Lucene search
K

46 matches found

Vulnrichment
Vulnrichment
added 2026/05/01 12:0 a.m.1 views

CVE-2026-42473

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize on data from the filesystem in the FileHandler object...

5.8AI score0.0038EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/01 12:0 a.m.2 views

PT-2026-36490

Name of the Vulnerable Software and Affected Versions MixPHP Framework versions 2.x through 2.2.17 Description An unsafe deserialization issue exists where the session and cache handlers utilize the unserialize function on data retrieved from the filesystem within the FileHandler object...

9.8CVSS5.8AI score0.0038EPSS
Exploits0References10
CVE
CVE
added 2026/05/01 12:0 a.m.5 views

CVE-2026-42472

The CVE-2026-42472 entry describes an unsafe deserialization vulnerability in MixPHP Framework 2.x up to 2.2.17, caused by session and cache handlers calling unserialize() on data sourced from Redis in the RedisHandler object. This is reported across multiple feeds (NVD, CVE listing, vuln enrichm...

9.8CVSS5.8AI score0.0038EPSS
Exploits0References3
CVE
CVE
added 2026/05/01 12:0 a.m.5 views

CVE-2026-42473

The CVE-2026-42473 issue affects MixPHP Framework 2.x up to 2.2.17. The vulnerability arises from unsafe deserialization in the FileHandler’s session and cache handling, where data from the filesystem is passed to PHP’s unserialize(), enabling high-impact data integrity/confidentiality/availabili...

9.8CVSS5.8AI score0.0038EPSS
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/16 12:10 a.m.4 views

Malicious code in s3-cache-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a516ba427a772d00c202a782f0c11f2217ddb8360626591dbbd72b68cc5a1b The package s3-cache-handler was found to contain malicious code...

7AI score
Exploits0
EUVD
EUVD
added 2026/01/16 12:10 a.m.3 views

EUVD-2026-3096

Malicious code in s3-cache-handler npm...

6.6AI score
Exploits0
OSV
OSV
added 2026/01/16 12:10 a.m.5 views

MAL-2026-302 Malicious code in s3-cache-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a516ba427a772d00c202a782f0c11f2217ddb8360626591dbbd72b68cc5a1b The package s3-cache-handler was found to contain malicious code...

6.8AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2015-2445

Malware in sbrugna...

7.5CVSS6.4AI score0.01265EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-24063

Malicious code in bioql PyPI...

4.7CVSS3.9AI score0.00148EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-20565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability classified as critical was found in Linux Kernel Operating System affected version unknown. Affected by this vulnerability is some unknown...

5.2AI score
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/08/11 8:33 p.m.8 views

CVE-2025-8774

A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. Local access is required to approach this...

4.7CVSS7.1AI score0.00148EPSS
Exploits0References1
OSV
OSV
added 2025/08/09 9:15 p.m.3 views

CVE-2025-8774

A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. Local access is required to approach this...

4.7CVSS5.7AI score
Exploits0References4
NVD
NVD
added 2025/08/09 9:15 p.m.4 views

CVE-2025-8774

A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. Local access is required to approach this...

4.7CVSS0.00148EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/08/09 8:32 p.m.10 views

CVE-2025-8774 riscv-boom SonicBOOM L1 Data Cache timing discrepancy

A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. Local access is required to approach this...

2.5CVSS0.00148EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/08/09 12:0 a.m.4 views

PT-2025-32455 · Sonicboom · Sonicboom

Name of the Vulnerable Software and Affected Versions: riscv-boom SonicBOOM versions through 2.2.3 Description: A timing discrepancy exists in the L1 Data Cache Handler component of the software. This issue is considered problematic and requires local access for exploitation, which is described a...

2.5CVSS6.6AI score0.00148EPSS
Exploits0References10
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-27154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spotipy is a lightweight Python library for the Spotify Web API. The CacheHandler class creates a cache file to store the auth token. Prior to version 2.25.1, t...

9.8CVSS7AI score0.00589EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/06/09 12:0 a.m.21 views

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2023-2184)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability classified as critical was found in Linux Kernel Operating System affected version unknown. Affected by this vulnerability is so...

5.6AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/03/08 12:0 a.m.28 views

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2023-1488)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability classified as critical was found in Linux Kernel Operating System affected version unknown. Affected by this vulnerability is so...

5.6AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/02/08 12:0 a.m.58 views

EulerOS 2.0 SP8 : kernel (EulerOS-SA-2023-1320)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A use-after-free flaw was found in fs/ext4/namei.c:dxinsertblock in the Linux kernel's filesystem sub- component. This flaw allows a local...

7.1CVSS5.2AI score0.00325EPSS
Exploits0References7
CNNVD
CNNVD
added 2021/12/06 12:0 a.m.1 views

Qualcomm 芯片代码问题漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. A code issue vulnerability exists in the Qualcomm chip that stems from a lack ...

7.8CVSS7.4AI score0.00151EPSS
Exploits0References4
Rows per page
Query Builder