Lucene search
+L

114 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2025-24555

Malicious code in bioql PyPI...

6.3CVSS6.2AI score0.00461EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/08/14 2:55 a.m.8 views

SUSE CVE-2025-8916

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All API modules allows Excessiv...

6.3CVSS5.8AI score0.00461EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2025/08/13 12:31 p.m.8 views

Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All (API modules) allows Excessive Allocation

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All API modules allows Excessive Allocation. This vulnerability is associated with program files...

6.3CVSS7.2AI score0.00461EPSS
SaveExploits0References6Affected Software4
OSV
OSV
added 2025/08/13 10:15 a.m.4 views

DEBIAN-CVE-2025-8916

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All API modules allows Excessiv...

6.3CVSS6.5AI score0.00461EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/13 10:15 a.m.20 views

CVE-2025-8916

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All API modules allows Excessiv...

6.3CVSS0.00461EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/13 9:31 a.m.100 views

CVE-2025-8916

CVE-2025-8916 is an Allocation of Resources Without Limits or Throttling issue affecting BC Java libraries (bcpkix, bcprov) and BCPKIX FIPS. Connected IBM bulletins confirm the vulnerability affects BC Java components across multiple IBM products (e.g., watsonx.data, Maximo Predict, App Connect f...

6.3CVSS6.2AI score0.00461EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/08/13 9:31 a.m.4 views

CVE-2025-8916

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All API modules allows Excessiv...

6.3CVSS6.5AI score0.00461EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/08/13 12:0 a.m.10 views

Bouncy Castle 安全漏洞

Bouncy Castle is a collection of APIs used in cryptography organized by Bouncy Castle. It includes APIs for the Java and C programming languages . A security vulnerability exists in Bouncy Castle versions 1.44 through 1.78, which stems from an unrestricted resource allocation that could lead to...

6.3CVSS6.3AI score0.00461EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-47229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: aardvark: Fix kernel panic during PIO transfer Trying to start a new PIO transfer by writing value 0 in PIOSTART register when previous transfer has not ye...

5.5CVSS5.1AI score0.00226EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/04/11 4:45 p.m.3 views

Improper Encoding or Escaping of Output

Overview wikibase/wikibase is a Structured data repository for MediaWiki Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the ImageHandler::getDimensionsString method. An attacker can manipulate the output of the script by injecting malicious code in...

10CVSS7.1AI score0.0021EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/05 12:0 a.m.7 views

ConnMan 安全漏洞

ConnMan is an Aldebaran open source connection manager. A security vulnerability exists in ConnMan 1.44 and earlier versions, which stems from a memcpy length dependency on the RR RDLENGTH value...

4.8CVSS4.7AI score0.00376EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/04/05 12:0 a.m.6 views

CVE-2025-32366

In ConnMan through 1.44, parserr in dnsproxy.c has a memcpy length that depends on an RR RDLENGTH value, i.e., rdlen=ntohsrr-rdlen and memcpyresponse+offset,end,rdlen without a check for whether the sum of end and rdlen exceeds max. Consequently, rdlen may be larger than the amount of remaining...

4.8CVSS4.7AI score0.00376EPSS
SaveExploits0References4
NVD
NVD
added 2025/03/13 9:15 p.m.15 views

CVE-2024-55060

A cross-site scripting XSS vulnerability in the component index.php of Rafed CMS Website v1.44 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

6.1CVSS0.00515EPSS
SaveExploits2References2
OSV
OSV
added 2025/03/13 9:15 p.m.7 views

CVE-2024-55060

A cross-site scripting XSS vulnerability in the component index.php of Rafed CMS Website v1.44 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

6.1CVSS5.8AI score0.00515EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2025/03/13 12:0 a.m.5 views

Rafed CMS 安全漏洞

Rafed CMS is a blogging system from Rafed Inc. A security vulnerability exists in Rafed CMS version 1.44, which stems from a cross-site scripting vulnerability that could allow an attacker to execute arbitrary web script or HTML via a specially crafted payload...

6.1CVSS5.9AI score0.00515EPSS
SaveExploits2References2
GithubExploit
GithubExploit
added 2025/03/12 6:5 p.m.99 views

Exploit for Cross-site Scripting in Rafed-System Rafed_Cms_Website

CVE-2024-55060 Rafed CMS Website v1.44 - Cross Site Scripting...

6.1CVSS6.9AI score0.00515EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2024/08/13 12:0 a.m.32 views

Security Updates for Azure Connected Machine Agent (August 2024)

The Microsoft Azure Connected Machine Agent running on the remote host is prior to 1.44. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVE...

7.8CVSS5.5AI score0.00513EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/10/23 10:15 p.m.5 views

CVE-2023-45998

kodbox 1.44 is vulnerable to Cross Site Scripting XSS. Customizing global HTML results in storing XSS...

5.4CVSS5.8AI score0.00316EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/23 10:15 p.m.16 views

CVE-2023-45998

kodbox 1.44 is vulnerable to Cross Site Scripting XSS. Customizing global HTML results in storing XSS...

5.4CVSS6.5AI score
SaveExploits0References1
CVE
CVE
added 2023/10/23 12:0 a.m.48 views

CVE-2023-45998

CVE-2023-45998 affects kodbox 1.44 and describes a Cross Site Scripting (XSS) vulnerability triggered by customizing global HTML, resulting in stored XSS. Affected component/entry point is the global HTML customization path; underlying issue is XSS propagation via stored payloads. Documented impa...

5.4CVSS5.3AI score0.00316EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder