-8496

Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local authenticated attacker to achieve local privilege escalation...

7.8CVSS6.5AI score0.0021EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2025/02/03 4:38 p.m.27 views

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.18.0 release

Red Hat OpenShift Dev Spaces 3.18 has been released. All containers have been updated to include feature enhancements, bug fixes and CVE fixes. Following the Red Hat Product Security standards this update is rated as having a security impact of Important. The Common Vulnerability Scoring System...

9.1CVSS6.8AI score0.03153EPSS
SaveExploits3References8
BDU FSTEC
BDU FSTEC
added 2025/02/03 12:00 a.m.14 views

The vulnerability of the Plasma Workspace graphical environment, related to incorrect session duration, allows a intruder to trigger a service failure.

The vulnerability of the Plasma Workspace graphical environment is related to incorrect session duration settings. Exploiting this vulnerability can allow an attacker to trigger a service failure...

7.8CVSS7.1AI score0.00296EPSS
SaveExploits0References11Affected Software4
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/29 7:19 p.m.50 views

Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in multiple Open-Source Software (OSS) components

Summary There are vulnerabilities in multiple Open-Source Software OSS components consumed by IBM Planning Analytics Workspace. These issues have been addressed in IBM Planning Analytics Workspace by upgrading or removing the vulnerable libraries. Please refer to the table in the Related...

9.1CVSS9AI score0.91969EPSS
SaveExploits5Affected Software4
Citrix
Citrix
added 2025/01/22 12:00 a.m.16 views

Configuring USB Device Auto redirection on newer Citrix workspace App for Windows

USB Device Auto redirection configuration on newer Citrix workspace App for Windows...

7.1AI score
SaveExploits0
Rows per page
Query Builder