Lucene search
K

31 matches found

OSV
OSV
added 2 days ago3 views

ROOT-OS-DEBIAN-12-CVE-2025-40160 CVE-2025-40160 in rootio-linux - Patched by Root

Root has patched CVE-2025-40160 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

5.4AI score0.00028EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/04/13 7:23 p.m.2 views

CVE-2026-40160

PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, webcrawl's httpx fallback path passes user-supplied URLs directly to httpx.AsyncClient.get with followredirects=True and no host validation. An LLM agent tricked into crawling an internal URL can reach cloud metadata endpoints...

7.1CVSS5.8AI score0.0005EPSS
Exploits1References1
NVD
NVD
added 2026/04/10 5:17 p.m.0 views

CVE-2026-40160

PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, webcrawl's httpx fallback path passes user-supplied URLs directly to httpx.AsyncClient.get with followredirects=True and no host validation. An LLM agent tricked into crawling an internal URL can reach cloud metadata endpoints...

7.1CVSS0.0005EPSS
Exploits1References1
CVE
CVE
added 2026/04/10 4:59 p.m.8 views

CVE-2026-40160

Prais onAIAgents’ web_crawl has an SSRF in the httpx fallback prior to version 1.5.128. The fallback passes user-supplied URLs directly to httpx.AsyncClient.get() with follow_redirects=True and no host validation, enabling an LLM agent to crawl internal endpoints (including 169.254.169.254), inte...

7.1CVSS5.8AI score0.0005EPSS
Exploits1References1Affected Software1
Circl
Circl
added 2026/04/10 8:17 a.m.0 views

CVE-2026-40160

creationtimestamp| type| source ---|---|--- 2026-04-10 08:17:13+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-40160 2026-04-10 18:27:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5x6irh2f2o 2026-04-10 19:28:28+00:00|...

7.1CVSS5.7AI score0.0005EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2026/02/06 12:0 a.m.8 views

SUSE SLES16 Security Update : kernel (SUSE-SU-2026:20220-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20220-1 advisory. The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: -...

7.8CVSS7.5AI score0.03752EPSS
Exploits2References669
OSV
OSV
added 2026/02/02 11:54 a.m.1 views

OPENSUSE-SU-2026:20145-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-nocbcbkthread pointer bsc1254408. - CVE-2025-39880: ceph: fix race condition validating rparent before applying state...

7.8CVSS6.8AI score0.03752EPSS
Exploits2References453
OSV
OSV
added 2026/02/02 10:12 a.m.0 views

SUSE-SU-2026:20207-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-nocbcbkthread pointer bsc1254408. - CVE-2025-39880: ceph: fix race condition validating rparent before applying state...

7.8CVSS6.7AI score0.03752EPSS
Exploits2References454
RedhatCVE
RedhatCVE
added 2026/01/09 12:29 p.m.5 views

CVE-2023-40160

Directory traversal vulnerability exists in Mailing List Search CGI pmmls.exe included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a remote attacker may obtain arbitrary files on the server...

3.7CVSS7.1AI score0.0016EPSS
Exploits0References1
OSV
OSV
added 2025/11/14 6:5 a.m.1 views

BELL-CVE-2025-40160

Bulletin has no description...

6.9AI score0.00028EPSS
Exploits0References1
Circl
Circl
added 2025/11/12 11:38 a.m.3 views

CVE-2025-40160

creationtimestamp| type| source ---|---|--- 2025-11-12 11:38:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gkunsvk72q 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

5.8AI score0.00028EPSS
Exploits0References6
OSV
OSV
added 2025/11/12 11:15 a.m.1 views

DEBIAN-CVE-2025-40160

In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Change findvirq to return -EEXIST when a VIRQ is bound to a different CPU than the one passed in. With that, remove the BUGON from bindvirqtoirq to propogate the error upwards. Some VIRQ...

5.2AI score0.00028EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2025/11/12 11:15 a.m.1 views

CVE-2025-40160

In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Change findvirq to return -EEXIST when a VIRQ is bound to a different CPU than the one passed in. With that, remove the BUGON from bindvirqtoirq to propogate the error upwards. Some VIRQ...

5.7AI score0.00028EPSS
Exploits0References20
Debian CVE
Debian CVE
added 2025/11/12 10:24 a.m.2 views

CVE-2025-40160

In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Change findvirq to return -EEXIST when a VIRQ is bound to a different CPU than the one passed in. With that, remove the BUGON from bindvirqtoirq to propogate the error upwards. Some VIRQ...

5.2AI score0.00028EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/11/12 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-40160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen/events: Return -EEXIST for bound VIRQs Change findvirq to return -EEXIST when a VIRQ is bound to a different CPU than the one passed in. With that, remove t...

5.8AI score0.00028EPSS
Exploits0References4
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-40160 Malicious code in yam-kiwi-ouqk (npm)

The package yam-kiwi-ouqk was found to contain malicious code...

7.2AI score
Exploits0
NVD
NVD
added 2024/03/18 1:15 a.m.8 views

CVE-2023-40160

Directory traversal vulnerability exists in Mailing List Search CGI pmmls.exe included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a remote attacker may obtain arbitrary files on the server...

3.7CVSS6.7AI score0.0016EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/03/18 12:32 a.m.10 views

CVE-2023-40160

Directory traversal vulnerability exists in Mailing List Search CGI pmmls.exe included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a remote attacker may obtain arbitrary files on the server...

7AI score0.0016EPSS
Exploits0References2
CVE
CVE
added 2024/03/18 12:32 a.m.55 views

CVE-2023-40160

CVE-2023-40160 involves a directory traversal in the Mailing List Search CGI (pmmls.exe) of A.K.I Software PMailServer/PMailServer2. The vulnerability may allow a remote attacker to obtain arbitrary files on the server. Affected CGI is pmmls.exe (and related PMailServer/PMailServer2 components). ...

3.7CVSS7AI score0.0016EPSS
Exploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/09/05 12:0 a.m.22 views

JVN#92720882: Multiple vulnerabilities in CGIs of PMailServer and PMailServer2

CGIs included with PMailServer and PMailServer2 provided by A.K.I Software contain multiple vulnerabilities listed below. Stored cross-site scripting vulnerability CWE-79 - CVE-2023-39223 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 5.4 CVS...

7.5CVSS8.2AI score0.0016EPSS
Exploits0
Rows per page
Query Builder