Lucene search
K

97 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 11:15 a.m.4 views

CVE-2021-0625

In ccu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05594996; Issue ID: ALPS05594996...

7.2CVSS7.3AI score0.0001EPSS
Exploits0References1
Circl
Circl
added 2026/01/05 9:28 p.m.2 views

CVE-2026-0625

creationtimestamp| type| source ---|---|--- 2026-01-05 21:28:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115844613054542200 2026-01-05 23:05:33+00:00| published-proof-of-concept| Telegram/SaQdu2HuKivKnxzQDHW0crSXnl1eIl3nAV9Cs1OYgaU4ueA 2026-01-05 23:05:39+00:00| seen|...

9.3CVSS6AI score0.00407EPSS
Exploits0References27
EUVD
EUVD
added 2026/01/02 6:30 p.m.0 views

EUVD-2026-0625

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

5.5AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:37 p.m.5 views

CVE-2009-0625

Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.2 and Cisco ACE 4710 Application Control Engine Appliance before A18.0 allows remote attackers to cause a denial of service device reload via a crafted SNMPv3 packet...

7.8CVSS6.8AI score0.00799EPSS
Exploits1References1
Circl
Circl
added 2025/01/22 2:17 a.m.5 views

CVE-2025-0625

creationtimestamp| type| source ---|---|--- 2025-01-22 02:17:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgccgc5xsb2w 2025-01-22 02:50:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgceant7qq2g 2025-01-22 03:51:36+00:00| seen|...

3.1CVSS5.7AI score0.00213EPSS
Exploits1References3
NVD
NVD
added 2025/01/22 2:15 a.m.12 views

CVE-2025-0625

A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. This affects an unknown part of the component Attachment Handler. The manipulation leads to improper control of resource identifiers. It is possible to initiate the attack remotely. The...

3.1CVSS0.00213EPSS
Exploits1References5
CVE
CVE
added 2025/01/22 12:31 a.m.49 views

CVE-2025-0625

CVE-2025-0625 affects CampCodes School Management Software 1.0, specifically the Attachment Handler component. The vulnerability arises from improper control of resource identifiers, enabling an attacker to manipulate identifiers remotely. Descriptions consistently indicate remote exploitability ...

3.1CVSS4.1AI score0.00213EPSS
Exploits1References5Affected Software1
Photon
Photon
added 2024/06/07 12:0 a.m.27 views

Moderate Photon OS Security Update - PHSA-2024-4.0-0625

Updates of 'libvirt' packages of Photon OS have been released...

5.5CVSS9.6AI score0.00056EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/02/08 12:0 a.m.31 views

CentOS 8 : libksba (CESA-2023:0625)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:0625 advisory. - Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. CVE-2022-47629 Note that Nessus has not tested for this issue...

9.8CVSS7.6AI score0.0146EPSS
Exploits2References2
Circl
Circl
added 2024/01/31 10:17 a.m.3 views

RHSA-2024:0625

creationtimestamp| type| source ---|---|--- 2024-01-31 10:17:00+00:00| seen| https://t.me/ctinow/176621...

4.8AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/01/31 12:0 a.m.63 views

RHEL 8 : libssh (RHSA-2024:0625)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0625 advisory. libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fixes: ssh: Prefix...

5.9CVSS7AI score0.54214EPSS
Exploits3References5
CVE
CVE
added 2024/01/25 2:32 a.m.52 views

CVE-2024-0625

CVE-2024-0625 describes a stored XSS in the WordPress plugin WPFront Notification Bar (multi-site && unfiltered_html scenarios) via the parameter wpfront-notification-bar-options[custom_class]. Affected: WPFront Notification Bar up to version 3.3.2. Root cause: insufficient input sanitization and...

4.8CVSS5.3AI score0.00191EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2024/01/25 2:32 a.m.17 views

CVE-2024-0625 WPFront Notification Bar <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via wpfront-notification-bar-options[custom_class]

The WPFront Notification Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpfront-notification-bar-optionscustomclass’ parameter in all versions up to, and including, 3.3.2 due to insufficient input sanitization and output escaping. This makes it possible for...

4.4CVSS4.9AI score0.00191EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/09/25 3:31 p.m.13 views

CVE-2023-0625 Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog

Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog. This issue affects Docker Desktop: before 4.12.0...

8CVSS9.5AI score0.00405EPSS
Exploits0References1
CVE
CVE
added 2023/09/25 3:31 p.m.43 views

CVE-2023-0625

Docker Desktop before 4.12.0 is vulnerable to remote code execution via a crafted extension description or changelog. Affected software is Docker Desktop (pre-4.12.0); impact is high/critical per CVSS. The issue arises from how extensions describe themselves or their changelogs, enabling RCE. Rem...

9.8CVSS8.2AI score0.00405EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/25 3:31 p.m.10 views

CVE-2023-0625 Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog

Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog. This issue affects Docker Desktop: before 4.12.0...

8CVSS6.8AI score0.00405EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/02/10 12:0 a.m.37 views

AlmaLinux 8 : libksba (ALSA-2023:0625)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:0625 advisory. - Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. CVE-2022-47629 Note that Nessus has not tested for this issue but...

9.8CVSS7.6AI score0.0146EPSS
Exploits2References2
NVD
NVD
added 2022/05/09 5:15 p.m.6 views

CVE-2022-0625

The Admin Menu Editor WordPress plugin through 1.0.4 does not sanitize and escape a parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS0.0023EPSS
Exploits2References1
CVE
CVE
added 2022/05/09 4:50 p.m.80 views

CVE-2022-0625

The CVE-2022-0625 entry concerns the WordPress plugin Admin Menu Editor (versions ≤ 1.0.4). The vulnerability is a Reflected Cross-Site Scripting caused by insufficient sanitization/escaping of a parameter before output on an admin page. Impact is a reflected XSS vector in the admin interface. Re...

6.1CVSS6.2AI score0.0023EPSS
Exploits2References1Affected Software1
Circl
Circl
added 2021/10/25 6:14 p.m.1 views

CVE-2021-0625

creationtimestamp| type| source ---|---|--- 2021-10-25 18:14:00+00:00| seen| https://t.me/cibsecurity/31132...

7.2CVSS6.4AI score0.0001EPSS
Exploits0References1
Rows per page
Query Builder