Lucene search
+L

4684 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2022-1139

Malicious code in bioql PyPI...

5.3CVSS5.7AI score0.00988EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2025-16314

Malicious code in bioql PyPI...

5.3CVSS6.4AI score0.00353EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-52130

Malicious code in bioql PyPI...

5.3CVSS5.7AI score0.0045EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2023-57720

Malicious code in bioql PyPI...

5.9CVSS5.9AI score0.00404EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-35545

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.00304EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/29 12:15 a.m.•19 views

CVE-2025-11125

A vulnerability was found in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. Affected by this vulnerability is an unknown functionality of the file /connectionerror.php of the component Error Message Handler. Performing manipulation of the argument Error results i...

5.3CVSS0.00348EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/29 12:00 a.m.•7 views

CVE-2025-11125: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. Affected by this vulnerability is an unknown functionality of the file /connectionerror.php of the component Error Message Handler. Performing manipulation of the argument Error results i...

5.3CVSS3.9AI score0.00348EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/09/28 11:32 p.m.•9 views

CVE-2025-11125 langleyfcu Online Banking System Error Message connection_error.php cross site scripting

A vulnerability was found in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. Affected by this vulnerability is an unknown functionality of the file /connectionerror.php of the component Error Message Handler. Performing manipulation of the argument Error results i...

5.3CVSS3.9AI score0.00348EPSS
SaveExploits0References4
CVE
CVE
•added 2025/09/28 11:32 p.m.•46 views

CVE-2025-11125

Langleyfcu Online Banking System is affected by CVE-2025-11125. A cross-site scripting vulnerability exists in the Error Message Handler’s /connection_error.php where manipulation of the Error parameter can be exploited remotely. The issue affects versions prior to 57437e6400ce0ae240e692c24e6346b...

5.3CVSS3.9AI score0.00348EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2025/09/28 11:32 p.m.•8 views

CVE-2025-11125 langleyfcu Online Banking System Error Message connection_error.php cross site scripting

A vulnerability was found in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. Affected by this vulnerability is an unknown functionality of the file /connectionerror.php of the component Error Message Handler. Performing manipulation of the argument Error results i...

5.3CVSS4.1AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/09/28 12:00 a.m.•26 views

PT-2025-39796

Name of the Vulnerable Software and Affected Versions langleyfcu Online Banking System versions prior to 57437e6400ce0ae240e692c24e6346b8d0c17d7a Description A cross site scripting issue exists in the Error Message Handler component of langleyfcu Online Banking System. The issue is related to...

5.3CVSS4.7AI score0.00348EPSS
SaveExploits0References11
NVD
NVD
•added 2025/09/26 8:15 a.m.•22 views

CVE-2025-1396

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...

5.3CVSS0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/26 7:52 a.m.•41 views

CVE-2025-1396 Username Enumeration in Multiple WSO2 Products with Multi-Attribute Login Enabled

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...

3.7CVSS0.00251EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/26 12:00 a.m.•20 views

PT-2025-39521

Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description A username enumeration issue exists when Multi-Attribute Login is enabled. The system provides a different response for existing and non-existing usernames, regardless of the validate...

9.8CVSS6.1AI score0.00999EPSS
SaveExploits2References43
osv_cve
osv_cve
•added 2025/09/25 4:15 p.m.•7 views

CVE-2025-26333

Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data. A remote attacker could potentially exploit this vulnerability, leading to information exposure...

7.5CVSS5.8AI score0.00325EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/25 3:16 p.m.•58 views

CVE-2025-26333

Dell BSAFE Crypto-J contains an information disclosure flaw: error messages may reveal sensitive environment details and associated data to remote attackers (CVE-2025-26333). Affected product is Dell BSAFE Crypto-J; impact is information exposure with HIGH confidentiality impact per NVD. Dell has...

7.5CVSS7.1AI score0.00325EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/09/25 3:16 p.m.•25 views

CVE-2025-26333

Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data. A remote attacker could potentially exploit this vulnerability, leading to information exposure...

5.9CVSS0.00325EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/25 12:00 a.m.•14 views

PT-2025-39408

Name of the Vulnerable Software and Affected Versions Dell Crypto-J affected versions not specified Description The software generates an error message containing sensitive information about its environment and associated data. A remote attacker could potentially exploit this issue, leading to...

7.5CVSS7AI score0.00325EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/09/23 4:37 p.m.•9 views

CVE-2024-6429 Content Spoofing in Multiple WSO2 Products via Error Message Injection

A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Under certain conditions, error messages are passed through URL parameters without validation, allowing malicious actors to inject arbitrary content into the UI. By exploiting this...

4.3CVSS6AI score0.00215EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/23 4:37 p.m.•46 views

CVE-2024-6429

The CVE-2024-6429 entry describes a content spoofing vulnerability in WSO2 products caused by improper handling/validation of error messages passed through URL parameters, enabling attackers to inject arbitrary UI content and facilitate social-engineering attacks. Affected components include WSO2...

4.3CVSS6AI score0.00215EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder