Lucene search
+L

6174 matches found

osv_ghsa
osv_ghsa
•added 2025/03/03 9:30 p.m.•21 views

GHSA-HW34-RQC5-H2GM Duplicate Advisory: Picklescan Allows Remote Code Execution via Malicious Pickle File Bypassing Static Analysis

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-769v-p64c-89pr. This link is maintained to preserve external references. Original Description picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An...

5.3CVSS9.4AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/03/03 6:31 p.m.•37 views

Duplicate Advisory: Remote Code Execution via Malicious Pickle File Bypassing Static Analysis

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-655q-fx9r-782v. This link is maintained to preserve external references. Original Description picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that use...

9.8CVSS7AI score0.01709EPSS
SaveExploits2References5Affected Software1
osv_ghsa
osv_ghsa
•added 2025/03/03 6:31 p.m.•18 views

GHSA-VR75-HJH9-7FR6 Duplicate Advisory: Remote Code Execution via Malicious Pickle File Bypassing Static Analysis

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-655q-fx9r-782v. This link is maintained to preserve external references. Original Description picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that use...

5.3CVSS9.4AI score
SaveExploits0References4
attackerkb
attackerkb
•added 2025/03/03 2:15 p.m.•8 views

CVE-2025-23619

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Catch Themes Catch Duplicate Switcher catch-duplicate-switcher allows Reflected XSS.This issue affects Catch Duplicate Switcher: from n/a through = 2.0...

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References3
NVD
NVD
•added 2025/03/03 2:15 p.m.•15 views

CVE-2025-23619

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Catch Themes Catch Duplicate Switcher catch-duplicate-switcher allows Reflected XSS.This issue affects Catch Duplicate Switcher: from n/a through = 2.0...

7.1CVSS0.00393EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/03 1:30 p.m.•62 views

CVE-2025-23619

CVE-2025-23619 refers to a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Catch Duplicate Switcher (versions

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/03 1:30 p.m.•25 views

CVE-2025-23619 WordPress Catch Duplicate Switcher plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Catch Themes Catch Duplicate Switcher catch-duplicate-switcher allows Reflected XSS.This issue affects Catch Duplicate Switcher: from n/a through = 2.0...

7.1CVSS0.00393EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/03 1:30 p.m.•7 views

CVE-2025-23619 WordPress Catch Duplicate Switcher plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Catch Themes Catch Duplicate Switcher catch-duplicate-switcher allows Reflected XSS.This issue affects Catch Duplicate Switcher: from n/a through = 2.0...

7.1CVSS5.2AI score0.00393EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•15 views

WordPress plugin Catch Duplicate Switcher 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•5 views

PT-2025-9390

Name of the Vulnerable Software and Affected Versions Catch Duplicate Switcher versions n/a through 2.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS in NotFound Catch Duplicate...

7.1CVSS0.00393EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/03/03 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2010-3409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1824. Reason: This candidate is a duplicate of CVE-2010-1824. Notes: All CVE users shoul...

9.3CVSS6.9AI score0.03964EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•3 views

CVE-2025-23619: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Catch Themes Catch Duplicate Switcher catch-duplicate-switcher allows Reflected XSS.This issue affects Catch Duplicate Switcher: from n/a through = 2.0...

7.1CVSS5.8AI score0.00393EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/02/28 2:20 a.m.•14 views

SUSE CVE-2025-21777

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subbuf array The meta data for a mapped ring buffer contains an array of indexes of all the subbuffers. The first entry is the reader page, and the rest of the entries lay out the...

5.5CVSS6.6AI score0.00205EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2025/02/27 3:15 a.m.•9 views

DEBIAN-CVE-2025-21777

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subbuf array The meta data for a mapped ring buffer contains an array of indexes of all the subbuffers. The first entry is the reader page, and the rest of the entries lay out the...

5.5CVSS6AI score0.00205EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/02/27 3:15 a.m.•14 views

UBUNTU-CVE-2025-21777

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subbuf array The meta data for a mapped ring buffer contains an array of indexes of all the subbuffers. The first entry is the reader page, and the rest of the entries lay out the...

5.5CVSS6.6AI score0.00205EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2025/02/27 3:11 a.m.•12 views

SUSE CVE-2022-49138

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Ignore multiple conn complete events When one of the three connection complete events is received multiple times for the same handle, the device is registered multiple times which leads to memory corruptions...

4.4CVSS6.4AI score0.004EPSS
SaveExploits0References14
Debian CVE
Debian CVE
•added 2025/02/27 2:18 a.m.•17 views

CVE-2025-21777

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subbuf array The meta data for a mapped ring buffer contains an array of indexes of all the subbuffers. The first entry is the reader page, and the rest of the entries lay out the...

5.5CVSS6AI score0.00205EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/02/27 12:00 a.m.•12 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a dupmmap failure and an uprobe registration issue...

5.5CVSS6.3AI score0.00201EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/02/27 12:00 a.m.•18 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from tracepoints not being properly disabled when the osnoise option is reset, which could lead to duplicate...

5.5CVSS6.2AI score0.00197EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/27 12:00 a.m.•3 views

CVE-2025-21777: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subbuf array The meta data for a mapped ring buffer contains an array of indexes of all the subbuffers. The first entry is the reader page, and the rest of the entries lay out the...

5.5CVSS6.2AI score0.00205EPSS
SaveExploits0References1
Rows per page
Query Builder