Lucene search
+L

4499 matches found

Circl
Circl
added 2025/06/30 7:56 a.m.13 views

CVE-2025-38089

creationtimestamp| type| source ---|---|--- 2025-06-30 07:56:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19908 2025-06-30 11:13:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lst2io2txr2r 2025-07-02 08:43:25+00:00| published-proof-of-concept|...

5.5CVSS6AI score0.00277EPSS
SaveExploits2References5
CNNVD
CNNVD
added 2025/06/30 12:0 a.m.4 views

Ricoh Streamline NX Client Tool 跨站脚本漏洞

Ricoh Streamline NX Client Tool is a scalable document management application and tool from Ricoh Japan. A cross-site scripting vulnerability exists in Ricoh Streamline NX Client Tool, which stems from unvalidated specific parameters in the SLNX help documentation and could lead to a reflected...

6.1CVSS5.8AI score0.0019EPSS
SaveExploits0References3
NVD
NVD
added 2025/06/29 12:15 p.m.7 views

CVE-2025-5878

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

7.5CVSS0.004EPSS
SaveExploits1References10
OSV
OSV
added 2025/06/29 12:15 p.m.8 views

UBUNTU-CVE-2025-5878

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

7.3CVSS6.5AI score0.004EPSS
SaveExploits1References5
OSV
OSV
added 2025/06/29 11:11 a.m.7 views

CVE-2025-5878 ESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

6.9CVSS6.2AI score0.004EPSS
SaveExploits1References12
Debian CVE
Debian CVE
added 2025/06/29 11:11 a.m.8 views

CVE-2025-5878

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

7.5CVSS6.8AI score0.004EPSS
SaveExploits1
Fedora
Fedora
added 2025/06/28 1:45 a.m.12 views

[SECURITY] Fedora 41 Update: python3-docs-3.13.5-1.fc41

The python3-docs package contains documentation on the Python 3 programming language and interpreter...

7.5CVSS7.5AI score0.00497EPSS
SaveExploits1
Fedora
Fedora
added 2025/06/28 1:14 a.m.10 views

[SECURITY] Fedora 42 Update: python3-docs-3.13.5-1.fc42

The python3-docs package contains documentation on the Python 3 programming language and interpreter...

7.5CVSS7.5AI score0.00497EPSS
SaveExploits1
Circl
Circl
added 2025/06/26 9:2 p.m.13 views

CVE-2018-11687

creationtimestamp| type| source ---|---|--- 2025-06-26 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lsjzkcotya2j 2026-06-19 12:53:13+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dd3cf363-89d0-4fb9-8bfc-555544669ac4...

7.5CVSS7.1AI score0.01277EPSS
SaveExploits0References2
Circl
Circl
added 2025/06/26 4:51 p.m.13 views

CVE-2025-34044

creationtimestamp| type| source ---|---|--- 2025-06-26 16:51:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19633 2025-06-27 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lsmjz7tt2c2u 2025-06-30 20:27:00+00:00| seen|...

9.4CVSS5.8AI score0.04597EPSS
SaveExploits0References5
Circl
Circl
added 2025/06/26 12:53 p.m.11 views

CVE-2025-6561

creationtimestamp| type| source ---|---|--- 2025-06-26 12:53:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19593 2025-06-26 15:19:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjgfnqasf2i 2025-06-27 04:12:06+00:00| seen|...

9.8CVSS4.8AI score0.00478EPSS
SaveExploits0References3
Circl
Circl
added 2025/06/26 9:50 a.m.6 views

CVE-2025-5842

creationtimestamp| type| source ---|---|--- 2025-06-26 09:50:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19585 2025-06-26 12:29:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsj4vfjqey2i...

6.4CVSS8.9AI score0.00285EPSS
SaveExploits0References2
Circl
Circl
added 2025/06/26 5:49 a.m.7 views

CVE-2025-2938

creationtimestamp| type| source ---|---|--- 2025-06-26 05:49:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19573 2025-06-26 10:24:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsivvpk3kp2p...

8.8CVSS4.8AI score0.00273EPSS
SaveExploits0References2
Circl
Circl
added 2025/06/25 6:6 p.m.6 views

GHSA-H46C-H94J-95F3

creationtimestamp| type| source ---|---|--- 2025-06-25 18:06:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19492 2025-07-16 15:54:18+00:00| seen| https://gist.github.com/safer-bot/2d6a7248bf073124cafd08649d475f0a 2025-07-16 16:01:16+00:00| seen|...

4.8AI score
SaveExploits0References14
Circl
Circl
added 2025/06/25 2:51 p.m.9 views

CVE-2025-6608

creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19448 2025-06-25 16:22:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsgzgpvkyk2a...

8.8CVSS6.2AI score0.0037EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2025/06/24 12:0 a.m.7 views

The vulnerability of the ABAP Keyword Documentation component of the SAP NetWeaver software integration platform allows attackers to perform cross-site scripting attacks.

The vulnerability of the ABAP Keyword Documentation component in the SAP NetWeaver software integration platform is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.8CVSS5.2AI score0.00268EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2025/06/23 2:48 a.m.11 views

mpfr: buffer overflow in mpfr_strtofr

Buffer overflow in the mpfrstrtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to incorrect documentation for mpnsetstr...

9.8CVSS5.9AI score0.0429EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/06/23 12:0 a.m.4 views

Visionatrix 跨站脚本漏洞

Visionatrix is a Visionatrix open source software for AI media processing using ComfyUI. A cross-site scripting vulnerability exists in Visionatrix versions prior to 2.5.1, which stems from the /docs/flows endpoint being susceptible to reflective cross-site scripting attacks...

8.8CVSS5.9AI score0.00244EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
added 2025/06/20 12:42 p.m.5 views

Security update for python39

This update for python39 fixes the following issues: python39 was updated from version 3.9.21 to version 3.9.23: Security issues fixed: CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS bsc1243273 CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4517:...

8.4CVSS6.1AI score0.01227EPSS
SaveExploits14References24
RedHat Linux
RedHat Linux
added 2025/06/19 1:39 p.m.5 views

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.17.2

The 1.17.2 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.17.2 release of Red Hat OpenShift Pipelines Operator...

9.1CVSS6.9AI score0.01081EPSS
SaveExploits1References5
Rows per page
Query Builder