Lucene search
+L

84125 matches found

Cvelist
Cvelist
added 2025/12/22 2:21 p.m.41 views

CVE-2025-26379 Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG use of Cryptographically Weak Pseudo-Random Number Generator

Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets...

7.2CVSS0.00175EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.10 views

PT-2025-52650

Name of the Vulnerable Software and Affected Versions Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG affected versions not specified Description The software utilizes a weak pseudo-random number generator. This could allow an attacker to read or inject encrypted PowerG packets...

7.2CVSS6.3AI score0.00175EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/12/21 12:0 a.m.6 views

WordPress plugin Web to SugarCRM Lead 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.00131EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/12/20 12:0 a.m.7 views

WordPress plugin WP Hallo Welt 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-site reques...

6.1CVSS5.9AI score0.00125EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/12/20 12:0 a.m.5 views

WordPress plugin WP DB Booster 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

4.3CVSS6.4AI score0.00129EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/20 12:0 a.m.6 views

WordPress plugin Amazon affiliate lite Plugin 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

5.4CVSS6.3AI score0.00103EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/12/17 12:23 a.m.3 views

SUSE CVE-2025-68313

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add RDSEED fix for Zen5 There's an issue with RDSEED's 16-bit and 32-bit register output variants on Zen5 which return a random value of 0 "at a rate inconsistent with randomness while incorrectly signaling success...

6.1CVSS6.5AI score0.00161EPSS
SaveExploits0References21
Packet Storm News
Packet Storm News
added 2025/12/17 12:0 a.m.7 views

Random Coding for Long-Range Continuous-Variable QKD

Quantum Key Distribution QKD schemes are key exchange protocols based on the physical properties of quantum channels. They avoid the computational-hardness assumptions that underlie the security of classical key exchange. Continuous-Variable QKD CVQKD, in contrast to qubit-based discrete-variable...

6.5AI score
SaveExploits0
CNNVD
CNNVD
added 2025/12/17 12:0 a.m.6 views

WordPress plugin Download Plugins and Themes in ZIP from Dashboard 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.4AI score0.00106EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/16 6:31 p.m.10 views

EUVD-2025-203756

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add RDSEED fix for Zen5 There's an issue with RDSEED's 16-bit and 32-bit register output variants on Zen5 which return a random value of 0 "at a rate inconsistent with randomness while incorrectly signaling success...

6AI score0.00161EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/12/16 3:39 p.m.31 views

CVE-2025-68313 x86/CPU/AMD: Add RDSEED fix for Zen5

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add RDSEED fix for Zen5 There's an issue with RDSEED's 16-bit and 32-bit register output variants on Zen5 which return a random value of 0 "at a rate inconsistent with randomness while incorrectly signaling success...

0.00161EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
added 2025/12/16 12:0 a.m.7 views

Hybrid Ensemble Method for Detecting Cyber-Attacks in Water Distribution Systems Using the BATADAL Dataset

The cybersecurity of Industrial Control Systems that manage critical infrastructure such as Water Distribution Systems has become increasingly important as digital connectivity expands. BATADAL benchmark data is a good source of testing intrusion detection techniques, but it presents several...

7AI score
SaveExploits0
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.5 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a problem with the implementation of the RDSEED instruction, which could lead to a random number generation...

6AI score0.00161EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
added 2025/12/14 12:0 a.m.6 views

Hyperparameter Tuning-Based Optimized Performance Analysis of Machine Learning Algorithms for Network Intrusion Detection

Network Intrusion Detection Systems NIDS are essential for securing networks by identifying and mitigating unauthorized activities indicative of cyberattacks. As cyber threats grow increasingly sophisticated, NIDS must evolve to detect both emerging threats and deviations from normal behavior. Th...

6.8AI score
SaveExploits0
Veracode
Veracode
added 2025/12/13 4:33 a.m.7 views

Weak Encryption

org.apache.streampark, streampark is vulnerable to weak encryption. The vulnerability is due to the use of AES encryption in ECB mode along with a weak random number generator for protecting sensitive data, which allows an attacker to potentially expose or recover sensitive authentication...

7.5CVSS6.6AI score0.0022EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
added 2025/12/13 12:0 a.m.6 views

WordPress plugin Popover Windows 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

4.3CVSS6.4AI score0.00106EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/12 3:30 p.m.5 views

GHSA-749J-2HP6-8CXM Apache StreamPark uses a Weak Encryption Algorithm

Weak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for encrypting sensitive data, including JWT tokens, may have risked exposing sensitive authentication data This issue affects Apache StreamPark: from 2.0.0 before 2.1.7. Users are...

8.7CVSS7AI score0.0022EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2025/12/12 3:30 p.m.15 views

Apache StreamPark uses a Weak Encryption Algorithm

Weak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for encrypting sensitive data, including JWT tokens, may have risked exposing sensitive authentication data This issue affects Apache StreamPark: from 2.0.0 before 2.1.7. Users are...

7.5CVSS7.1AI score0.0022EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2025/12/12 3:15 p.m.10 views

CVE-2025-54981

Weak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for encrypting sensitive data, including JWT tokens, may have risked exposing sensitive authentication data This issue affects Apache StreamPark: from 2.0.0 before 2.1.7. Users are...

7.5CVSS0.0022EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/12 3:10 p.m.4 views

CVE-2025-54981 Apache StreamPark: Weak Encryption Algorithm in StreamPark

Weak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for encrypting sensitive data, including JWT tokens, may have risked exposing sensitive authentication data This issue affects Apache StreamPark: from 2.0.0 before 2.1.7. Users are...

6.7AI score0.0022EPSS
SaveExploits0References1
Rows per page
Query Builder