Lucene search
+L

531 matches found

Cvelist
Cvelist
added 2025/12/30 12:02 p.m.42 views

CVE-2025-15247 gmg137 snap7-rs client.rs download heap-based overflow

A vulnerability was identified in gmg137 snap7-rs up to 153d3e8c16decd7271e2a5b2e3da4d6f68589424. Affected by this issue is the function snap7rs::client::S7Client::download of the file client.rs. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The explo...

7.5CVSS0.00399EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/12/17 10:44 p.m.45 views

CVE-2023-53930 ProjectSend r1605 Insecure Direct Object Reference File Download Vulnerability

ProjectSend r1605 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to download private files by manipulating the download ID parameter. Attackers can access any user's private files by changing the 'id' parameter in the download request to process.p...

7.5CVSS0.00375EPSS
SaveExploits1References3
NVD
NVD
added 2025/12/16 5:16 p.m.17 views

CVE-2025-68116

FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 2.7.1 are vulnerable to Stored Cross-Site Scripting XSS due to unsafe handling of browser-renderable user uploads when served through the sharing and download endpoints. An attacker who can get a crafted SVG primary or...

8.9CVSS0.0026EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.10 views

Inaba Denki Sangyo CHOCO TEI WATCHER mini 代码问题漏洞

Inaba Denki Sangyo CHOCO TEI WATCHER mini is a series of surveillance cameras from Inaba Denki Sangyo. A code issue vulnerability exists in Inaba Denki Sangyo CHOCO TEI WATCHER mini, which stems from an abnormal resource consumption by the video download function in certain communication states,...

6.9CVSS5.7AI score0.00286EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.13 views

PT-2025-49997

Cross-Site Request Forgery CSRF vulnerability in wpmediadownload Media Library File Download media-download allows Cross Site Request Forgery.This issue affects Media Library File Download: from n/a through = 1.4...

6.9AI score0.00129EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/04 9:16 p.m.13 views

CVE-2025-65959

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Stored XSS vulnerability was discovered in Open-WebUI's Notes PDF download functionality. An attacker can import a Markdown file containing malicious SVG tags into Notes, allowing...

8.7CVSS0.00229EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/12/02 12:00 a.m.13 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome prior to version 143.0.7499.41, which stems from an improper implementation of the download feature that could allow a remote attacker to bypass download protection via a specially crafted HTML...

4.3CVSS6AI score0.00199EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/11/24 12:00 a.m.13 views

UFIDA U9 Multi-Organization Enterprise Internet Application Platform of UFIDA Network Technology Co.

UFIDA is a leading provider of management software, ERP software, group management software, human resource management software, customer relationship management software, small business management software, financial and administrative institution management software, automotive industry...

5.9AI score
SaveExploits0
CNNVD
CNNVD
added 2025/11/20 12:00 a.m.9 views

SonicWALL Email Security 安全漏洞

SonicWALL Email Security is an email security system from SonicWALL USA. A security vulnerability exists in SonicWall Email Security that originates from the download of an unverified signed root filesystem image, which could lead to the execution of arbitrary code...

9.8CVSS7.1AI score0.00192EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/08 12:15 a.m.13 views

CVE-2025-12905

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 140.0.7339.80 allowed a remote attacker to bypass Mark of the Web via a crafted HTML page. Chromium security severity: Low...

5.4CVSS0.00159EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/14 4:58 p.m.10 views

EUVD-2025-34435

Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...

4.9CVSS6.4AI score0.00326EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2012-4048

Malware in sbrugna...

6.6CVSS6.4AI score0.00352EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2007-1117

Malware in sbrugna...

9.3CVSS6.4AI score0.01846EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.19 views

EUVD-2021-0133

Malware in sbrugna...

7.5CVSS7.4AI score0.01514EPSS
SaveExploits0References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.17 views

EUVD-2019-0244

Malware in sbrugna...

9.3CVSS8AI score0.02104EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2014-1168

Malware in sbrugna...

7.5CVSS7.5AI score0.03208EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-27412

Malware in sbrugna...

9.9CVSS9.2AI score0.01174EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-7645

Malware in sbrugna...

6.5CVSS7.8AI score0.01202EPSS
SaveExploits0References15
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2020-28806

Malware in sbrugna...

8.8CVSS8.6AI score0.00584EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2006-6496

Malware in sbrugna...

3.5CVSS6.4AI score0.01349EPSS
SaveExploits1References10
Rows per page
Query Builder