Lucene search
+L

23987 matches found

attackerkb
attackerkb
•added 2025/08/20 8:03 a.m.•14 views

CVE-2025-49400

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in osama.esh WP Visitor Statistics Real Time Traffic allows Stored XSS. This issue affects WP Visitor Statistics Real Time Traffic: from n/a through 8.2...

9.8CVSS5.2AI score0.00484EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/08/20 12:00 a.m.•10 views

CVE-2024-57152

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

7.2AI score0.0037EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•30 views

PT-2025-34146 · My-Site · My-Site

Name of the Vulnerable Software and Affected Versions: my-site version 1.0.2 Description: Incorrect access control in the preHandle function allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class. Recommendations: Update to a...

7.5CVSS6.6AI score0.0037EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/08/20 12:00 a.m.•29 views

CVE-2024-57152

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

0.0037EPSS
SaveExploits1References1
CVE
CVE
•added 2025/08/20 12:00 a.m.•44 views

CVE-2024-57152

The personal website my-site v1.0.2 is vulnerable to improper access control within the preHandle function of the cn.luischen.interceptor.BaseInterceptor class. This flaw allows unauthenticated attackers to gain unauthorized access to sensitive components. As a remediation, users should update to...

7.5CVSS6.7AI score0.0037EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/20 12:00 a.m.•13 views

SUSE SLES12 Security Update : gstreamer-0_10-plugins-base (SUSE-SU-2025:02919-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02919-1 advisory. - CVE-2025-47808: Fixed stack buffer overflow in SubRip subtitle parser bsc1244404 - CVE-2025-47807: Fixed NULL-pointer dereference in TMPlaye...

5.6CVSS8.3AI score0.00478EPSS
SaveExploits3References10
OpenVAS
OpenVAS
•added 2025/08/20 12:00 a.m.•2 views

Fedora: Security Advisory (FEDORA-2025-dd97126e3a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.5AI score0.00668EPSS
SaveExploits5References4
OpenVAS
OpenVAS
•added 2025/08/20 12:00 a.m.•3 views

Fedora: Security Advisory (FEDORA-2025-8327c1ad81)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.5AI score0.00668EPSS
SaveExploits5References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•2 views

CVE-2025-9287: Improper Input Validation

Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4...

9.1CVSS5.8AI score0.00529EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•12 views

PT-2025-34162

Name of the Vulnerable Software and Affected Versions: cipher-base versions through 1.0.4 Description: An improper input validation issue exists in cipher-base, allowing input data manipulation. This is due to missing input type checks, which can lead to invalid value calculations, hash state...

9.1CVSS6.6AI score0.00529EPSS
SaveExploits1References39
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•18 views

cipher-base 安全漏洞

cipher-base is an abstract base class for cryptographic streams in the Browserify open source. A security vulnerability exists in cipher-base version 1.0.4 and earlier, which stems from improper input validation and could lead to tampering of input data...

9.1CVSS6.7AI score0.00529EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2025/08/20 12:00 a.m.•4 views

Mozilla Firefox Security Advisory (MFSA2025-64) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2025-64. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

9.8CVSS6.7AI score0.00588EPSS
SaveExploits0References10
Snyk
Snyk
•added 2025/08/19 3:33 p.m.•24 views

Cross-site Scripting (XSS)

Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Cross-site Scripting XSS via the HTML form element on the Form Trigger node. An authenticated attacker can execute arbitrary JavaScript code in the context of authenticated users by injecting...

8.7CVSS5.5AI score0.00378EPSS
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2025/08/19 1:52 p.m.•11 views

Security update for gstreamer-0_10-plugins-base

This update for gstreamer-010-plugins-base fixes the following issues: CVE-2025-47808: Fixed stack buffer overflow in SubRip subtitle parser bsc1244404 CVE-2025-47807: Fixed NULL-pointer dereference in TMPlayer subtitle parser bsc1244403 CVE-2025-47806: Fixed NULL-pointer dereference in SubRip...

5.5CVSS7.9AI score0.00478EPSS
SaveExploits3References12
RedhatCVE
RedhatCVE
•added 2025/08/19 1:14 p.m.•18 views

CVE-2025-9162

A flaw was found in org.keycloak/keycloak-model-storage-service. The KeycloakRealmImport custom resource substitutes placeholders within imported realm documents, potentially referencing environment variables. This substitution process allows for injection attacks when crafted realm documents are...

4.9CVSS6.8AI score0.00497EPSS
SaveExploits0References3
Fedora
Fedora
•added 2025/08/19 4:45 a.m.•13 views

[SECURITY] Fedora 41 Update: mingw-gstreamer1-plugins-base-1.26.3-1.fc41

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

8.1CVSS6.3AI score0.00668EPSS
SaveExploits5
Fedora
Fedora
•added 2025/08/19 4:16 a.m.•20 views

[SECURITY] Fedora 42 Update: mingw-gstreamer1-plugins-base-1.26.3-1.fc42

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

8.1CVSS6.3AI score0.00668EPSS
SaveExploits5
OpenVAS
OpenVAS
•added 2025/08/19 12:00 a.m.•26 views

Ubuntu: Security Advisory (USN-7699-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.4CVSS8.1AI score0.00652EPSS
SaveExploits2References2
Veeam
Veeam
•added 2025/08/19 12:00 a.m.•49 views

PostgreSQL and PgBouncer Sizing and Configuration Guide

Challenge Jobs or tasks in Veeam Backup for Microsoft 365 fail with the error: Error: EFCoreLogging: An error occurred using the connection to database 'cache2331ace3-eff1-4ebb-b328-0cb948b2f5c5' on server 'tcp://vb365.domain.tld:6432'. Cause These connection errors can occur in larger environmen...

5.5AI score
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/19 12:00 a.m.•17 views

Amazon Linux 2 : gstreamer1-plugins-base (ALAS-2025-2971)

The version of gstreamer1-plugins-base installed on the remote host is prior to 1.18.4-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2971 advisory. GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability h...

9.1CVSS6.8AI score0.01337EPSS
SaveExploits2References10
Rows per page
Query Builder