Lucene search
+L

26500 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2025/12/29 7:26 a.m.11 views

Security Bulletin: Vulnerability in form-data affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in form-data has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

9.4CVSS5.6AI score0.01769EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/29 4:20 a.m.10 views

Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Insufficiently Random Values vulnerability in form-data.

Summary Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Insufficiently Random Values vulnerability in form-data.This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-7783 DESCRIPTION: Use of Insufficiently...

9.4CVSS5.4AI score0.01769EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2025/12/29 12:00 a.m.12 views

UTT aggressive 512W buffer overflow vulnerability (CNVD-2026-0079277)

The UTT Progressive 512W is an enterprise-grade wireless router from Atech UTT designed for small and medium-sized businesses SOHO and similarly sized network environments for access scenarios of 30 to 50 users. UTT Progressive 512W suffers from a buffer overflow vulnerability that originates fro...

9.8CVSS7.3AI score0.00753EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/12/29 12:00 a.m.9 views

D-Link DWR-M920 安全漏洞

The D-Link DWR-M920 is a 4GLTE wireless router manufactured by Youxun D-Link. The D-Link DWR-M920 suffers from a buffer overflow vulnerability that stems from the incorrect manipulation of the parameter submit-url in the function sub423848 in the file /boafrm/formParentControl, for which no...

9CVSS7.5AI score0.00786EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/12/29 12:00 a.m.9 views

D-Link DWR-M920 安全漏洞

The D-Link DWR-M920 is a 4GLTE wireless router manufactured by Youxun D-Link. The D-Link DWR-M920 suffers from a stack buffer overflow vulnerability that stems from incorrect manipulation of the parameter ip6addr in the function sub42261C in the file /boafrm/formFilter, for which no detailed...

9CVSS7.4AI score0.00786EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/29 12:00 a.m.12 views

D-Link DWR-M920 安全漏洞

The D-Link DWR-M920 is a 4GLTE wireless router manufactured by Youxun D-Link. The D-Link DWR-M920 suffers from a buffer overflow vulnerability that stems from the incorrect manipulation of the parameter submit-url in the function sub464794 in the file /boafrm/formDefRoute, for which no detailed...

9CVSS7.5AI score0.00786EPSS
SaveExploits1References7
CVE
CVE
added 2025/12/29 12:00 a.m.33 views

CVE-2025-68706

CVE-2025-68706 affects KuWFi 4G LTE AC900 devices running firmware 1.0.13, in the GoAhead-Webs HTTP daemon. The vulnerability is in the /goform/formMultiApnSetting handler, which copies the user-provided pincode into a fixed 132-byte stack buffer using sprintf() without bounds checking. This stac...

9.8CVSS7.8AI score0.04861EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 2025/12/28 12:30 a.m.9 views

EUVD-2025-205487

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...

5.9CVSS6.5AI score0.00115EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/28 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-68972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text aft...

5.9CVSS5.9AI score0.00115EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/28 12:00 a.m.9 views

TRENDnet TEW-822DRE 命令注入漏洞

The TRENDnet TEW-822DRE is a dual-band wireless router from TRENDnet. The TRENDnet TEW-822DRE suffers from a command injection vulnerability that originates from a misuse of the parameter peerPin in the file /boafrm/formWsc, which can be exploited by an attacker to execute arbitrary commands on t...

8.8CVSS6.8AI score0.13319EPSS
SaveExploits1References5
NVD
NVD
added 2025/12/27 11:15 p.m.11 views

CVE-2025-68972

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...

5.9CVSS0.00115EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/27 11:15 p.m.4 views

DEBIAN-CVE-2025-68972

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...

4.7CVSS5.3AI score0.00115EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/27 11:15 p.m.10 views

AZL-73911 CVE-2025-68972 affecting package gnupg2 2.4.0-3

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...

5.9CVSS5.8AI score0.00115EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/27 11:15 p.m.5 views

ALPINE-CVE-2025-68972

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...

4.7CVSS6.9AI score0.00115EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/27 11:15 p.m.12 views

AZL-73192 CVE-2025-68972 affecting package gnupg2 for versions less than 2.4.9-1

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...

5.9CVSS5.8AI score0.00115EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/27 11:15 p.m.10 views

CVE-2025-68972

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...

4.7CVSS5.8AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2025/12/27 11:15 p.m.9 views

CVE-2025-68972

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...

5.9CVSS5.9AI score0.00115EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/27 11:15 p.m.9 views

UBUNTU-CVE-2025-68972

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...

5.9CVSS5.8AI score0.00115EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/27 10:52 p.m.538 views

CVE-2025-68972

CVE-2025-68972 affects GnuPG/gnupg2 <= 2.4.8, where a signed message ending a plaintext line with the form feed (\f) can allow an adversary to craft a modified message that still passes signature verification, with an “invalid armor” message printed during verification. Connected advisories in...

5.9CVSS6.6AI score0.00115EPSS
SaveExploits0References3Affected Software1
AlpineLinux
AlpineLinux
added 2025/12/27 10:52 p.m.19 views

CVE-2025-68972

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...

5.9CVSS6.7AI score0.00115EPSS
SaveExploits0References3
Rows per page
Query Builder