Lucene search
+L

1476 matches found

Cvelist
Cvelist
added 2025/08/28 12:37 p.m.14 views

CVE-2025-48362 WordPress Hesabfa Accounting plugin <= 2.2.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Saeed Sattar Beglou Hesabfa Accounting hesabfa-accounting allows Cross Site Request Forgery.This issue affects Hesabfa Accounting: from n/a through = 2.2.5...

5.4CVSS0.00127EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/28 12:37 p.m.1 views

CVE-2025-48362 WordPress Hesabfa Accounting plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Saeed Sattar Beglou Hesabfa Accounting allows Cross Site Request Forgery. This issue affects Hesabfa Accounting: from n/a through 2.2.4...

5.4CVSS7.2AI score0.00127EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/28 12:37 p.m.2 views

CVE-2025-48361 WordPress Hesabfa Accounting plugin <= 2.2.5 - Sensitive Data Exposure via Log File vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Saeed Sattar Beglou Hesabfa Accounting hesabfa-accounting allows Retrieve Embedded Sensitive Data.This issue affects Hesabfa Accounting: from n/a through = 2.2.5...

5.3CVSS5.9AI score0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/28 12:37 p.m.23 views

CVE-2025-48361 WordPress Hesabfa Accounting plugin <= 2.2.5 - Sensitive Data Exposure via Log File vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Saeed Sattar Beglou Hesabfa Accounting hesabfa-accounting allows Retrieve Embedded Sensitive Data.This issue affects Hesabfa Accounting: from n/a through = 2.2.5...

5.3CVSS0.00285EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/28 12:37 p.m.14 views

CVE-2025-48361

CVE-2025-48361 concerns a WordPress Hesabfa Accounting plugin vulnerability: insertion of sensitive information into sent data leading to potential retrieval of embedded sensitive data. Publicly documented impact is Exposure of sensitive information via log data for Hesabfa Accounting versions up...

5.3CVSS5.9AI score0.00285EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/28 12:0 a.m.12 views

PT-2025-35029

Name of the Vulnerable Software and Affected Versions: Hesabfa Accounting versions through 2.2.4 Description: Hesabfa Accounting is susceptible to a flaw that allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations: Update...

5.3CVSS6.1AI score0.00285EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/28 12:0 a.m.4 views

PT-2025-35030

Name of the Vulnerable Software and Affected Versions: Hesabfa Accounting versions through 2.2.4 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Hesabfa Accounting, allowing attackers to perform actions on behalf of authenticated users. This issue enables Cross Site Request...

5.4CVSS6.2AI score0.00127EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.3 views

WordPress plugin Hesabfa Accounting 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

5.4CVSS6.5AI score0.00127EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.6 views

WordPress plugin Hesabfa Accounting 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.3AI score0.00285EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2025/08/27 3:33 p.m.3 views

kernel: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()

A flaw was found in the HFSC queueing discipline implementation in the Linux kernel. When a packet is enqueued and the child qdisc's peek function is called before properly updating the HFSC queue's length and backlog counters, a race condition can occur. In some cases, the peek operation may...

7.8CVSS7.2AI score0.00179EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/08/27 11:42 a.m.6 views

kernel: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()

A flaw was found in the HFSC queueing discipline implementation in the Linux kernel. When a packet is enqueued and the child qdisc's peek function is called before properly updating the HFSC queue's length and backlog counters, a race condition can occur. In some cases, the peek operation may...

7.8CVSS7.2AI score0.00179EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2021-23176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control in reporting engine of l10nfrfec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote...

6.5CVSS6.8AI score0.00788EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.9 views

AlmaLinux 9 : kernel (ALSA-2025:14420)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:14420 advisory. kernel: udp: Fix memory accounting leak. CVE-2025-22058 kernel: netsched: ets: Fix double list add in class with netem as child qdisc CVE-2025-37914...

7.8CVSS7.3AI score0.00202EPSS
SaveExploits0References5
OSV
OSV
added 2025/08/26 9:47 p.m.12 views

USN-7719-1 linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - GPIO subsystem; - GPU...

7.8CVSS6.5AI score0.13255EPSS
SaveExploits1References73
Akamai Blog
Akamai Blog
added 2025/08/25 9:0 p.m.7 views

Marginal Emissions Rates: See Carbon Emissions with Clarity in Real Time

Learn how Akamai is using marginal emissions rates to improve the transparency and accuracy of our emissions accounting...

7.3AI score
SaveExploits0
Cvelist
Cvelist
added 2025/08/25 8:2 p.m.16 views

CVE-2025-3456 On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device running-c

On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device running-config could then be used to obtain protoc...

3.8CVSS0.00103EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/25 8:2 p.m.2 views

CVE-2025-3456 On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device running-c

On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device running-config could then be used to obtain protoc...

3.8CVSS7AI score0.00103EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/25 8:2 p.m.37 views

CVE-2025-3456

CVE-2025-3456 affects Arista EOS. The issue allows the global encryption key configured on devices to be logged in clear text in local/remote logs, enabling disclosure of protocol-specific passwords when symmetric passwords are used between neighbor devices. Affected EOS releases include 4.34.x (...

3.8CVSS6.5AI score0.00103EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2025/08/25 2:5 p.m.5 views

kernel: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()

A flaw was found in the HFSC queueing discipline implementation in the Linux kernel. When a packet is enqueued and the child qdisc's peek function is called before properly updating the HFSC queue's length and backlog counters, a race condition can occur. In some cases, the peek operation may...

7.8CVSS7.2AI score0.00179EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/08/25 8:6 a.m.3 views

kernel: udp: Fix memory accounting leak.

A memory overflow vulnerability exists within the Linux kernel's networking subsystem. Specifically, an application can set the SORCVBUF socket option to its maximum value INTMAX, which triggers an integer overflow within the udprmemrelease function during socket closure. The udpdestructcommon...

5.5CVSS6.9AI score0.00202EPSS
SaveExploits0References5
Rows per page
Query Builder