Lucene search
+L

1671 matches found

UbuntuCve
UbuntuCve
added 2025/12/16 4:16 p.m.16 views

CVE-2025-68301

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX path The atlantic driver can receive packets with more than MAXSKBFRAGS 17 fragments when handling large multi-descriptor packets. This causes an out-of-bounds write in...

9.8CVSS6.1AI score0.00467EPSS
SaveExploits0References35
OSV
OSV
added 2025/12/15 7:37 p.m.13 views

GO-2025-4214 Babylon Incorrect FP inactive accounting in costaking creates “phantom stake” that earns rewards after BTC unbond in github.com/babylonlabs-io/babylon

Babylon Incorrect FP inactive accounting in costaking creates “phantom stake” that earns rewards after BTC unbond in github.com/babylonlabs-io/babylon...

6.9AI score
SaveExploits0References2
EUVD
EUVD
added 2025/12/09 2:25 p.m.11 views

EUVD-2025-201932

Babylon Incorrect FP inactive accounting in costaking creates “phantom stake” that earns rewards after BTC unbond...

6.4AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2025/12/04 12:50 p.m.19 views

kernel: udp: Fix memory accounting leak.

A memory overflow vulnerability exists within the Linux kernel's networking subsystem. Specifically, an application can set the SORCVBUF socket option to its maximum value INTMAX, which triggers an integer overflow within the udprmemrelease function during socket closure. The udpdestructcommon...

5.5CVSS7.1AI score0.00216EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/12/03 12:26 a.m.27 views

CVE-2025-65187

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed...

6.1CVSS6AI score0.00224EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/12/03 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-65187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript...

6.1CVSS5.7AI score0.00224EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/12/02 6:30 p.m.13 views

EUVD-2025-200269

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed...

6.1CVSS5.5AI score0.00224EPSS
SaveExploits1References3
NVD
NVD
added 2025/12/02 4:15 p.m.15 views

CVE-2025-65187

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed...

6.1CVSS0.00224EPSS
SaveExploits1References2
OSV
OSV
added 2025/12/02 4:15 p.m.13 views

UBUNTU-CVE-2025-65187

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed...

6.1CVSS5.8AI score0.00224EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/12/02 12:00 a.m.15 views

PT-2025-48712

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed...

6.1CVSS6AI score0.00224EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/12/02 12:00 a.m.5 views

CVE-2025-65187

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed...

5.7AI score0.00224EPSS
SaveExploits1References2
OSV
OSV
added 2025/12/02 12:00 a.m.11 views

CVE-2025-65187

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed...

6.1CVSS5.7AI score
SaveExploits0References4
CVE
CVE
added 2025/12/02 12:00 a.m.55 views

CVE-2025-65187

CVE-2025-65187 describes a Stored XSS in CiviCRM prior to v6.7, specifically in the Accounting Batches field. An authenticated user can inject JavaScript into that field, which executes when the page is viewed. The vulnerability is documented across multiple feeds (NVD/Red Hat/Nessus/EUVD/OSV/Ubu...

6.1CVSS5.7AI score0.00224EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2025/12/02 12:00 a.m.26 views

CVE-2025-65187

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed...

0.00224EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/12/02 12:00 a.m.12 views

CiviCRM 安全漏洞

CiviCRM is an open source, cloud-based member relationship management CRM system developed specifically to meet the needs of nonprofit and association-based organizations. A security vulnerability exists in CiviCRM versions prior to 6.7 that stems from the Accounting Batches field being vulnerabl...

6.1CVSS5.8AI score0.00224EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/11/29 12:00 a.m.37 views

PT-2026-43779

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ext4 file system where caching extents during the splitting process can lead to stale extents remaining in the status tree. Specifically, when ext4 split extent at...

7CVSS5.7AI score0.00123EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/11/27 12:00 a.m.11 views

PT-2025-52253

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel’s sch cake scheduler related to incorrect queue length qlen reduction within the cake drop function. The problem arises because cake enqueue assumes t...

4.6CVSS6.8AI score0.00198EPSS
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/11/27 12:00 a.m.14 views

Department-Specific Security Awareness Campaigns: A Cross-Organizational Study of HR and Accounting

Many cyberattacks succeed because they exploit flaws at the human level. To address this problem, organizations rely on security awareness programs, which aim to make employees more resilient against social engineering. While some works have suggested that such programs should account for...

6.8AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/11/17 12:00 a.m.15 views

GNUnet P2P Framework 0.26.1

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

6.8AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2025/11/11 9:13 a.m.12 views

kernel: acct: perform last write from workqueue

In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In 1 it was reported that the acct2 system call can be used to trigger NULL deref in cases where it is set to write to a file that triggers an internal lookup. This can e.g., happen when...

5.5CVSS6.8AI score0.00237EPSS
SaveExploits0References5
Rows per page
Query Builder