Lucene search
+L

15259 matches found

CNVD
CNVD
•added 2025/11/25 12:00 a.m.•19 views

SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Shenzhou Vision Han Technology Co., Ltd (CNVD-C-2025-921601)

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

5.9AI score
SaveExploits0
CNVD
CNVD
•added 2025/11/25 12:00 a.m.•20 views

SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Divine Vision Han Technology Co., Ltd (CNVD-C-2025-926218)

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

5.9AI score
SaveExploits0
CNVD
CNVD
•added 2025/11/25 12:00 a.m.•13 views

SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Divine Vision Han Technology Co., Ltd (CNVD-C-2025-923949)

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

5.9AI score
SaveExploits0
CNVD
CNVD
•added 2025/11/25 12:00 a.m.•13 views

SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Divine Vision Han Technology Co., Ltd (CNVD-C-2025-924158)

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

5.9AI score
SaveExploits0
CNVD
CNVD
•added 2025/11/25 12:00 a.m.•19 views

SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Divine Vision Han Technology Co., Ltd (CNVD-C-2025-925298)

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

5.9AI score
SaveExploits0
CNVD
CNVD
•added 2025/11/25 12:00 a.m.•17 views

SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Divine Vision Han Technology Co., Ltd (CNVD-C-2025-925400)

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

5.9AI score
SaveExploits0
CNVD
CNVD
•added 2025/11/25 12:00 a.m.•9 views

SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Divine Vision Han Technology Co., Ltd (CNVD-C-2025-924847)

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

5.9AI score
SaveExploits0
CNVD
CNVD
•added 2025/11/25 12:00 a.m.•18 views

SQL injection vulnerability in the multimedia integrated business display system of Beijing Shenzhou Vision Han Technology Co., Ltd. (CNVD-C-2025-925300)

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

5.9AI score
SaveExploits0
CNVD
CNVD
•added 2025/11/25 12:00 a.m.•23 views

SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Divine Vision Han Technology Co., Ltd (CNVD-C-2025-925115)

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

5.9AI score
SaveExploits0
CNVD
CNVD
•added 2025/11/25 12:00 a.m.•16 views

WordPress Display Pages Shortcode plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress Display Pages Shortcode plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of...

6.4CVSS6.1AI score0.00222EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/11/25 12:00 a.m.•23 views

SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Shenzhou Vision Han Technology Co., Ltd (CNVD-C-2025-925280)

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

5.9AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/24 6:31 p.m.•12 views

EUVD-2025-198802

Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to access sensitive information via sending a crafted GET request to the /displaylogo endpoint...

4.6CVSS6AI score0.00183EPSS
SaveExploits0References3
OSV
OSV
•added 2025/11/24 1:12 p.m.•32 views

CLSA-2025-1763989962 Fix of 8 CVEs

CVE-url: https://ubuntu.com/security/CVE-2025-38352 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-url: https://ubuntu.com/security/CVE-2022-25265 - x86/elf: Add table to document READIMPLIESEXEC - x86/elf: Split READIMPLIESEXEC from executable PTGNUSTACK -...

8.8CVSS7.5AI score0.01341EPSS
SaveExploits10References1
Positive Technologies
Positive Technologies
•added 2025/11/24 12:00 a.m.•10 views

PT-2025-47928

Name of the Vulnerable Software and Affected Versions Austrian Archaeological Institute Openatlas versions prior to 8.12.0 Description A flaw exists in access control within Austrian Archaeological Institute Openatlas. This allows attackers to gain access to sensitive information by sending a...

4.6CVSS5.8AI score0.00183EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2025/11/24 12:00 a.m.•15 views

The vulnerability of the dm_resume() function in the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c file of the DRI support driver for AMD graphics cards in Linux operating systems allows a attacker to cause a service failure.

The vulnerability of the dmresume function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c file of the DRI support driver for AMD graphics cards in Linux operating systems is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow...

5.5CVSS6.7AI score0.002EPSS
SaveExploits0References10Affected Software3
CNNVD
CNNVD
•added 2025/11/24 12:00 a.m.•10 views

Austrian Academy of Sciences OpenAtlas 安全漏洞

Austrian Academy of Sciences OpenAtlas is a database application dealing with archaeology and history organized by the Austrian Academy of Sciences in Austria. A security vulnerability exists in Austrian Academy of Sciences OpenAtlas versions prior to 8.12.0 that stems from improper access contro...

4.6CVSS6.2AI score0.00183EPSS
SaveExploits0References3
CVE
CVE
•added 2025/11/24 12:00 a.m.•34 views

CVE-2025-60914

The Austrian Archaeological Institute Openatlas database application is vulnerable to incorrect access control in versions prior to v8.12.0 . An attacker can send a specially crafted GET request to the /display_logo endpoint to bypass security checks and access sensitive information . To remediat...

4.6CVSS5.8AI score0.00183EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/11/24 12:00 a.m.•25 views

CVE-2025-60914

Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to access sensitive information via sending a crafted GET request to the /displaylogo endpoint...

0.00183EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/11/22 10:31 p.m.•30 views

CVE-2025-31266

A spoofing issue was addressed with improved truncation when displaying the fully qualified domain name. This issue is fixed in Safari 18.5, macOS Sequoia 15.5. A website may be able to spoof the domain name in the title of a pop-up window...

4.3CVSS5.8AI score0.00225EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/22 9:45 a.m.•29 views

CVE-2025-12964

The Magical Products Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mpdprtitletag' and 'mpdprsubtitletag' parameters in the MPD Pricing Table widget in all versions up to, and including, 1.1.29 due to insufficient input sanitization and output escaping on...

6.4CVSS4.9AI score0.0023EPSS
SaveExploits0References1
Rows per page
Query Builder