Lucene search
+L

6757 matches found

OSV
OSV
•added 2025/09/23 2:15 a.m.•19 views

CVE-2025-10832

A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0. The affected element is an unknown function of the file /admin/fetchproductdetails.php. The manipulation of the argument barcode results in sql injection. The attack may be performed from remote. The exploit has bee...

9.8CVSS5.6AI score0.00478EPSS
SaveExploits1References5
NVD
NVD
•added 2025/09/23 2:15 a.m.•18 views

CVE-2025-10832

A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0. The affected element is an unknown function of the file /admin/fetchproductdetails.php. The manipulation of the argument barcode results in sql injection. The attack may be performed from remote. The exploit has bee...

9.8CVSS0.00478EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/23 2:02 a.m.•34 views

CVE-2025-10832 SourceCodester Pet Grooming Management Software fetch_product_details.php sql injection

A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0. The affected element is an unknown function of the file /admin/fetchproductdetails.php. The manipulation of the argument barcode results in sql injection. The attack may be performed from remote. The exploit has bee...

7.5CVSS0.00478EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/23 2:02 a.m.•10 views

CVE-2025-10832 SourceCodester Pet Grooming Management Software fetch_product_details.php sql injection

A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0. The affected element is an unknown function of the file /admin/fetchproductdetails.php. The manipulation of the argument barcode results in sql injection. The attack may be performed from remote. The exploit has bee...

7.5CVSS6.9AI score0.00478EPSS
SaveExploits1References5
CVE
CVE
•added 2025/09/23 2:02 a.m.•52 views

CVE-2025-10832

A vulnerability in SourceCodester Pet Grooming Management Software 1.0 affects the file /admin/fetch_product_details.php where manipulation of the barcode argument causes SQL injection. Exploitation can be performed remotely, and public PoCs exist. CVSS data across sources indicate high to critic...

9.8CVSS6.9AI score0.00478EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/09/23 12:00 a.m.•19 views

PT-2025-39105

Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management Software version 1.0 Description A SQL injection issue exists in SourceCodester Pet Grooming Management Software version 1.0. The issue is located in the file /admin/fetch product details.php. Manipulatio...

9.8CVSS7.4AI score0.00478EPSS
SaveExploits1References9
NVD
NVD
•added 2025/09/22 8:15 p.m.•38 views

CVE-2025-59527

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, a Server-Side Request Forgery SSRF vulnerability was discovered in the /api/v1/fetch-links endpoint of the Flowise application. This vulnerability allows an attacker to use the Flowise serve...

7.5CVSS0.05202EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/22 7:48 p.m.•50 views

CVE-2025-59527 FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, a Server-Side Request Forgery SSRF vulnerability was discovered in the /api/v1/fetch-links endpoint of the Flowise application. This vulnerability allows an attacker to use the Flowise serve...

7.5CVSS0.05202EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/22 7:48 p.m.•5 views

CVE-2025-59527 FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, a Server-Side Request Forgery SSRF vulnerability was discovered in the /api/v1/fetch-links endpoint of the Flowise application. This vulnerability allows an attacker to use the Flowise serve...

7.5CVSS6.9AI score0.05202EPSS
SaveExploits1References5
CVE
CVE
•added 2025/09/22 7:48 p.m.•62 views

CVE-2025-59527

Flowise (FlowiseAI/Flowise) version 3.0.5 contains a Server-Side Request Forgery (SSRF) in the /api/v1/fetch-links endpoint. The issue allows the Flowise server to proxy requests into internal network services and enumerate internal links. It has been patched in version 3.0.6; upgrading to 3.0.6 ...

7.5CVSS6.9AI score0.05202EPSS
SaveExploits1References5Affected Software1
osv-cve
osv-cve
•added 2025/09/22 7:48 p.m.•26 views

CVE-2025-59527 FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, a Server-Side Request Forgery SSRF vulnerability was discovered in the /api/v1/fetch-links endpoint of the Flowise application. This vulnerability allows an attacker to use the Flowise serve...

7.5CVSS6.6AI score
SaveExploits0References7
Veracode
Veracode
•added 2025/09/22 9:40 a.m.•15 views

Insecure Deserialization

picklescan is vulnerable to Insecure Deserialization. The vulnerability is due to the use of AutoComplete.fetchcompletions executing remote pickle files, which allows an attacker to run arbitrary code on the system...

7.7AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•10 views

CVE-2025-59527: Server-Side Request Forgery (SSRF)

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, a Server-Side Request Forgery SSRF vulnerability was discovered in the /api/v1/fetch-links endpoint of the Flowise application. This vulnerability allows an attacker to use the Flowise serve...

7.5CVSS6.9AI score0.05202EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•24 views

Flowise 代码问题漏洞

Flowise is a FlowiseAI open source tool for easily building LLM applications. A code issue vulnerability exists in Flowise version 3.0.5, which stems from a server-side request forgery in the /api/v1/fetch-links endpoint that could allow an attacker to use the server as a proxy to access internal...

7.5CVSS7.2AI score0.05202EPSS
SaveExploits1References6
osv-suse
osv-suse
•added 2025/09/19 5:49 p.m.•6 views

SUSE-SU-2025:03283-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49980: USB: gadget: fix use-after-free read in usbudcuevent bsc1245110. - CVE-2022-50116: tty: ngsm: fix deadlock and link starvation in outgoing data pa...

9.8CVSS7AI score0.01341EPSS
SaveExploits11References48
SUSE CVE
SUSE CVE
•added 2025/09/18 11:37 p.m.•21 views

SUSE CVE-2023-53438

In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save CS register on AMD Zen IF Poison errors The Instruction Fetch IF units on current AMD Zen-based systems do not guarantee a synchronous MC is delivered for poison consumption errors. Therefore,...

5.8CVSS6AI score0.00148EPSS
SaveExploits0References23
RedhatCVE
RedhatCVE
•added 2025/09/18 8:23 p.m.•20 views

CVE-2023-53438

In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save CS register on AMD Zen IF Poison errors The Instruction Fetch IF units on current AMD Zen-based systems do not guarantee a synchronous MC is delivered for poison consumption errors. Therefore,...

7CVSS6.2AI score0.00148EPSS
SaveExploits0References4
osv-azl
osv-azl
•added 2025/09/18 4:15 p.m.•22 views

AZL-71924 CVE-2023-53438 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save CS register on AMD Zen IF Poison errors The Instruction Fetch IF units on current AMD Zen-based systems do not guarantee a synchronous MC is delivered for poison consumption errors. Therefore,...

5.5CVSS6AI score0.00148EPSS
SaveExploits0References1
osv-debian
osv-debian
•added 2025/09/18 4:15 p.m.•18 views

DEBIAN-CVE-2023-53438

In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save CS register on AMD Zen IF Poison errors The Instruction Fetch IF units on current AMD Zen-based systems do not guarantee a synchronous MC is delivered for poison consumption errors. Therefore,...

5.5CVSS6.2AI score0.00148EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/18 4:15 p.m.•24 views

CVE-2023-53438

In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save CS register on AMD Zen IF Poison errors The Instruction Fetch IF units on current AMD Zen-based systems do not guarantee a synchronous MC is delivered for poison consumption errors. Therefore,...

5.5CVSS0.00148EPSS
SaveExploits0References4
Rows per page
Query Builder