Lucene search
+L

7949 matches found

CNNVD
CNNVD
added 2025/11/04 12:0 a.m.12 views

Apple多款产品 安全漏洞

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple macOS is a specialized operating system developed for Mac computers.Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in several Apple products th...

7.1CVSS6.1AI score0.00245EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.6 views

Apple多款产品 安全漏洞

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS is a specialized operating system developed for Mac computers. A security vulnerability exists in multiple Apple products tha...

4.3CVSS6.3AI score0.00936EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2025/11/03 9:11 a.m.18 views

xorg: xmayland: Value overflow in XkbSetCompatMap()

A flaw was identified in the X.Org X server’s X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a cras...

7.3CVSS5.9AI score0.00277EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/11/03 12:0 a.m.10 views

PT-2025-44831

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 Description An issue involving out-of-bounds access exists due to insufficient bounds checking. Processing a specially crafted media file could result in application crashes or memor...

4.3CVSS6.5AI score0.00936EPSS
SaveExploits0References9
Apple
Apple
added 2025/11/03 12:0 a.m.1148 views

About the security content of Xcode 26.1

About the security content of Xcode 26.1 This document describes the security content of Xcode 26.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

8.8CVSS7.1AI score0.00349EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/11/02 9:8 a.m.10 views

RLSA-2025:19106 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: NFS: Fix a race when updating an existing write CVE-2025-39697 kernel: vsock/virtio: Validate length in packet header before skbput CVE-2025-39718 kernel: NFS: Fix filehandle bounds...

7.6CVSS6.9AI score0.00202EPSS
SaveExploits0References7
AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.4 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in cfg80211connectresult If the ssid-datalen is greater than IEEE80211MAXSSIDLEN 32, it could lead to memory corruption. Therefore, bounds checking should be added...

8.8CVSS5.8AI score0.00202EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/10/31 10:7 p.m.12 views

CVE-2022-50588

Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting XSS in the update checking feature. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS6.3AI score0.00414EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/31 12:0 a.m.9 views

Xen 安全漏洞

Xen is an open source virtual machine monitor product from Xen Open Source. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. A security vulnerability exists in Xen that stems from a...

7.5CVSS6.1AI score0.00355EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/30 10:15 p.m.9 views

CVE-2022-50588

Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting XSS in the update checking feature. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS5.9AI score0.00414EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/30 10:15 p.m.15 views

CVE-2022-50588

Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting XSS in the update checking feature. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS0.00414EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/30 9:45 p.m.14 views

CVE-2022-50588 Nagios XI < 5.8.9 Stored XSS in Update Checking

Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting XSS in the update checking feature. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.1CVSS0.00414EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/30 9:45 p.m.4 views

CVE-2022-50588 Nagios XI < 5.8.9 Stored XSS in Update Checking

Nagios XI versions prior to 5.8.9 are vulnerable to cross-site scripting XSS in the update checking feature. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.1CVSS5.9AI score0.00414EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/30 9:45 p.m.17 views

CVE-2022-50588

Nagios XI prior to version 5.8.9 is affected by a stored XSS flaw in the update-checking feature. The vulnerability stems from insufficient validation/escaping of user-supplied input, allowing an attacker to inject and execute arbitrary script in a victim’s browser. Public sources in the provided...

5.4CVSS5.9AI score0.00414EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/10/30 6:0 p.m.12 views

CLSA-2025-1761847256 Fix CVE(s): CVE-2022-47673, CVE-2023-25584

SECURITY UPDATE: multiple vulnerabilities in vms-alpha.c parsemodule - debian/patches/CVE-2022-47673CVE-2023-25584-.patch: fix null pointer dereference in parsemodule by adding return value checking for bfdzalloc calls, fix potential out of bounds memory access in DST record parsing loop -...

7.8CVSS6.4AI score0.00434EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/30 9:0 a.m.6 views

CVE-2025-10920

A remote code execution RCE vulnerability exists in GIMP due to improper bounds checking during the parsing of ICNS image files. When a user opens a specially crafted ICNS file, it can trigger an out-of-bounds write, allowing attackers to execute arbitrary code within the context of the GIMP...

7.8CVSS7.9AI score0.00441EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/30 5:8 a.m.8 views

EUVD-2025-36898

A flaw was identified in the X.Org X server’s X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a cras...

7.3CVSS6.3AI score0.00277EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/30 12:0 a.m.9 views

PT-2025-44485

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.8.9 Description The software is susceptible to a cross-site scripting XSS issue within the update checking feature. Insufficient validation or escaping of user-supplied input could allow an attacker to inject and...

5.4CVSS6AI score0.00414EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/30 12:0 a.m.9 views

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 5.8.9, which stems from insufficient...

5.4CVSS6AI score0.00414EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/30 12:0 a.m.8 views

Red Hat Enterprise Linux 安全漏洞

Red Hat Enterprise Linux is a Linux operating system for enterprise users from the American company Red Hat. A security vulnerability exists in Red Hat Enterprise Linux that stems from improper boundary checking in the XkbSetCompatMap function, which could result in an unsigned short integer...

7.3CVSS6.8AI score0.00277EPSS
SaveExploits0References3
Rows per page
Query Builder