Lucene search
+L

9687 matches found

Github Security Blog
Github Security Blog
added 2025/10/03 2:52 p.m.17 views

phpMyFAQ duplicate email registration allows multiple accounts with the same email

Summary phpMyFAQ does not enforce uniqueness of email addresses during user registration. This allows multiple distinct accounts to be created with the same email. Because email is often used as an identifier for password resets, notifications, and administrative actions, this flaw can cause...

9.8CVSS7.6AI score0.00388EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/03 12:00 a.m.24 views

PT-2025-40540

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 4.0-nightly-2025-10-03 and below Description phpMyFAQ does not enforce uniqueness of email addresses during user registration, allowing multiple distinct accounts to be created with the same email. This can cause account...

9.8CVSS7.4AI score0.00388EPSS
SaveExploits1References11
Redos
Redos
added 2025/09/29 12:00 a.m.10 views

ROS-20250929-13

Vulnerability in Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird email client is related to with an operation exceeding the memory buffer boundaries. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute arbitrary code Vulnerability in JavaScript Engine...

9.8CVSS7.3AI score0.00568EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.5 views

The vulnerability of the vfs.c component in the Linux operating system’s kernel allows a hacker to compromise data integrity.

The vulnerability of the vfs.c component in the Linux operating system’s kernel is related to reading data beyond the acceptable buffer size. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...

5.5CVSS6.8AI score0.00549EPSS
SaveExploits1References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.5 views

The vulnerability in the drivers/usb/class/cdc-acm.c component of the Linux operating system allows a attacker to compromise data integrity.

The vulnerability of the drivers/usb/class/cdc-acm.c component in the Linux operating system is related to errors in processing parameter lengths. Exploiting this vulnerability can allow an attacker to compromise data integrity...

4.9CVSS6.7AI score0.00351EPSS
SaveExploits1References19Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.5 views

The vulnerability in the `net/sched/sch_qfq.c` component of the Linux operating system allows a attacker to compromise data integrity.

The vulnerability in the net/sched/schqfq.c component of the Linux operating system is related to insufficient checking of the status of a shared resource. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

5.5CVSS6.8AI score0.00207EPSS
SaveExploits0References20Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.8 views

The vulnerability of the drivers/s390 kernel component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s S390 kernel driver components is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.7AI score0.00219EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.6 views

The vulnerability of the netfilter component in the Linux operating system’s kernel allows a perpetrator to compromise data integrity and cause service failures.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise data integrity and cause service failures...

6.5CVSS6.7AI score0.00267EPSS
SaveExploits2References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.5 views

The vulnerability in the sch_drr.c component of the Linux operating system allows a attacker to compromise data integrity.

The vulnerability of the schdrr.c component in the Linux operating system’s kernel is related to insufficient checking of the status of shared resources. Exploiting this vulnerability could allow an attacker to compromise data integrity...

5.5CVSS6.8AI score0.00198EPSS
SaveExploits0References20Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.12 views

The vulnerability of the find_cifs_entry() function in the fs/smb/client/readdir.c module of the SMB client support library in Linux kernels allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the findcifsentry function in the fs/smb/client/readdir.c module of the SMB client support in Linux kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

7CVSS6.7AI score0.00178EPSS
SaveExploits0References21Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.13 views

The vulnerability of the m_can component in the Linux operating system’s kernel allows a perpetrator to compromise data integrity and cause service failures.

The vulnerability of the mcan component in Linux kernel relates to memory initialization errors. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

4.4CVSS6.7AI score0.00162EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.14 views

The vulnerability of the parisc component in the Linux operating system’s kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the parisc component in the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7CVSS7.1AI score0.0019EPSS
SaveExploits0References19Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.8 views

The vulnerability of the nfsd component in the Linux operating system allows a hacker to compromise data integrity and cause service failures.

The vulnerability of the nfsd component in Linux operating systems is related to improper control of resource identifiers. Exploiting this vulnerability can allow a remote attacker to compromise data integrity and cause service failures...

6.5CVSS6.8AI score0.00579EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.10 views

Vulnerabilities of crypto modules, lzo in Linux kernel, which allow attackers to compromise data integrity and cause service failures

The vulnerability of crypto modules and LZO kernels in the Linux operating system relates to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

6.1CVSS6.8AI score0.00163EPSS
SaveExploits0References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.6 views

The vulnerability in the trace.c component of the Linux operating system’s kernel allows a hacker to compromise data integrity.

The vulnerability of the trace.c component in the Linux operating system’s kernel is related to reading data beyond the permissible buffer size. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...

4.4CVSS6.9AI score0.00216EPSS
SaveExploits0References20Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.5 views

The vulnerability in the init.c component of the Linux operating system’s kernel allows a attacker to compromise data integrity.

The vulnerability of the init.c component in the Linux operating system’s kernel is related to a numerical reduction in significance. Exploiting this vulnerability could allow an attacker to compromise data integrity...

4.4CVSS6.7AI score0.00238EPSS
SaveExploits0References19Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.6 views

The vulnerabilities of Linux operating system’s ARM64 kernel components allow attackers to compromise data integrity and cause service failures.

The vulnerability of ARM64 kernel components in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of data and also cause service failures...

6.3CVSS6.6AI score0.0019EPSS
SaveExploits0References18Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.8 views

The vulnerability of the makeRoom() function in the stream.c component of the Libavif file encoding and decoding library allows a perpetrator to compromise data integrity and cause service failures.

The vulnerability of the makeRoom function in the stream.c component of the Libavif file encoding and decoding library is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise data integrity and cause service failures...

4.5CVSS5.9AI score0.00357EPSS
SaveExploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.10 views

The vulnerability of the avifImageRGBToYUV function in the reformat.c component of the Libavif encoding and decoding .avif files library allows a perpetrator to compromise data integrity and cause service failures.

The vulnerability of the avifImageRGBToYUV function in the reformat.c component of the Libavif encoding and decoding library for .avif files is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise data integrity and cause service failures...

4.5CVSS5.8AI score0.00321EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.5 views

The vulnerability of the sch_ets.c component in the Linux operating system’s kernel allows a attacker to compromise data integrity.

The vulnerability of the schets.c component in the Linux operating system’s kernel is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise data integrity...

5.5CVSS7.1AI score0.00204EPSS
SaveExploits0References19Affected Software7
Rows per page
Query Builder