Lucene search
+L

3982 matches found

RedhatCVE
RedhatCVE
added 2025/10/03 12:46 a.m.13 views

CVE-2023-28760

TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...

7.5CVSS8.1AI score0.03138EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
added 2025/10/02 11:22 p.m.8 views

SUSE CVE-2025-61587

Weblate is a web based localization tool. An open redirect exists in versions 5.13.2 and below via the redir parameter on .within.website when Weblate is configured with Anubis and REDIRECTDOMAINS is not set. An attacker can craft a URL on the legitimate domain that redirects a victim to an...

6.1CVSS6.8AI score0.00365EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/10/02 12:0 a.m.7 views

CVE-2023-28760

TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...

7.7AI score0.03138EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/10/02 12:0 a.m.20 views

CVE-2023-28760

TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...

0.03138EPSS
SaveExploits1References2
OSV
OSV
added 2025/10/01 10:15 p.m.8 views

PYSEC-2025-269

Weblate is a web based localization tool. An open redirect exists in versions 5.13.2 and below via the redir parameter on .within.website when Weblate is configured with Anubis and REDIRECTDOMAINS is not set. An attacker can craft a URL on the legitimate domain that redirects a victim to an...

6.1CVSS6.1AI score0.00365EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/10/01 10:1 p.m.4 views

CVE-2025-61587 Weblate integration with Anubis can lead to Open Redirect via redir parameter

Weblate is a web based localization tool. An open redirect exists in versions 5.13.2 and below via the redir parameter on .within.website when Weblate is configured with Anubis and REDIRECTDOMAINS is not set. An attacker can craft a URL on the legitimate domain that redirects a victim to an...

2.1CVSS6.3AI score0.00365EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/10/01 10:1 p.m.16 views

CVE-2025-61587 Weblate integration with Anubis can lead to Open Redirect via redir parameter

Weblate is a web based localization tool. An open redirect exists in versions 5.13.2 and below via the redir parameter on .within.website when Weblate is configured with Anubis and REDIRECTDOMAINS is not set. An attacker can craft a URL on the legitimate domain that redirects a victim to an...

2.1CVSS0.00365EPSS
SaveExploits1References4
OSV
OSV
added 2025/10/01 10:1 p.m.12 views

CVE-2025-61587 Weblate integration with Anubis can lead to Open Redirect via redir parameter

Weblate is a web based localization tool. An open redirect exists in versions 5.13.2 and below via the redir parameter on .within.website when Weblate is configured with Anubis and REDIRECTDOMAINS is not set. An attacker can craft a URL on the legitimate domain that redirects a victim to an...

2.1CVSS6.6AI score
SaveExploits0References6
Wired Threat Level
Wired Threat Level
added 2025/09/30 1:44 p.m.6 views

Google’s Latest AI Ransomware Defense Only Goes So Far

Google has launched a new AI-based protection in Drive for desktop that can shut down an attack before it spreads—but its benefits have their limits...

6.9AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/28 1:2 a.m.8 views

hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur

...

5.5CVSS7AI score0.00199EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/09/19 4:19 a.m.5 views

CVE-2025-59307

RAID Manager provided by Century Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

8.4CVSS7.7AI score0.00166EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/17 4:16 a.m.9 views

CVE-2025-59307

RAID Manager provided by Century Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

8.4CVSS0.00166EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/17 4:7 a.m.3 views

CVE-2025-59307

RAID Manager provided by Century Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

8.4CVSS7.4AI score0.00166EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/17 4:7 a.m.25 views

CVE-2025-59307

RAID Manager provided by Century Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

8.4CVSS0.00166EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/17 4:7 a.m.20 views

CVE-2025-59307

CVE-2025-59307 concerns Century Corporation’s RAID Manager. It is caused by an unquoted Windows service path, allowing a user with write access to the system drive root to execute arbitrary code with SYSTEM privileges. Affected product: RAID Manager. Root cause (CWE-428): unquoted service path. I...

8.4CVSS7.4AI score0.00166EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/17 12:0 a.m.6 views

Century Corporation RAID Manager 代码问题漏洞

Century Corporation RAID Manager is a hardware management software from Century Corporation, Japan. A code issue vulnerability exists in Century Corporation RAID Manager that stems from a Windows service registering unquoted file paths, which could cause a user with write access to the root...

8.4CVSS7AI score0.00166EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/09/11 5:29 p.m.7 views

CVE-2025-54112

Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally...

7CVSS7AI score0.0035EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/09 5:15 p.m.6 views

CVE-2025-54112

Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally...

7CVSS0.0035EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/09 5:15 p.m.6 views

CVE-2025-54112

Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally...

7CVSS5.7AI score0.0035EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2025/09/09 7:0 a.m.17 views

Description of the security update for SharePoint Server 2016 Language Pack: September 9, 2025 (KB5002777)

None None...

7.1CVSS7AI score0.00584EPSS
SaveExploits0
Rows per page
Query Builder