Lucene search
K

21 matches found

EUVD
EUVD
added 2025/11/10 5:21 p.m.0 views

EUVD-2025-45150

Malicious code in surya-lapis93-sukiwir npm...

6.6AI score
Exploits0
NVD
NVD
added 2025/08/01 5:15 p.m.2 views

CVE-2025-45150

Insecure permissions in LangChain-ChatGLM-Webui commit ef829 allows attackers to arbitrarily view and download sensitive files via supplying a crafted request...

9.8CVSS0.00382EPSS
Exploits0References3
CVE
CVE
added 2025/08/01 12:0 a.m.19 views

CVE-2025-45150

CVE-2025-45150 affects LangChain-ChatGLM-Webui (commit ef829). The issue is insecure permissions that could allow an attacker to arbitrarily view and download sensitive files via a crafted request. Public references across NVD, Red Hat, CVE databases and security trackers corroborate this vulnera...

9.8CVSS6.7AI score0.00382EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/08/01 12:0 a.m.6 views

CVE-2025-45150

Insecure permissions in LangChain-ChatGLM-Webui commit ef829 allows attackers to arbitrarily view and download sensitive files via supplying a crafted request...

0.00382EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/08/01 12:0 a.m.3 views

CVE-2025-45150

Insecure permissions in LangChain-ChatGLM-Webui commit ef829 allows attackers to arbitrarily view and download sensitive files via supplying a crafted request...

6.2AI score0.00382EPSS
Exploits0References3
Circl
Circl
added 2025/07/26 3:24 a.m.6 views

CVE-2025-45150

creationtimestamp| type| source ---|---|--- 2025-07-26 03:24:41+00:00| seen| https://gist.github.com/ycshao12/69a48551cc6c9cc69153d137afe9ecef...

9.8CVSS7.3AI score0.00382EPSS
Exploits0References1
Circl
Circl
added 2024/10/09 12:18 p.m.1 views

CVE-2024-45150

creationtimestamp| type| source ---|---|--- 2024-10-09 12:18:05+00:00| seen| https://t.me/cvedetector/7444...

7.8CVSS4.8AI score0.0017EPSS
Exploits0References1
OSV
OSV
added 2024/10/09 9:15 a.m.1 views

CVE-2024-45150

Dimension versions 4.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.3AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/09 8:51 a.m.7 views

CVE-2024-45150 Dimension | Out-of-bounds Write (CWE-787)

Dimension versions 4.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.3AI score0.0017EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/09 8:51 a.m.18 views

CVE-2024-45150 Dimension | Out-of-bounds Write (CWE-787)

Dimension versions 4.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.0017EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/10/08 12:0 a.m.11 views

Adobe Dimension < 4.0.4 Multiple Arbitrary code execution (APSB24-74)

The version of Adobe Dimension installed on the remote Windows host is prior to 4.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-74 advisory. - Dimension versions 4.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in...

7.8CVSS6.5AI score0.0019EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/10/08 12:0 a.m.14 views

Adobe Dimension < 4.0.4 Multiple Arbitrary code execution (APSB24-74) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 4.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-74 advisory. - Dimension versions 4.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in...

7.8CVSS6.5AI score0.0019EPSS
Exploits0References3
Circl
Circl
added 2023/10/17 12:38 a.m.2 views

CVE-2023-45150

creationtimestamp| type| source ---|---|--- 2023-10-17 00:38:20+00:00| seen| https://t.me/cibsecurity/72371...

4.3CVSS4.6AI score0.00118EPSS
Exploits1References1
CVE
CVE
added 2023/10/16 7:6 p.m.92 views

CVE-2023-45150

CVE-2023-45150 concerns Nextcloud Calendar. The Red Hat/Reddit/GHSA and CVE records describe a flaw in the Nextcloud Calendar app where missing precondition checks allow handling of arbitrarily long strings (e.g., overly long email addresses), leading to a busy, unresponsive server and potential ...

4.3CVSS4.5AI score0.00118EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/16 7:6 p.m.22 views

CVE-2023-45150 Inviting excessive long email addresses to a calendar event makes the Nextcloud server unresponsive

Nextcloud calendar is a calendar app for the Nextcloud server platform. Due to missing precondition checks the server was trying to validate strings of any length as email addresses even when megabytes of data were provided, eventually making the server busy and unresponsive. It is recommended th...

4.3CVSS6.8AI score0.00118EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2023/02/20 12:0 a.m.36 views

Moodle 3.11.x < 3.11.11 Multiple Vulnerabilities

The version of Moodle installed on the remote host is 3.9.x prior to 3.9.18, 3.11.x prior to 3.11.11 or 4.0.x prior to 4.0.5. It is, therefore, affected by multiple vulnerabilities: - An information disclosure due to a user CSRF token being unnecessarily included in the URL during the redirection...

9.1CVSS6.2AI score0.00712EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2022/12/23 12:0 a.m.35 views

Fedora 36 : moodle (2022-f7fdcb1820)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-f7fdcb1820 advisory. Fixes for multiple CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

9.1CVSS6.8AI score0.00712EPSS
Exploits1References6
OpenVAS
OpenVAS
added 2022/12/07 12:0 a.m.20 views

Fedora: Security Advisory for moodle (FEDORA-2022-cb7084ae1c)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.1CVSS6.3AI score0.00712EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/12/07 12:0 a.m.22 views

Fedora: Security Advisory for moodle (FEDORA-2022-f7fdcb1820)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.1CVSS6.3AI score0.00712EPSS
Exploits1References2
Circl
Circl
added 2022/11/23 6:13 p.m.1 views

CVE-2022-45150

creationtimestamp| type| source ---|---|--- 2022-11-23 18:13:57+00:00| seen| https://t.me/cibsecurity/53421...

6.1CVSS5.2AI score0.00712EPSS
Exploits0References1
Rows per page
Query Builder