Lucene search
+L

1125 matches found

Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.10 views

PT-2025-43865

Name of the Vulnerable Software and Affected Versions Kamailio version 5.5 Description A flaw exists in Kamailio that involves a use-after-free condition. This issue is located within the Configuration File Handler component, specifically in the sr push yy state function of the src/core/cfg.lex...

7.8CVSS5.7AI score0.0021EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.10 views

Kamailio 缓冲区错误漏洞

Kamailio is an open source implementation of a SIP signaling server from Kamailio Open Source. A buffer error vulnerability exists in Kamailio version 5.5, which stems from a heap buffer overflow in the function rvedestroy in the file src/core/rvalue.c of the component Configuration File Handler,...

7.8CVSS5.4AI score0.00273EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
added 2025/10/20 10:30 p.m.14 views

CVE-2025-11947

A weakness has been identified in bftpd up to 6.2. Impacted is the function expandgroups of the file options.c of the component Configuration File Handler. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack on the local host. Attacks of this natur...

4.5CVSS4.8AI score0.00167EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/19 10:2 p.m.18 views

CVE-2025-11947

CVE-2025-11947 affects bftpd up to version 6.2. The vulnerability is a heap-based overflow in the expand_groups function of options.c within the Configuration File Handler. Exploitation requires local access (attack vector: LOCAL) with HIGH complexity and LOW privileges, as described in the sourc...

4.5CVSS4.8AI score0.00167EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/19 12:0 a.m.8 views

bftpd 安全漏洞

Bftpd is an FTP File Transfer Protocol server. A security vulnerability exists in bftpd 6.2 and earlier versions, which originates from a heap buffer overflow in the function expandgroups in the file options.c of the component Configuration File Handler, which could lead to a localhost attack...

4.5CVSS5.2AI score0.00167EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/10/14 1:40 a.m.17 views

CVE-2025-11655

A security flaw has been discovered in Total.js Flow up to 673ef9144dd25d4f4fd4fdfda5af27f230198924. The impacted element is an unknown function of the component SVG File Handler. Performing manipulation results in unrestricted upload. The attack can be initiated remotely. The exploit has been...

5.8CVSS6.6AI score0.00259EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/13 2:15 a.m.7 views

CVE-2025-11655

A security flaw has been discovered in Total.js Flow up to 673ef9144dd25d4f4fd4fdfda5af27f230198924. The impacted element is an unknown function of the component SVG File Handler. Performing manipulation results in unrestricted upload. The attack can be initiated remotely. The exploit has been...

5.8CVSS0.00259EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/10/13 1:32 a.m.5 views

CVE-2025-11655 Total.js Flow SVG File unrestricted upload

A security flaw has been discovered in Total.js Flow up to 673ef9144dd25d4f4fd4fdfda5af27f230198924. The impacted element is an unknown function of the component SVG File Handler. Performing manipulation results in unrestricted upload. The attack can be initiated remotely. The exploit has been...

5.8CVSS6.3AI score0.00259EPSS
SaveExploits0References4
CVE
CVE
added 2025/10/13 1:32 a.m.16 views

CVE-2025-11655

Total.js Flow (up to 673ef9144dd25d4f4fd4fdfda5af27f230198924) is affected by a flaw in the SVG File Handler component where manipulation enables unrestricted file upload. The remaining details point to a remote attack path with no version details available in the initial description, but Red Hat...

5.8CVSS6.3AI score0.00259EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/10/13 1:32 a.m.22 views

CVE-2025-11655 Total.js Flow SVG File unrestricted upload

A security flaw has been discovered in Total.js Flow up to 673ef9144dd25d4f4fd4fdfda5af27f230198924. The impacted element is an unknown function of the component SVG File Handler. Performing manipulation results in unrestricted upload. The attack can be initiated remotely. The exploit has been...

5.8CVSS0.00259EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/13 12:0 a.m.7 views

Total.js Flow 代码问题漏洞

Total.js Flow is an open source visualization into a tool by Total.js Platform. A code issue vulnerability exists in Total.js Flow, which stems from an unrestricted upload feature in the SVG File Handler component, which could lead to a remote attack...

5.8CVSS5.2AI score0.00259EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/13 12:0 a.m.8 views

PT-2025-41744

Name of the Vulnerable Software and Affected Versions Total.js Flow versions prior to 673ef9144dd25d4f4fd4fdfda5af27f230198924 Description A security flaw exists in Total.js Flow related to the SVG File Handler component. Manipulation of this component can lead to unrestricted file upload, and th...

5.8CVSS4.7AI score0.00259EPSS
SaveExploits0References9
CVE
CVE
added 2025/10/11 9:2 a.m.10 views

CVE-2025-11594

The CVE-2025-11594 issue affects ywxbear PHP-Bookstore-Website-Example and PHP Basic BookStore Website (files handling in the Quantity Handler, /index.php). Root cause: insufficient validation of the quantity input, allowing remote manipulation. Exploitation details are publicly disclosed in conn...

6.9CVSS5.5AI score0.00346EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2019-7983

Malware in sbrugna...

7.5CVSS7.5AI score0.00917EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2014-9615

Malware in sbrugna...

5.5CVSS7.3AI score0.01416EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-24084

Malware in sbrugna...

9.8CVSS6AI score0.00867EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2023-23471

Malicious code in bioql PyPI...

7.2CVSS5.2AI score0.00908EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.13 views

EUVD-2024-33368

Malicious code in bioql PyPI...

6.5CVSS4.9AI score0.0047EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-14330

Malicious code in bioql PyPI...

5.3CVSS4.9AI score0.00426EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-30384

Malicious code in bioql PyPI...

4.5CVSS5AI score0.01161EPSS
SaveExploits0References6
Rows per page
Query Builder