Lucene search
+L

3787 matches found

FreeBSD
FreeBSD
•added 2025/10/14 12:00 a.m.•14 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 1 security fix: 447192722 High CVE-2025-11756: Use after free in Safe Browsing. Reported by asnine on 2025-09-25...

7.2AI score0.00425EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/10/14 12:00 a.m.•3 views

Google Chrome < 141.0.7390.107 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 141.0.7390.107. It is, therefore, affected by a vulnerability as referenced in the 202510stable-channel-update-for-desktop14 advisory. - Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a...

5.9AI score0.00425EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/10/13 5:29 a.m.•12 views

CVE-2025-8887

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation.This issue affects Aybs...

6.1CVSS6.8AI score0.00148EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/10/13 12:00 a.m.•25 views

A Comprehensive Survey of Website Fingerprinting Attacks and Defenses in Tor: Advances and Open Challenges

The Tor network provides users with strong anonymity by routing their internet traffic through multiple relays. While Tor encrypts traffic and hides IP addresses, it remains vulnerable to traffic analysis attacks such as the website fingerprinting WF attack, achieving increasingly high...

6.8AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/11 12:30 a.m.•10 views

EUVD-2025-33791

Missing Authorization vulnerability in Drupal Facets allows Forceful Browsing.This issue affects Facets: from 0.0.0 before 2.0.10, from 3.0.0 before 3.0.1...

6.5AI score0.00203EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/10 11:15 p.m.•9 views

CVE-2025-9549

Missing Authorization vulnerability in Drupal Facets allows Forceful Browsing.This issue affects Facets: from 0.0.0 before 2.0.10, from 3.0.0 before 3.0.1...

6.5CVSS0.00203EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/10 10:24 p.m.•19 views

CVE-2025-9549 Facets - Moderately critical - Information Disclosure - SA-CONTRIB-2025-099

Missing Authorization vulnerability in Drupal Facets allows Forceful Browsing.This issue affects Facets: from 0.0.0 before 2.0.10, from 3.0.0 before 3.0.1...

0.00203EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/10 10:24 p.m.•1 views

CVE-2025-9549 Facets - Moderately critical - Information Disclosure - SA-CONTRIB-2025-099

Missing Authorization vulnerability in Drupal Facets allows Forceful Browsing.This issue affects Facets: from 0.0.0 before 2.0.10, from 3.0.0 before 3.0.1...

6.6AI score0.00203EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/10 10:24 p.m.•45 views

CVE-2025-9549

The Drupal Facets module (versions 0.0.0 to 2.0.9 and 3.0.0 ) is vulnerable to a Missing Authorization issue that allows Forceful Browsing . The root cause is that the module does not sufficiently check access to entities when they are displayed as facets. This allows an unauthenticated attacker ...

6.6AI score0.00203EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2025/10/10 10:24 p.m.•8 views

CVE-2025-9549 Facets - Moderately critical - Information Disclosure - SA-CONTRIB-2025-099

Missing Authorization vulnerability in Drupal Facets allows Forceful Browsing.This issue affects Facets: from 0.0.0 before 2.0.10, from 3.0.0 before 3.0.1...

6.5CVSS5.9AI score
SaveExploits0References5
NVD
NVD
•added 2025/10/10 2:15 p.m.•11 views

CVE-2025-8887

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation. This issue affects Aybs...

6.1CVSS0.00148EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/10 1:56 p.m.•7 views

CVE-2025-8887 IDOR in Usta Information Systems' Aybs Interaktif

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation. This issue affects Aybs...

6.1CVSS5.4AI score0.00148EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/10 1:56 p.m.•23 views

CVE-2025-8887

The CVE-2025-8887 issue concerns Usta Information Systems Inc. Aybs Interaktif. Affects Aybs Interaktif versions from 2024 through 28082025 and arises from an authorization bypass via user-controlled keys, leading to missing authorization and exposure of sensitive information to an unauthorized a...

6.1CVSS5.4AI score0.00148EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/10 1:56 p.m.•22 views

CVE-2025-8887 IDOR in Usta Information Systems' Aybs Interaktif

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation. This issue affects Aybs...

6.1CVSS0.00148EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/10 1:56 p.m.•11 views

EUVD-2025-33726

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation.This issue affects Aybs...

6.1CVSS6.3AI score0.00148EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2025/10/10 1:56 p.m.•7 views

CVE-2025-8887

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation. This issue affects Aybs...

6.1CVSS5.5AI score0.00148EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•22 views

PT-2025-41617

Name of the Vulnerable Software and Affected Versions Drupal Facets versions 0.0.0 through 2.0.9 Drupal Facets versions 3.0.0 through 3.0.0 Description A missing authorization issue exists in Drupal Facets, potentially allowing forceful browsing. The issue relates to insufficient access controls...

6.5CVSS6.6AI score0.00203EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•0 views

CVE-2025-8887: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation. This issue affects Aybs...

6.1CVSS5.8AI score0.00148EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•1 views

CVE-2025-9549: Missing Authorization

Missing Authorization vulnerability in Drupal Facets allows Forceful Browsing.This issue affects Facets: from 0.0.0 before 2.0.10, from 3.0.0 before 3.0.1...

6.5CVSS5.8AI score0.00203EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•11 views

PT-2025-41566

Name of the Vulnerable Software and Affected Versions Usta Information Systems Inc. Aybs Interaktif versions 2024 through 28082025 Description An authorization bypass exists in Usta Information Systems Inc. Aybs Interaktif due to user-controlled keys, missing authorization checks, and exposure of...

6.1CVSS6.5AI score0.00148EPSS
SaveExploits0References4
Rows per page
Query Builder