Lucene search
+L

1582 matches found

EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2024-18948

Malicious code in bioql PyPI...

7.5CVSS8.8AI score0.00692EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2022-26646

Malicious code in bioql PyPI...

7.5CVSS7.2AI score0.01022EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/29 5:15 p.m.12 views

DEBIAN-CVE-2025-51495

An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an attacker can cause the application to crash. If downstream vendors integrate this component improperly, the issue may lead to a buffer overflow...

7.5CVSS6.2AI score0.00427EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/09/29 12:00 a.m.13 views

PT-2025-39837

Name of the Vulnerable Software and Affected Versions Mongoose versions 7.5 through 7.17 Description An integer overflow exists in the WebSocket component. Sending a specially crafted WebSocket request can cause the application to crash. Improper integration by downstream vendors may lead to a...

7.5CVSS6.8AI score0.00427EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2025/09/23 12:00 a.m.9 views

RTI Connext Professional 安全漏洞

RTI Connext Professional is a connectivity platform from RTI USA designed to meet the demanding requirements of the Industrial Internet of Things IIoT. A security vulnerability exists in RTI Connext Professional versions 7.4.0 through prior to 7.6.0 and 7.2.0 through 7.3.0.9, which stems from an...

9.1CVSS6.6AI score0.00369EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/22 12:00 a.m.16 views

PT-2025-34371 · Ibm · Ibm Qradar Siem

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM versions 7.5 through 7.5.0 Description: IBM QRadar SIEM Dashboard is susceptible to cross-site scripting. An authenticated user can embed arbitrary JavaScript code into the Web UI, potentially altering functionality and leadin...

5.4CVSS6.3AI score0.00177EPSS
SaveExploits0References5
CVE
CVE
added 2025/08/14 10:34 a.m.28 views

CVE-2025-52720

CVE-2025-52720 affects WordPress plugins: Super Store Finder (versions =7.5) to mitigate.

9.3CVSS5.9AI score0.00292EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/11 1:41 p.m.9 views

Security Bulletin: Astronomer with IBM is vulnerable to memory exhaustion due to the Net::IMAP package (CVE-2025-43857)

Summary Net::IMAP is used by Astronomer with IBM as part of the IMAP client functionality. Vulnerability Details CVEID:CVE-2025-43857 DESCRIPTION: Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.5.7, 0.4.20, 0.3.9, and 0.2.5, there is a...

6.5CVSS6.9AI score0.0047EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/07/23 4:11 p.m.7 views

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to a null pointer dereference due to the libarchive package (CVE-2024-48615)

Summary libarchive is used by DataStage on Cloud Pak for Data as part of data formatting. Vulnerability Details CVEID:CVE-2024-48615 DESCRIPTION: Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function headerpaxextension at...

7.5CVSS7.4AI score0.00524EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
added 2025/07/23 12:00 a.m.13 views

PT-2025-30587 · Ibm · Ibm I Db2 Mirror For I

Name of the Vulnerable Software and Affected Versions: IBM Db2 Mirror for i versions 7.4 through 7.6 Description: The IBM Db2 Mirror for i GUI is susceptible to a cross-site WebSocket hijacking issue. An unauthenticated malicious actor can exploit this by sending a specially crafted request to...

6.3CVSS6.1AI score0.00159EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2025/07/22 12:00 a.m.10 views

Debian: Security Advisory (DLA-4246-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.9AI score0.02829EPSS
SaveExploits4References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/07/17 3:42 p.m.10 views

Security Bulletin: A vulnerability in libxml2 affects Tivoli Netcool/OMNIbus (CVE-2024-25062)

Summary There is a vulnerability in the libxml2 library that ships as a component of Tivoli Netcool/OMNIbus. Vulnerability Details CVEID:CVE-2024-25062 DESCRIPTION: An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation a...

7.5CVSS6.7AI score0.01364EPSS
SaveExploits3Affected Software1
Vivaldi Security Advisories
Vivaldi Security Advisories
added 2025/07/16 7:10 a.m.16 views

Minor update (3) for Vivaldi Desktop Browser 7.5

Download Vivaldi The following improvements were made since the second 7.5 minor update: Chromium Update to 138.0.7204.162: includes fix for CVE-2025-6558 “Incorrect validation of untrusted input in ANGLE and GPU” Permissions Switching tab causes an extra camera/mic request VB-118583 Tabs Cannot...

8.8CVSS5.8AI score0.09585EPSS
SaveExploits0References1
Atlassian
Atlassian
added 2025/07/09 4:13 a.m.26 views

DoS (Denial of Service) org.apache.tomcat:tomcat-catalina Dependency in Jira Service Management Data Center and Server

This High severity Third-Party Dependency vulnerability was introduced in versions 5.12.0, 10.3.0 and 10.7.1 of Jira Service Management Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...

7.5CVSS7.2AI score0.5946EPSS
SaveExploits1
IBM Security Bulletins
IBM Security Bulletins
added 2025/06/28 8:19 a.m.9 views

Security Bulletin: Fixes availabile for CVE-2025-1991 H1-2581021: 'An Integer Underflow During Informix Server Protocol Packet Processing Allows Attackers to Carry out a Denial-of-Service Attack'

Summary Fixes available for CVE-2025-1991 H1-2581021: 'An Integer Underflow During Informix Server Protocol Packet Processing Allows Attackers to Carry out a Denial-of-Service Attack' Vulnerability Details CVEID:CVE-2025-1991 DESCRIPTION: IBM Informix Dynamic Server could allow a remote attacker ...

7.5CVSS6.8AI score0.00376EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2025/06/23 12:00 a.m.5 views

SUSE: Security Advisory (SUSE-SU-2025:02056-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.2AI score0.9895EPSS
SaveExploits23References7
CNNVD
CNNVD
added 2025/06/19 12:00 a.m.16 views

IBM QRadar SIEM 日志信息泄露漏洞

IBM QRadar SIEM is a solution from International Business Machines IBM that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user...

6.2CVSS5.5AI score0.00161EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 6:37 a.m.11 views

CVE-2024-50983

FlightPath 7.5 contains a Cross Site Scripting XSS vulnerability, which allows authenticated remote attackers with administrative rights to inject arbitrary JavaScript in the web browser of a user by including a malicious payload into the Last Name section in the Create/Edit Faculty/Staff User or...

5.4CVSS5.3AI score0.00269EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:37 a.m.27 views

CVE-2024-43688

cron/entry.c in vixie cron before 9cc8ab1, as used in OpenBSD 7.4 and 7.5, allows a heap-based buffer underflow and memory corruption. NOTE: this issue was introduced during a May 2023 refactoring...

7.3CVSS7AI score0.00524EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:34 a.m.16 views

CVE-2024-51464

IBM i 7.3, 7.4, and 7.5 is vulnerable to bypassing Navigator for i interface restrictions. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to remotely perform operations that the user is not allowed to perform when using Navigator for i...

4.3CVSS6.4AI score0.01445EPSS
SaveExploits2References1
Rows per page
Query Builder