Lucene search
+L

10810 matches found

osv_mini
osv_mini
•added 2025/11/26 9:07 a.m.•7 views

MINI-WQRF-8P8R-XF4P

Bulletin has no description...

6.5CVSS6.3AI score0.00545EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2025/11/26 12:00 a.m.•11 views

CVE-2025-26155

NCP Secure Enterprise Client 13.18 and NCP Secure Entry Windows Client 13.19 have an Untrusted Search Path vulnerability...

5.8AI score0.00611EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/26 12:00 a.m.•24 views

PT-2025-48164

Name of the Vulnerable Software and Affected Versions NCP Secure Enterprise Client version 13.18 NCP Secure Entry Windows Client version 13.19 Description NCP Secure Enterprise Client 13.18 and NCP Secure Entry Windows Client 13.19 are affected by an Untrusted Search Path issue. This allows for...

9.8CVSS6.2AI score0.00611EPSS
SaveExploits1References10
CVE
CVE
•added 2025/11/26 12:00 a.m.•51 views

CVE-2025-26155

NCP Secure Enterprise Client version 13.18 and NCP Secure Entry Windows Client version 13.19 are vulnerable to an Untrusted Search Path issue (CWE-426). This security flaw arises from an insecure search path configuration, which could allow an attacker to achieve malicious code execution . Remedi...

9.8CVSS5.8AI score0.00611EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
•added 2025/11/26 12:00 a.m.•29 views

CVE-2025-26155

NCP Secure Enterprise Client 13.18 and NCP Secure Entry Windows Client 13.19 have an Untrusted Search Path vulnerability...

0.00611EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/11/26 12:00 a.m.•21 views

NCP Secure Enterprise Client and NCP Secure Entry Windows Client security vulnerabilities

NCP Secure Enterprise Client and NCP Secure Entry Windows Client are both products of the German company NCP.NCP Secure Enterprise Client is a VPN Virtual Private Network client application.NCP Secure Entry NCP Secure Enterprise Client is a VPN Virtual Private Network client application.NCP Secur...

9.8CVSS5.9AI score0.00611EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/26 12:00 a.m.•8 views

CVE-2025-26155: Untrusted Search Path

NCP Secure Enterprise Client 13.18 and NCP Secure Entry Windows Client 13.19 have an Untrusted Search Path vulnerability...

9.8CVSS5.8AI score0.00611EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/11/26 12:00 a.m.•22 views

Nagios XI Code Execution

The vulnerability of the Nagios XI monitoring tool is related to the lack of measures taken to protect the website structure when loading the entry page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

6.4CVSS7.7AI score0.00795EPSS
SaveExploits0References3Affected Software1
osv_cga
osv_cga
•added 2025/11/25 1:22 p.m.•5 views

CGA-3C6R-4GHV-M28H

Bulletin has no description...

5.3CVSS5.7AI score0.00423EPSS
SaveExploits0
osv_clsa
osv_clsa
•added 2025/11/25 12:13 a.m.•21 views

CLSA-2025-1764029592 curl: Fix of CVE-2025-0167

CVE-2025-0167: fix password leakage issue when using .netrc file with no login or password in default entry and following HTTP redirects...

3.4CVSS6.9AI score0.00748EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/11/25 12:00 a.m.•50 views

PT-2026-55930

Name of the Vulnerable Software and Affected Versions GPAC versions prior to b40ce70f5 Description A heap-based buffer overflow occurs in the MP4Box component within the sgpd del entry function located in the src/isomedia/box code base.c file. This issue is triggered by the manipulation of the da...

4.8CVSS5.4AI score0.00178EPSS
SaveExploits0References31
CVE
CVE
•added 2025/11/24 5:02 a.m.•23 views

CVE-2025-13584

Eigenfocus (≤ 1.4.0) has a cross-site scripting vulnerability in the Description Handler. Manipulating entry.description/time_entry.description allows remote script injection. Publicly disclosed exploit information exists. Remediation: upgrade to version 1.4.1 (patch ID 7dec94c9d1f3e513e0ee38ba68...

5.1CVSS3.4AI score0.00269EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/11/24 12:00 a.m.•12 views

Eigenfocus Code Injection Vulnerability

Eigenfocus is a project management, planning software from Eigenfocus open source. A code injection vulnerability exists in Eigenfocus 1.4.0 and earlier versions, which stems from incorrect manipulation of the parameter entry.description/timeentry.description, and could lead to a cross-site...

5.1CVSS4.9AI score0.00269EPSS
SaveExploits0References8
osv_cga
osv_cga
•added 2025/11/22 11:48 p.m.•6 views

CGA-GXCV-HQF7-M9PH

Bulletin has no description...

5.3CVSS6.1AI score0.00546EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/11/22 10:31 p.m.•13 views

CVE-2025-11936

Improper input validation in the TLS 1.3 KeyShareEntry parsing in wolfSSL v5.8.2 on multiple platforms allows a remote unauthenticated attacker to cause a denial-of-service by sending a crafted ClientHello message containing duplicate KeyShareEntry values for the same supported group, leading to...

6.3CVSS6AI score0.00457EPSS
SaveExploits0References1
osv_mini
osv_mini
•added 2025/11/22 3:23 p.m.•11 views

MINI-496W-PQGH-6CVF

Bulletin has no description...

10CVSS8.3AI score0.17498EPSS
SaveExploits1
osv_oesa
osv_oesa
•added 2025/11/22 11:09 a.m.•22 views

OESA-2025-2700 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Avoid issue of interrupts remaining after requestirq error After devmrequestirq fails with error in pciendpointtestrequestirq, the...

7CVSS7.1AI score0.00465EPSS
SaveExploits0References35
osv_mini
osv_mini
•added 2025/11/22 9:52 a.m.•14 views

MINI-8XV5-PX2R-JJVF

Bulletin has no description...

5.3CVSS6AI score0.00597EPSS
SaveExploits0
EUVD
EUVD
•added 2025/11/22 12:31 a.m.•18 views

EUVD-2025-198524

Improper input validation in the TLS 1.3 KeyShareEntry parsing in wolfSSL v5.8.2 on multiple platforms allows a remote unauthenticated attacker to cause a denial-of-service by sending a crafted ClientHello message containing duplicate KeyShareEntry values for the same supported group, leading to...

6.3CVSS5.9AI score0.00457EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/11/22 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2025-11936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in the TLS 1.3 KeyShareEntry parsing in wolfSSL v5.8.2 on multiple platforms allows a remote unauthenticated attacker to cause a...

6.3CVSS6AI score0.00457EPSS
SaveExploits0References3
Rows per page
Query Builder