Lucene search
+L

2876 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 6:57 p.m.•18 views

CVE-2021-24788

The Batch Cat WordPress plugin through 0.3 defines 3 custom AJAX actions, which both require authentication but are available for all roles. As a result, any authenticated user including simple subscribers can add/set/delete arbitrary categories to posts...

6.5CVSS6.9AI score0.00901EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/22 6:15 p.m.•24 views

CVE-2021-1949

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

8.4CVSS7.5AI score0.00165EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/19 5:15 p.m.•17 views

CVE-2025-4940

A vulnerability, which was classified as critical, has been found in 1000 Projects Daily College Class Work Report Book 1.0. This issue affects some unknown processing of the file /admininfo.php. The manipulation of the argument batch leads to sql injection. The attack may be initiated remotely...

6.9CVSS5.8AI score0.00486EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/19 12:00 a.m.•6 views

CVE-2025-4940: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in 1000 Projects Daily College Class Work Report Book 1.0. This issue affects some unknown processing of the file /admininfo.php. The manipulation of the argument batch leads to sql injection. The attack may be initiated remotely...

7.5CVSS7AI score0.00486EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/19 12:00 a.m.•17 views

1000 Projects Daily College Class Work Report Book 注入漏洞

1000 Projects Daily College Class Work Report Book is an open source college class work report book by 1000 Projects. An injection vulnerability exists in 1000 Projects Daily College Class Work Report Book version 1.0, which originates from SQL injection due to the operation of the parameter batc...

7.5CVSS7.8AI score0.00486EPSS
SaveExploits1References5
Snyk
Snyk
•added 2025/05/17 6:43 a.m.•12 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the batchForceLogout operation, accessible via the /monitor/online/batchForceLogout endpoint. A user can bypass authorization controls to force another user offline by supplying a different user's ID in the ids...

6CVSS6.9AI score0.0045EPSS
SaveExploits1References2
OSV
OSV
•added 2025/05/09 7:16 a.m.•17 views

UBUNTU-CVE-2025-37868

In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: fix notifier vs folio deadlock User is reporting what smells like notifier vs folio deadlock, where migratepagesbatch on core kernel side is holding folio locks and then interacting with the mappings of it, howeve...

5.7CVSS6.2AI score0.00211EPSS
SaveExploits0References9
Kitploit
Kitploit
•added 2025/05/06 12:30 p.m.•80 views

Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients

A Model Context Protocol MCP server implementation that integrates with Firecrawl for web scraping capabilities. Big thanks to @vrknetha, @cawstudios for the initial implementation! You can also play around with our MCP Server on MCP.so's playground. Thanks to MCP.so for hosting and @gstarwd for...

7.2AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/05/02 7:16 p.m.•109 views

CVE-2025-32777

Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...

8.2CVSS6.8AI score0.00471EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/01 2:10 p.m.•15 views

CVE-2022-49918 ipvs: fix WARNING in __ip_vs_cleanup_batch()

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix WARNING in ipvscleanupbatch During the initialization of ipvsconnnetinit, if file ipvsconn or ipvsconnsync fails to be created, the initialization is successful by default. Therefore, the ipvsconn or ipvsconnsync file...

5.9AI score
SaveExploits0References9
CNNVD
CNNVD
•added 2025/05/01 12:00 a.m.•13 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a proc entry removal warning when ipvs cleans up a batch, which could lead to a memory leak...

5.5CVSS6.3AI score0.00203EPSS
SaveExploits0References6
CVE
CVE
•added 2025/04/30 6:27 p.m.•87 views

CVE-2025-32777

CVE-2025-32777 affects Volcano Scheduler (volcano.sh/volcano). The issue allows denial of service by compromising either the Elastic service or the extender plugin in Kubernetes clusters, enabling privilege escalation across node isolation boundaries. Affected versions include 1.11.0-network-topo...

8.2CVSS6.5AI score0.00471EPSS
SaveExploits0References6
GithubExploit
GithubExploit
•added 2025/04/30 7:45 a.m.•258 views

Exploit for Code Injection in Geoserver

⚠️ Disclaimer: This tool is intended only for security resea...

9.8CVSS8.1AI score0.99813EPSS
SaveExploits26
CNNVD
CNNVD
•added 2025/04/30 12:00 a.m.•13 views

Volcano 安全漏洞

Volcano is a batch processing system built on Kubernetes by Volcano Open Source. A security vulnerability exists in Volcano versions prior to 1.11.2, which stems from a service or plugin being under the control of an attacker and could lead to a denial of service and elevation of privilege...

8.2CVSS6.4AI score0.00471EPSS
SaveExploits0References6
Packet Storm News
Packet Storm News
•added 2025/04/27 12:00 a.m.•26 views

GTSD: Generative Text Steganography Based on Diffusion Model

With the rapid development of deep learning, existing generative text steganography methods based on autoregressive models have achieved success. However, these autoregressive steganography approaches have certain limitations. Firstly, existing methods require encoding candidate words according t...

6.6AI score
SaveExploits0
OSV
OSV
•added 2025/04/17 5:37 p.m.•30 views

MGASA-2025-0136 Updated rust packages fix security vulnerability

The Rust Security Response WG was notified that the Rust standard library did not properly escape arguments when invoking batch files with the bat and cmd extensions on Windows using the Command API. An attacker able to control the arguments passed to the spawned process could execute arbitrary...

10CVSS7.6AI score0.20342EPSS
SaveExploits10References10
Mageia
Mageia
•added 2025/04/17 5:37 p.m.•45 views

Updated rust packages fix security vulnerability

The Rust Security Response WG was notified that the Rust standard library did not properly escape arguments when invoking batch files with the bat and cmd extensions on Windows using the Command API. An attacker able to control the arguments passed to the spawned process could execute arbitrary...

10CVSS7.8AI score0.20342EPSS
SaveExploits10References9
Positive Technologies
Positive Technologies
•added 2025/04/14 12:00 a.m.•17 views

PT-2025-20518

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue has been identified in the Linux kernel, specifically in the drm/xe/userptr component. The issue occurs when the migrate pages batch function holds folio locks and...

5.7CVSS6AI score0.00211EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/04/09 7:00 a.m.•16 views

gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().

...

5.5CVSS6.9AI score0.00252EPSS
SaveExploits0
OSV
OSV
•added 2025/04/07 1:15 a.m.•18 views

CVE-2025-3327

A vulnerability was found in iteaj iboot 物联网网关 1.1.3 and classified as problematic. This issue affects some unknown processing of the file /common/upload/batch of the component File Upload. The manipulation of the argument File leads to cross site scripting. The attack may be initiated remotely...

6.1CVSS3.6AI score0.00394EPSS
SaveExploits1References4
Rows per page
Query Builder