Lucene search
+L

7460 matches found

Cvelist
Cvelist
added 2025/10/15 1:7 a.m.15 views

CVE-2025-54278 Bridge | Heap-based Buffer Overflow (CWE-122)

Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that ...

5.5CVSS0.00223EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/15 12:0 a.m.8 views

Adobe Bridge 安全漏洞

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause arbitrary code to be executed in the current user's environment...

7.8CVSS7.6AI score0.00249EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/15 12:0 a.m.34 views

PT-2025-42339

Name of the Vulnerable Software and Affected Versions Versions affected versions not specified Description Hardware systems with a High-Speed Bridge HSB may experience a lockup of the HSB under undisclosed traffic conditions and conditions beyond the attacker's control. Software versions that hav...

8.2CVSS5.9AI score0.00215EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/10/15 12:0 a.m.4 views

F5 Networks BIG-IP : BIG-IP HSB vulnerability (K000151658)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.0 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K000151658 advisory. Under undisclosed traffic conditions along with conditions beyond the attacker's control,...

8.2CVSS5.6AI score0.00215EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/15 12:0 a.m.10 views

PT-2025-42224

Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that ...

5.5CVSS6.1AI score0.00223EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/15 12:0 a.m.5 views

PT-2025-42223

Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00249EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/15 12:0 a.m.8 views

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from certain traffic conditions that could result in a high-speed bridge lockup...

8.2CVSS6.5AI score0.00215EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/15 12:0 a.m.11 views

Adobe Bridge 安全漏洞

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause the disclosure of sensitive information in memory...

5.5CVSS6.7AI score0.00223EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/10/14 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-50526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: fix memory corruption with too many bridges Add the missing sanity check on the...

7.8CVSS6.4AI score0.00144EPSS
SaveExploits0References2
Adobe
Adobe
added 2025/10/14 12:0 a.m.40 views

APSB25-96 : Security update available for Adobe Bridge

Adobe has released a security update for Adobe Bridge. This update addresses a critical and important vulnerabilities that could lead to arbitrary code execution and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates...

8AI score
SaveExploits0Affected Software1
Amazon
Amazon
added 2025/10/14 12:0 a.m.14 views

Low: docker

Issue Overview: Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails...

5.2CVSS6.8AI score0.00152EPSS
SaveExploits0
NVD
NVD
added 2025/10/09 2:15 a.m.11 views

CVE-2025-11166

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Cross-Site Request Forgery CSRF in all versions up to, and including, 9.0.46. This is due to the plugin exposing state-changing REST actions through an AJAX bridge without proper CSRF token validation, and having...

5.4CVSS0.00179EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/10/09 1:48 a.m.21 views

CVE-2025-11166 WP Go Maps (formerly WP Google Maps) <= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Update

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Cross-Site Request Forgery CSRF in all versions up to, and including, 9.0.46. This is due to the plugin exposing state-changing REST actions through an AJAX bridge without proper CSRF token validation, and having...

5.4CVSS0.00179EPSS
SaveExploits0References6
CVE
CVE
added 2025/10/09 1:48 a.m.28 views

CVE-2025-11166

WP Go Maps (formerly WP Google Maps) for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) across all versions up to 9.0.46. The root cause is an AJAX bridge that exposes state-changing REST actions without proper CSRF token validation and GET-accessible destructive logic lacking a per...

5.4CVSS5.5AI score0.00179EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/10/09 12:0 a.m.6 views

Barco ClickShare Devices OS Command Injection (CVE-2019-18830)

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection. The embedded 'donglebridge' program used to expose the functionalities of the ClickShare Button to a USB host, is vulnerable to OS command injection vulnerabilities. These vulnerabilities could lead to code...

10CVSS8.9AI score0.04337EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.12 views

WordPress plugin WP Go Maps 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress...

5.4CVSS6.5AI score0.00179EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/10/09 12:0 a.m.6 views

Barco ClickShare Devices Improper Certificate Validation (CVE-2019-18826)

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate's Chain of Trust. The embedded 'donglebridge' program used to expose the functionalities of the ClickShare Button to a USB host, does not properly validate the whole certificate chain. This plugin on...

9.8CVSS8.4AI score0.00678EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.15 views

PT-2025-41330

Name of the Vulnerable Software and Affected Versions WP Go Maps plugin for WordPress versions prior to 9.0.46 Description The WP Go Maps plugin for WordPress is susceptible to Cross-Site Request Forgery CSRF. The plugin exposes state-changing REST actions through an AJAX bridge without appropria...

5.4CVSS6.4AI score0.00179EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
added 2025/10/08 11:39 p.m.7 views

SUSE CVE-2022-50526

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: fix memory corruption with too many bridges Add the missing sanity check on the bridge counter to avoid corrupting data beyond the fixed-sized bridge array in case there are ever more than eight bridges. Patchwork:...

5.5CVSS6.6AI score0.00144EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/08 3:2 a.m.7 views

EUVD-2025-31857

A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /editbook.php. The manipulation of the argument image results in unrestricted upload. It is possible to launch the attack remotely. T...

6.5CVSS6.3AI score0.00302EPSS
SaveExploits1References5
Rows per page
Query Builder