Lucene search
+L

941 matches found

OSV
OSV
•added 2025/09/22 9:07 a.m.•6 views

SUSE-SU-2025:20721-1 Security update for git

This update for git fixes the following issues: - Update to 2.51.0 - UI, Workflows & Features - Userdiff patterns for the R language have been added. - Documentation for "git send-email" has been updated with a bit more credential helper and OAuth information. - "git cat-file --batch" learns to...

9.8CVSS8.1AI score0.042EPSS
SaveExploits9References22
SUSE Linux
SUSE Linux
•added 2025/09/22 8:52 a.m.•10 views

Security update for git

This update for git fixes the following issues: Update to 2.51.0 UI, Workflows & Features Userdiff patterns for the R language have been added. Documentation for "git send-email" has been updated with a bit more credential helper and OAuth information. "git cat-file --batch" learns to understand...

8.6CVSS8.4AI score0.042EPSS
SaveExploits9References42
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2017-7298

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 3.2.2+, there is XSS in the Course summary filter of the Add a new course page, as demonstrated by a crafted attribute of an SVG element. CVE-2017-729...

5.4CVSS6.1AI score0.00824EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/09/05 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2023-5551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups. CVE-2023-5551 Note that Nessus...

3.3CVSS5.5AI score0.00278EPSS
SaveExploits0References2
NVD
NVD
•added 2025/08/27 5:15 p.m.•19 views

CVE-2025-50977

A template injection vulnerability leading to reflected cross-site scripting XSS has been identified in version 1.7.1, requiring authenticated admin access for exploitation. The vulnerability exists in the 'r' parameter and allows attackers to inject malicious Angular expressions that execute...

6.1CVSS0.00281EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/08/27 12:00 a.m.•28 views

CVE-2025-50977

A template injection vulnerability leading to reflected cross-site scripting XSS has been identified in version 1.7.1, requiring authenticated admin access for exploitation. The vulnerability exists in the 'r' parameter and allows attackers to inject malicious Angular expressions that execute...

0.00281EPSS
SaveExploits1References1
OSV
OSV
•added 2025/08/27 12:00 a.m.•9 views

CVE-2025-50977

A template injection vulnerability leading to reflected cross-site scripting XSS has been identified in version 1.7.1, requiring authenticated admin access for exploitation. The vulnerability exists in the 'r' parameter and allows attackers to inject malicious Angular expressions that execute...

6.1CVSS6.9AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/08/27 12:00 a.m.•10 views

PT-2025-34902 · Wicket · Wicket

Name of the Vulnerable Software and Affected Versions: versions prior to 1.7.1 Description: A template injection vulnerability leading to reflected cross-site scripting XSS has been identified, requiring authenticated admin access for exploitation. The vulnerability exists in the r parameter and...

6.1CVSS5.8AI score0.00281EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•1 views

CVE-2025-50977: Improper Neutralization of Input During Web Page Generation

A template injection vulnerability leading to reflected cross-site scripting XSS has been identified in version 1.7.1, requiring authenticated admin access for exploitation. The vulnerability exists in the 'r' parameter and allows attackers to inject malicious Angular expressions that execute...

6.1CVSS6.2AI score0.00281EPSS
SaveExploits1References1
CVE
CVE
•added 2025/08/27 12:00 a.m.•29 views

CVE-2025-50977

A template injection vulnerability exists in Gitblit version 1.7.1 , where improper handling of the 'r' parameter allows for reflected cross-site scripting (XSS) . Authenticated administrators can inject malicious Angular expressions to execute arbitrary JavaScript in the application context via ...

6.4AI score0.00281EPSS
SaveExploits1References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/25 6:36 p.m.•13 views

Malicious code in @espace-client-axafr/savings-summary-card (npm)

The package communicates with a domain associated with malicious activity...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/25 6:36 p.m.•7 views

MAL-2025-41897 Malicious code in @espace-client-axafr/savings-summary-card (npm)

The package communicates with a domain associated with malicious activity...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 7:24 p.m.•6 views

Malicious code in symphony-summary (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

6.9AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 7:24 p.m.•5 views

MAL-2025-6961 Malicious code in symphony-summary (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•5 views

MAL-2025-22011 Malicious code in gsf.billing-summary (npm)

The package gsf.billing-summary was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•2 views

Malicious code in gsf.billing-summary (npm)

The package gsf.billing-summary was found to contain malicious code...

7AI score
SaveExploits0
Akamai Blog
Akamai Blog
•added 2025/08/11 12:00 p.m.•11 views

Visualize Security Success with the Security Summary Dashboard

...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/08/11 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2024-26879

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: clk: meson: Add missing clocks to axgclkregmaps Some clocks were missing from axgclkregmaps,...

5.5CVSS5AI score0.00223EPSS
SaveExploits0References2
Circl
Circl
•added 2025/08/07 9:46 p.m.•15 views

CVE-2025-47219

creationtimestamp| type| source ---|---|--- 2025-08-07 21:46:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvtplwgngx2l 2025-10-28 02:53:50+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m47wk3giz72r 2025-10-28 02:54:00+00:00| seen|...

6.7AI score0.00647EPSS
SaveExploits1References8
Microsoft CVE
Microsoft CVE
•added 2025/08/07 7:00 a.m.•12 views

jffs2: check that raw node were preallocated before writing summary

...

5.5CVSS7AI score0.00207EPSS
SaveExploits0
Rows per page
Query Builder