Lucene search
+L

21012 matches found

CNNVD
CNNVD
added 2025/02/13 12:00 a.m.15 views

Microsoft Edge 输入验证错误漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security feature bypass vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by attackers to bypass certain features...

4.5CVSS6.4AI score0.00316EPSS
SaveExploits0References2
Kaspersky
Kaspersky
added 2025/02/13 12:00 a.m.16 views

KLA80207 SB vulnerability in Microsoft Browser

A security feature bypass vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2025-21401 Related products Microsoft-Edge CVE list CVE-2025-21401 warning KB list Solution Install necessary updates fro...

4.5CVSS6.3AI score0.00316EPSS
SaveExploits0References3
Information Security Automation
Information Security Automation
added 2025/02/12 10:01 p.m.21 views

February Microsoft Patch Tuesday

February Microsoft Patch Tuesday. 89 CVEs, 33 added since January. Two with signs of exploitation in the wild: EoP - Windows Ancillary Function Driver for WinSock CVE-2025-21418 EoP - Windows Storage CVE-2025-21391 There are no vulnerabilities with public exploits, but there are 7 with private...

9.9CVSS7.6AI score0.34488EPSS
SaveExploits0
Qualys Blog
Qualys Blog
added 2025/02/11 7:46 p.m.63 views

Microsoft and Adobe Patch Tuesday, February 2025 Security Update Review

As the second Patch Tuesday of 2025 arrives, Microsoft has released crucial updates to strengthen cybersecurity defenses. Let's explore the highlights and what they mean for users. Microsoft Patch Tuesday for February 2025 Microsoft Patch's Tuesday, February 2025 edition addressed 67...

8.1CVSS9.1AI score0.34488EPSS
SaveExploits2
OSV
OSV
added 2025/02/11 5:15 p.m.14 views

CVE-2025-22399

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery...

7.8CVSS5.8AI score0.00149EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/11 5:15 p.m.41 views

CVE-2025-22399

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery...

7.9CVSS0.00149EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/11 4:24 p.m.81 views

CVE-2025-22399

Dell UCC Edge 2.3.0 is affected by a Blind SSRF in the Add Customer SFTP Server component. The vulnerability allows an unauthenticated, locally located attacker to trigger server-side requests, impacting confidentiality, integrity, and availability as indicated by CVSS metrics (high impact, local...

7.9CVSS7.7AI score0.00149EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/11 4:24 p.m.7 views

CVE-2025-22399

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery...

7.9CVSS7.7AI score0.00149EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/11 4:24 p.m.36 views

CVE-2025-22399

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery...

7.9CVSS0.00149EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.3 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix uninitialised kfifo If a line is processed with debounce, and this results in debouncing in software, and the line is subsequently reconfigured to enable edge detection, then the allocation of the kfifo to...

7.8CVSS6.2AI score0.00234EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/02/11 12:00 a.m.29 views

Microsoft Edge (Chromium-based) Spoofing Vulnerability (CNVD-2025-23065)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks...

4.3CVSS6.5AI score0.00578EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/11 12:00 a.m.8 views

Dell UCC Edge 代码问题漏洞

Dell UCC Edge is a Dell APEX metering solution from Dell USA. A code issue vulnerability exists in Dell UCC Edge version 2.3.0 that stems from a failure to validate input when adding a customer SFTP server...

7.9CVSS6.9AI score0.00149EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/11 12:00 a.m.14 views

PT-2025-6277

Name of the Vulnerable Software and Affected Versions: Dell UCC Edge version 2.3.0 Description: The issue concerns a Blind SSRF vulnerability in the Add Customer SFTP Server of Dell UCC Edge. An unauthenticated attacker with local access could exploit this, leading to Server-Side Request Forgery...

7.9CVSS6AI score0.00149EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2025/02/10 12:58 p.m.17 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to cryptography-42.0.7-cp37-abi3-manylinux_2_28_x86_64.whl CVE-2024-6119

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to cryptography-42.0.7-cp37-abi3-manylinux228x8664.whl CVE-2024-6119. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-6119 DESCRIPTION: OpenSSL is vulnerable to a...

7.5CVSS7.5AI score0.66582EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2025/02/10 12:00 a.m.39 views

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Feb 2025)

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS5.7AI score0.01619EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/02/10 12:00 a.m.14 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure through a specially crafted HTML page...

7.5CVSS7.2AI score0.00388EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/02/10 12:00 a.m.18 views

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure through a specially created HTML page...

7.5CVSS7.4AI score0.00391EPSS
SaveExploits0References11Affected Software5
RedhatCVE
RedhatCVE
added 2025/02/08 11:17 p.m.12 views

CVE-2025-21279

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

8.8CVSS7.7AI score0.01619EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/02/08 11:17 p.m.18 views

CVE-2025-21267

Microsoft Edge Chromium-based Spoofing Vulnerability...

4.4CVSS6.6AI score0.00572EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/02/08 11:17 p.m.12 views

CVE-2025-21283

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

8.8CVSS7.3AI score0.01497EPSS
SaveExploits0References3
Rows per page
Query Builder