Lucene search
+L

4685 matches found

Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2014-8625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple format string vulnerabilities in the parseerrormsg function in parsehelp.c in dpkg before 1.17.22 allow remote attackers to cause a denial of service...

6.8CVSS6.3AI score0.03296EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/08/22 5:15 p.m.•22 views

CVE-2025-55630

A discrepancy in the error message returned by the login function of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 when entering the wrong username and password allows attackers to enumerate existing accounts...

7.3CVSS5.8AI score0.00266EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/08/22 12:00 a.m.•11 views

CVE-2025-55630

A discrepancy in the error message returned by the login function of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 when entering the wrong username and password allows attackers to enumerate existing accounts...

6.7AI score0.00266EPSS
SaveExploits1References1
CVE
CVE
•added 2025/08/22 12:00 a.m.•45 views

CVE-2025-55630

The CVE-2025-55630 entry concerns Reolink Smart 2K+ Plug-in Wi‑Fi Video Doorbell with Chime, firmware 3.0.0.4662_2503122283. A discrepancy in the login error message when credentials are incorrect allows attackers to enumerate existing accounts. Public details across connected sources confirm the...

7.3CVSS6.8AI score0.00266EPSS
SaveExploits1References1Affected Software1
Redos
Redos
•added 2025/08/21 12:00 a.m.•26 views

ROS-20250821-08

A vulnerability in the TCPDF PHP library is related to reading arbitrary files from the server's file system via the src tag. Exploitation of the vulnerability could allow an attacker to gain access to sensitive information. information Vulnerability in TCPDF PHP library is related to improper...

7.5CVSS8.4AI score0.01325EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2025/08/18 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2020-13314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Omniauth endpoint allowed a malicious user to submit content to be...

5.3CVSS5.7AI score0.01505EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/08/15 3:02 a.m.•9 views

CVE-2025-9005 mtons mblog register information exposure

A vulnerability was determined in mtons mblog up to 3.5.0. Affected is an unknown function of the file /register. The manipulation leads to information exposure through error message. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is...

6.3CVSS6.8AI score0.00617EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/08/15 3:02 a.m.•31 views

CVE-2025-9005 mtons mblog register information exposure

A vulnerability was determined in mtons mblog up to 3.5.0. Affected is an unknown function of the file /register. The manipulation leads to information exposure through error message. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is...

6.3CVSS0.00617EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2025/08/15 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-21747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/ast: astdp: Fix timeout for enabling video signal The ASTDP transmitter sometimes takes ...

5.5CVSS5.3AI score0.00174EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/15 12:00 a.m.•4 views

CVE-2025-9005: Generation of Error Message Containing Sensitive Information

A vulnerability was determined in mtons mblog up to 3.5.0. Affected is an unknown function of the file /register. The manipulation leads to information exposure through error message. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is...

6.3CVSS4.7AI score0.00617EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/13 12:00 a.m.•5 views

CVE-2025-54791: Generation of Error Message Containing Sensitive Information

OMERO.web provides a web based client and plugin infrastructure. Prior to version 5.29.2, if an error occurred when resetting a user's password using the Forgot Password option in OMERO.web, the error message displayed on the Web page can disclose information about the user. This issue has been...

5.3CVSS5.7AI score0.00261EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/12 12:00 a.m.•2 views

Linux Distros Unpatched Vulnerability : CVE-2021-47671

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: can: etases58x: es58xrxerrmsg: fix memory leak in error path In es58xrxerrmsg, if...

3.3CVSS5.3AI score0.00182EPSS
SaveExploits0References3
CVE
CVE
•added 2025/08/11 2:02 p.m.•45 views

CVE-2025-8852

WuKongOpenSource WukongCRM 11.0 is affected by CVE-2025-8852 in the API Response Handler’s /adminFile/upload area. The vulnerability enables information exposure via error messages and supports remote initiation. Publicly disclosed exploit information exists (POC), with multiple sources confirmin...

5.3CVSS5AI score0.00376EPSS
SaveExploits1References5Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/06 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2011-1187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an error message leak...

5CVSS8.3AI score0.01602EPSS
SaveExploits1References2
NVD
NVD
•added 2025/08/05 7:15 a.m.•29 views

CVE-2025-8548

A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function sendEmailCode of the file src/main/java/co/yiiu/pybbs/controller/api/SettingsApiController.java of the component Registered Email Handler. The manipulation of the argument email lea...

6.3CVSS0.00491EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
•added 2025/08/04 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2021-43542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading external protocols. This vulnerability...

6.5CVSS6.7AI score0.01834EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/02 8:23 p.m.•16 views

CVE-2025-8340

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file filldetails.php of the component Error Message Handler. The manipulation of the argument email leads to cross site scripting...

6.1CVSS4.4AI score0.00515EPSS
SaveExploits1References1
CVE
CVE
•added 2025/07/31 12:32 a.m.•39 views

CVE-2025-8340

CVE-2025-8340 affects Code-Projects Intern Membership Management System 1.0, specifically the Error Message Handler’s fill_details.php. The vulnerability arises from manipulating the email parameter, enabling remote cross-site scripting (XSS). The issue can be exploited remotely and the exploit h...

6.1CVSS4.5AI score0.00515EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/07/31 12:32 a.m.•33 views

CVE-2025-8340 code-projects Intern Membership Management System Error Message fill_details.php cross site scripting

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file filldetails.php of the component Error Message Handler. The manipulation of the argument email leads to cross site scripting...

5.3CVSS0.00515EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/31 12:00 a.m.•8 views

CVE-2025-8340: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file filldetails.php of the component Error Message Handler. The manipulation of the argument email leads to cross site scripting...

6.1CVSS3.8AI score0.00515EPSS
SaveExploits1References1
Rows per page
Query Builder