Lucene search
K

74 matches found

Circl
Circl
added 2026/01/20 8:4 a.m.2 views

CVE-2022-25737

creationtimestamp| type| source ---|---|--- 2026-01-20 08:04:59+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

7.5CVSS5AI score0.00297EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-25737

Malicious code in bioql PyPI...

5.4CVSS6.6AI score0.01102EPSS
Exploits0References1
Circl
Circl
added 2025/08/26 3:15 p.m.1 views

CVE-2025-25737

creationtimestamp| type| source ---|---|--- 2025-08-26 15:15:29+00:00| seen| Telegram/6blr7Y4waTnlpBVAbzXz7F34u1pmziA1p4cUhGAioWE...

6.8CVSS4.8AI score0.00113EPSS
Exploits1
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-26804 Malicious code in mp3-file-zip-d-ownload-25737-the-dividing-island-m1xnl-ssmrpa (npm)

The package mp3-file-zip-d-ownload-25737-the-dividing-island-m1xnl-ssmrpa was found to contain malicious code...

7.2AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/08/05 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-25737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalid downcast from nsTextNode to SVGElement could have lead to undefined behavior. This vulnerability affects Firefox nsTextNode to SVGElement could have...

8.8CVSS8.1AI score0.00172EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:0 a.m.4 views

TencentOS Server 2: thunderbird (TSSA-2023:0029)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0029 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

8.8CVSS7.7AI score0.00283EPSS
Exploits0References15
RedhatCVE
RedhatCVE
added 2025/05/22 3:22 p.m.5 views

CVE-2020-25737

An elevation of privilege vulnerability exists in Hackolade versions prior 4.2.0 on Windows has an issue in specific deployment scenarios that could allow local users to gain elevated privileges during an uninstall of the application...

7.8CVSS7AI score0.0005EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/02/14 9:14 a.m.3 views

CVE-2024-25737

A Server-Side Request Forgery SSRF vulnerability in the /Cover/Show route showAction in CoverController.php in Open Library Foundation VuFind 2.4 through 9.1 before 9.1.1 allows remote attackers to access internal HTTP servers and perform Cross-Site Scripting XSS attacks by proxying arbitrary URL...

5.4CVSS6.3AI score0.00214EPSS
Exploits0References1
Circl
Circl
added 2024/05/27 1:39 p.m.0 views

CVE-2024-25737

creationtimestamp| type| source ---|---|--- 2024-05-27 13:39:28+00:00| published-proof-of-concept| https://t.me/HackingInsights/981...

5.4CVSS5.5AI score0.00214EPSS
Exploits0References1
CVE
CVE
added 2024/05/22 7:5 p.m.2491 views

CVE-2024-25737

VuFind 2.4–9.1 (pre-9.1.1) is affected by a Server-Side Request Forgery (SSRF) in the /Cover/Show route (ShowAction in CoverController.php). The vulnerability allows an attacker to proxy arbitrary URLs via the proxy GET parameter, enabling access to internal HTTP services and potentially enabling...

5.4CVSS6.3AI score0.00214EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/05/22 7:5 p.m.24 views

CVE-2024-25737

A Server-Side Request Forgery SSRF vulnerability in the /Cover/Show route showAction in CoverController.php in Open Library Foundation VuFind 2.4 through 9.1 before 9.1.1 allows remote attackers to access internal HTTP servers and perform Cross-Site Scripting XSS attacks by proxying arbitrary URL...

6AI score0.00214EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.23 views

openSUSE: Security Advisory for MozillaFirefox (SUSE-SU-2023:0461-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.6AI score0.00389EPSS
Exploits1References2
Circl
Circl
added 2023/06/02 8:36 p.m.2 views

CVE-2023-25737

creationtimestamp| type| source ---|---|--- 2023-06-02 20:36:37+00:00| seen| https://t.me/cibsecurity/64902...

8.8CVSS8AI score0.00172EPSS
Exploits0References1
OSV
OSV
added 2023/06/02 5:15 p.m.4 views

CVE-2023-25737

An invalid downcast from nsTextNode to SVGElement could have lead to undefined behavior. This vulnerability affects Firefox 110, Thunderbird 102.8, and Firefox ESR 102.8...

8.8CVSS8AI score
Exploits0References4
Vulnrichment
Vulnrichment
added 2023/06/02 12:0 a.m.10 views

CVE-2023-25737

An invalid downcast from nsTextNode to SVGElement could have lead to undefined behavior. This vulnerability affects Firefox 110, Thunderbird 102.8, and Firefox ESR 102.8...

6.3AI score0.00172EPSS
Exploits0References4
CVE
CVE
added 2023/06/02 12:0 a.m.175 views

CVE-2023-25737

CVE-2023-25737 describes an invalid downcast from nsTextNode to SVGElement that could lead to undefined behavior. The vulnerability is observed in Mozilla Firefox (versions before 110), Thunderbird (versions before 102.8), and Firefox ESR (versions before 102.8). Connected advisories consistently...

8.8CVSS8AI score0.00172EPSS
Exploits0References4Affected Software3
Cvelist
Cvelist
added 2023/06/02 12:0 a.m.16 views

CVE-2023-25737

An invalid downcast from nsTextNode to SVGElement could have lead to undefined behavior. This vulnerability affects Firefox 110, Thunderbird 102.8, and Firefox ESR 102.8...

8.3AI score0.00172EPSS
Exploits0References4
Cvelist
Cvelist
added 2023/04/04 4:46 a.m.14 views

CVE-2022-25737 Use of Uninitialized Variable in MODEM

Information disclosure in modem due to missing NULL check while reading packets received from local network...

7.5CVSS7.5AI score0.00297EPSS
Exploits0References1
CVE
CVE
added 2023/04/04 4:46 a.m.59 views

CVE-2022-25737

CVE-2022-25737 affects the modem component and is caused by a missing NULL check when reading packets from the local network, leading to information disclosure with High confidentiality impact (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). Multiple connected sources (NVD, Red Hat, PRION, CNNVD...

7.5CVSS7.3AI score0.00297EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2023/03/28 12:0 a.m.31 views

Mageia: Security Advisory (MGASA-2023-0057)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.8AI score0.00283EPSS
Exploits0References5
Rows per page
Query Builder