Lucene search
+L

71 matches found

NVD
NVD
•added 2026/05/01 4:16 p.m.•18 views

CVE-2026-42473

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize on data from the filesystem in the FileHandler object...

9.8CVSS0.00701EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/01 12:00 a.m.•2 views

CVE-2026-42472: Deserialization of Untrusted Data

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize on data from Redis in the RedisHandler object...

9.8CVSS5.8AI score0.00701EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/01 12:00 a.m.•30 views

CVE-2026-42473

The MixPHP Framework versions 2.x through 2.2.17 are vulnerable to an unsafe deserialization flaw (CWE-502). The issue originates from the FileHandler object, where session and cache handlers use the unserialize() function on data retrieved from the filesystem. An attacker can exploit this by pro...

9.8CVSS5.9AI score0.00701EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/01 12:00 a.m.•29 views

CVE-2026-42472

The MixPHP Framework (versions 2.x through 2.2.17) contains an unsafe deserialization vulnerability in the RedisHandler object. The issue arises because the session and cache handlers use the unserialize() function on data retrieved from Redis without sufficient validation. An attacker can exploi...

9.8CVSS5.9AI score0.00701EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/05/01 12:00 a.m.•19 views

EUVD-2026-26674

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize on data from the filesystem in the FileHandler object...

9.8CVSS5.8AI score0.00701EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/05/01 12:00 a.m.•13 views

CVE-2026-42473

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize on data from the filesystem in the FileHandler object...

5.9AI score0.00701EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/01 12:00 a.m.•21 views

PT-2026-36490

Name of the Vulnerable Software and Affected Versions MixPHP Framework versions 2.x through 2.2.17 Description An unsafe deserialization issue exists where the session and cache handlers utilize the unserialize function on data retrieved from the filesystem within the FileHandler object...

9.8CVSS5.8AI score0.00701EPSS
SaveExploits0References10
OSV
OSV
•added 2026/01/16 12:10 a.m.•13 views

MAL-2026-302 Malicious code in s3-cache-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a516ba427a772d00c202a782f0c11f2217ddb8360626591dbbd72b68cc5a1b The package s3-cache-handler was found to contain malicious code...

6.8AI score
SaveExploits0
EUVD
EUVD
•added 2026/01/16 12:10 a.m.•12 views

EUVD-2026-3096

Malicious code in s3-cache-handler npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/16 12:10 a.m.•11 views

Malicious code in s3-cache-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a516ba427a772d00c202a782f0c11f2217ddb8360626591dbbd72b68cc5a1b The package s3-cache-handler was found to contain malicious code...

7AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2015-2445

Malware in sbrugna...

7.5CVSS6.4AI score0.01265EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-24063

Malicious code in bioql PyPI...

4.7CVSS3.9AI score0.00164EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/08/19 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2022-20565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability classified as critical was found in Linux Kernel Operating System affected version unknown. Affected by this vulnerability is some unknown...

5.8AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/11 8:33 p.m.•29 views

CVE-2025-8774

A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. Local access is required to approach this...

4.7CVSS7.1AI score0.00164EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/09 9:15 p.m.•21 views

CVE-2025-8774

A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. Local access is required to approach this...

4.7CVSS0.00164EPSS
SaveExploits0References4
OSV
OSV
•added 2025/08/09 8:32 p.m.•15 views

CVE-2025-8774 riscv-boom SonicBOOM L1 Data Cache timing discrepancy

A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. Local access is required to approach this...

2CVSS4.4AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2025/08/09 8:32 p.m.•31 views

CVE-2025-8774 riscv-boom SonicBOOM L1 Data Cache timing discrepancy

A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. Local access is required to approach this...

2.5CVSS0.00164EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/09 12:00 a.m.•2 views

CVE-2025-8774: Observable Timing Discrepancy

A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. Local access is required to approach this...

4.7CVSS4.8AI score0.00164EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/09 12:00 a.m.•18 views

PT-2025-32455 · Sonicboom · Sonicboom

Name of the Vulnerable Software and Affected Versions: riscv-boom SonicBOOM versions through 2.2.3 Description: A timing discrepancy exists in the L1 Data Cache Handler component of the software. This issue is considered problematic and requires local access for exploitation, which is described a...

2.5CVSS6.6AI score0.00164EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2025/08/08 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-27154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spotipy is a lightweight Python library for the Spotify Web API. The CacheHandler class creates a cache file to store the auth token. Prior to version 2.25.1, t...

9.8CVSS7AI score0.00611EPSS
SaveExploits1References2
Rows per page
Query Builder