Lucene search
+L

1412 matches found

Tenable Nessus
Tenable Nessus
•added 2025/08/12 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2023-32209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox 113. CVE-2023-32209 Note that Nessus relies on the...

7.5CVSS6.8AI score0.00761EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/10 11:14 p.m.•22 views

CVE-2025-8743

A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. This affects an unknown part of the file /datasourceedit.shtm of the component Virtual Data Source Property Handler. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate...

5.4CVSS6.5AI score0.00296EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/08 11:15 p.m.•23 views

CVE-2025-8743

A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. This affects an unknown part of the file /datasourceedit.shtm of the component Virtual Data Source Property Handler. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate...

5.4CVSS0.00296EPSS
SaveExploits1References5
OSV
OSV
•added 2025/08/08 11:02 p.m.•17 views

CVE-2025-8743 Scada-LTS Virtual Data Source Property data_source_edit.shtm cross site scripting

A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. This affects an unknown part of the file /datasourceedit.shtm of the component Virtual Data Source Property Handler. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate...

5.1CVSS3.9AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/08/08 11:02 p.m.•14 views

CVE-2025-8743 Scada-LTS Virtual Data Source Property data_source_edit.shtm cross site scripting

A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. This affects an unknown part of the file /datasourceedit.shtm of the component Virtual Data Source Property Handler. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate...

5.1CVSS6.4AI score0.00296EPSS
SaveExploits1References5
CVE
CVE
•added 2025/08/08 11:02 p.m.•49 views

CVE-2025-8743

CVE-2025-8743 affects Scada-LTS up to 2.7.8.1. The vulnerability resides in the Virtual Data Source Property Handler, specifically the /data_source_edit.shtm endpoint, where manipulation of the Name parameter enables cross-site scripting. The issue can be exploited remotely and the exploit has be...

5.4CVSS6.4AI score0.00296EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/08/08 11:02 p.m.•40 views

CVE-2025-8743 Scada-LTS Virtual Data Source Property data_source_edit.shtm cross site scripting

A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. This affects an unknown part of the file /datasourceedit.shtm of the component Virtual Data Source Property Handler. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate...

5.1CVSS0.00296EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/08/08 12:00 a.m.•23 views

PT-2025-32416 · Scada-Lts · Scada-Lts

Name of the Vulnerable Software and Affected Versions: Scada-LTS versions prior to 2.7.8.2 Description: A cross-site scripting issue exists in Scada-LTS Virtual Data Source Property Handler. The manipulation of the Name argument in the /data source edit.shtm file can lead to exploitation. The...

5.1CVSS6.5AI score0.00296EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/08 12:00 a.m.•4 views

CVE-2025-8743: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. This affects an unknown part of the file /datasourceedit.shtm of the component Virtual Data Source Property Handler. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate...

5.4CVSS3.9AI score0.00296EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/08/08 12:00 a.m.•23 views

The vulnerability of the ASUS DriverHub tool for installing and updating drivers is related to deficiencies in the data source verification mechanism. This allows a hacker to execute arbitrary code.

The vulnerability of the ASUS DriverHub tool for installing and updating drivers is related to deficiencies in the data source verification mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code with administrator privileges remotely...

7.5CVSS8.4AI score0.00501EPSS
SaveExploits0References5
Snyk
Snyk
•added 2025/08/04 9:30 a.m.•5 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the URL validation process. An attacker can access internal or otherwise restricted resources by submitting a specially crafted URL that bypasses configured allowlists. Remediation Upgrade...

5.3CVSS7AI score0.00332EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/07/30 2:48 p.m.•9 views

Directory Traversal

Overview bugsink is a Self-hosted Error Tracking Affected versions of this package are vulnerable to Directory Traversal via the getfilenameforeventid function when constructing file locations from untrusted eventid input without validation. An attacker can overwrite or create files in arbitrary...

8.1CVSS7.7AI score0.00577EPSS
SaveExploits0References2
Circl
Circl
•added 2025/07/29 6:46 a.m.•13 views

CVE-2025-54662

creationtimestamp| type| source ---|---|--- 2025-07-29 06:46:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv3j4gsuag2o...

6.7AI score
SaveExploits0References1
OSV
OSV
•added 2025/07/25 7:15 p.m.•15 views

CVE-2025-52453

Server-Side Request Forgery SSRF vulnerability in Salesforce Tableau Server on Windows, Linux Flow Data Source modules allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

8.2CVSS5.8AI score0.00305EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/25 7:15 p.m.•17 views

CVE-2025-52453

Server-Side Request Forgery SSRF vulnerability in Salesforce Tableau Server on Windows, Linux Flow Data Source modules allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

8.2CVSS0.00305EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/25 7:05 p.m.•57 views

CVE-2025-52453

A Server-Side Request Forgery (SSRF) vulnerability exists in the Flow Data Source modules of Salesforce Tableau Server running on Windows and Linux. The root cause is insufficient validation of queries on the server side, which allows an attacker to perform an SSRF attack and achieve Resource Loc...

8.2CVSS6.7AI score0.00305EPSS
SaveExploits0References1Affected Software1
Circl
Circl
•added 2025/07/25 4:21 p.m.•12 views

CVE-2025-38463

creationtimestamp| type| source ---|---|--- 2025-07-25 16:21:55+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lushfadzopr2...

7.8CVSS7.3AI score0.00165EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/25 12:00 a.m.•17 views

Salesforce Tableau 安全漏洞

Salesforce Tableau is a data visualization and analytics platform from Salesforce, Inc. A security vulnerability exists in Salesforce Tableau versions prior to 2025.1.3, prior to 2024.2.12, and prior to 2023.3.19, which stems from insufficient validation of the Flow Data Source module and could...

8.2CVSS6.6AI score0.00305EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/25 12:00 a.m.•3 views

CVE-2025-52452: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Salesforce Tableau Server on Windows, Linux tabdoc api - duplicate-data-source modules allows Absolute Path Traversal. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3....

8.5CVSS5.8AI score0.00441EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/25 12:00 a.m.•5 views

CVE-2025-52453: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Salesforce Tableau Server on Windows, Linux Flow Data Source modules allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

8.2CVSS5.8AI score0.00305EPSS
SaveExploits0References1
Rows per page
Query Builder