Lucene search
K

313 matches found

Microsoft CVE
Microsoft CVE
added 2025/09/04 12:34 a.m.1 views

PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()

...

5.5CVSS6.8AI score0.0004EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-21898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg fil...

8.8CVSS8.7AI score0.01929EPSS
Exploits1References2
Fedora
Fedora
added 2025/06/24 1:44 a.m.3 views

[SECURITY] Fedora 42 Update: optipng-7.9.1-1.fc42

OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information. This program also converts external formats BMP, GIF, PNM and TIFF to optimized PNG, and performs PNG integrity checks and corrections...

7.8CVSS7.8AI score0.00025EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/23 8:48 a.m.2 views

CVE-2024-21792

Time-of-check Time-of-use race condition in IntelR Neural Compressor software before version 2.5.0 may allow an authenticated user to potentially enable information disclosure via local access...

4.7CVSS6.1AI score0.00036EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:5 a.m.4 views

CVE-2024-37181

Time-of-check time-of-use race condition in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable information disclosure via adjacent access...

2.6CVSS6.3AI score0.00037EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:32 a.m.3 views

CVE-2024-36284

Improper input validation in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

5.5CVSS7.2AI score0.00069EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:53 p.m.7 views

CVE-2018-13030

An issue was discovered in jpeg-compressor 0.1. The buildhuffman function in stbimage.c allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact...

7.8CVSS8.2AI score0.00314EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 9:13 p.m.4 views

CVE-2006-0303

Multiple unspecified vulnerabilities in the 1 publishing component, 2 Contact Component, 3 TinyMCE Compressor, and 4 other components in Joomla! 1.0.5 and earlier have unknown impact and attack vectors...

10CVSS7.2AI score0.0001EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/01 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible deadlock in the hibernatecompressorparamset function...

5.5CVSS6.5AI score0.0004EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/04/11 4:58 p.m.9 views

CVE-2025-31391

Cross-Site Request Forgery CSRF vulnerability in regen Script Compressor script-compressor allows Stored XSS.This issue affects Script Compressor: from n/a through = 1.7.1...

7.1CVSS7.2AI score0.00223EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/04/09 5:34 p.m.3 views

WordPress Script Compressor plugin <= 1.7.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by johska in WordPress Plugin Script Compressor versions = 1.7.1...

7.1CVSS7.6AI score0.00223EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/04/09 5:15 p.m.5 views

CVE-2025-31391

Cross-Site Request Forgery CSRF vulnerability in regen Script Compressor script-compressor allows Stored XSS.This issue affects Script Compressor: from n/a through = 1.7.1...

7.1CVSS0.00223EPSS
Exploits0References1
CVE
CVE
added 2025/04/09 4:10 p.m.45 views

CVE-2025-31391

CVE-2025-31391 corresponds to a CSRF-triggered Stored XSS in the WordPress plugin “Script Compressor.” Public docs indicate the affected product is Script Compressor (versions up to 1.7.1 as per initial description) and that the underlying issue combines Cross-Site Request Forgery with stored XSS...

7.1CVSS7.2AI score0.00223EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/09 4:10 p.m.12 views

CVE-2025-31391 WordPress Script Compressor plugin <= 1.7.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in regen Script Compressor script-compressor allows Stored XSS.This issue affects Script Compressor: from n/a through = 1.7.1...

7.1CVSS0.00223EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/09 4:10 p.m.6 views

CVE-2025-31391 WordPress Script Compressor plugin <= 1.7.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in regen Script Compressor script-compressor allows Stored XSS.This issue affects Script Compressor: from n/a through = 1.7.1...

7.1CVSS7.2AI score0.00223EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/09 12:0 a.m.2 views

WordPress plugin Script Compressor 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS7.3AI score0.00223EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/09 12:0 a.m.2 views

PT-2025-15745 · Unknown · Script Compressor

Name of the Vulnerable Software and Affected Versions: Script Compressor versions 1.7.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in the regen Script Compressor. Recommendations: For versions 1.7.1 and earlier, update to a version...

7.1CVSS7.2AI score0.00223EPSS
Exploits0References4
vulnersOsv
vulnersOsv
added 2025/03/20 9:30 a.m.2 views

io.xuxiaowei.seata:seata-server (>=2.1.0 <=2.2.0), org.apache.seata:seata-compressor-all (>=2.1.0 <=2.2.0) +5 more potentially affected by CVE-2024-54016 via org.apache.seata:seata-compressor-zstd (>=2.1.0 <=2.2.0)

org.apache.seata:seata-compressor-zstd MAVEN version =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.2.0 Source cves: CVE-2024-54016 Source advisory: SNYK:JAVA-ORGAPACHESEATA-9521513...

4.3CVSS5.8AI score0.00149EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2025/03/20 9:30 a.m.2 views

com.weicoder:seata (>=3.5.1 <=3.6.2), io.seata:seata-compressor-all (>=1.5.0 <=2.0.0) +7 more potentially affected by CVE-2024-54016 via io.seata:seata-compressor-zstd (>=1.5.0 <=2.0.0)

io.seata:seata-compressor-zstd MAVEN version =1.5.0, =3.5.1, =1.5.0, =1.5.0, =1.8.0, =1.5.0, =1.7.0, =1.8.0, =2.0.0 Source cves: CVE-2024-54016 Source advisory: SNYK:JAVA-IOSEATA-9521514...

4.3CVSS5.8AI score0.00149EPSS
Exploits0
Snyk
Snyk
added 2025/03/20 9:30 a.m.3 views

Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification in ZstdUtil. An attacker can cause degradation in performance by sending very large compressed data. Remediation Upgrade org.apache.seata:seata-compressor-zstd to version...

5.3CVSS6.9AI score0.00149EPSS
Exploits0References2
Rows per page
Query Builder