Lucene search
+L

13357 matches found

Positive Technologies
Positive Technologies
added 2025/01/07 12:00 a.m.14 views

PT-2025-4411 · Hasthemes · Hash Elements

Name of the Vulnerable Software and Affected Versions: HashThemes Hash Elements versions 1.4.9 and earlier Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. This allows attackers to inject malicious scripts in...

6.5CVSS6.8AI score0.00246EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.35 views

WordPress plugin Hash Elements 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Hash...

6.5CVSS6.8AI score0.00246EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.7 views

Silicon SiWx91x 安全漏洞

The Silicon SiWx91x is a radio board from Silicon Technology Silicon. A security vulnerability exists in the Silicon SiWx91x that stems from an incorrect hash length triggering a software assertion, which could lead to a denial of service DoS...

7.5CVSS6.5AI score0.00425EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/06 4:18 p.m.12 views

WordPress Hash Elements plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khalid Patchstack Alliance in WordPress Plugin Hash Elements versions = 1.5.0...

6.5CVSS6.1AI score0.00246EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/01/06 4:15 p.m.38 views

CVE-2025-21604

LangChain4j-AIDeepin is a Retrieval enhancement generation RAG project. Prior to 3.5.0, LangChain4j-AIDeepin uses MD5 to hash files, which may cause file upload conflicts. This issue is fixed in 3.5.0...

6.9CVSS0.00258EPSS
SaveExploits0References2
NVD
NVD
added 2025/01/02 4:15 p.m.25 views

CVE-2024-56414

Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

5.5CVSS0.0011EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/02 3:26 p.m.31 views

CVE-2024-56414

Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

5.5CVSS0.0011EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/02 3:26 p.m.59 views

CVE-2024-56414

The CVE-2024-56414 entry describes a vulnerability in Acronis Cyber Protect 16 for Windows prior to build 39169, where the web installer integrity check uses a weak hash algorithm. Affected product/version: Acronis Cyber Protect 16 (Windows) before build 39169. Impact and exploit details are not ...

5.5CVSS7.2AI score0.0011EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/02 3:26 p.m.22 views

CVE-2024-56414

Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

5.5CVSS7AI score0.0011EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/02 12:00 a.m.9 views

Acronis Cyber Protect 安全漏洞

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Switzerland. Combining backup, anti-malware, network security, and endpoint management features such as vulnerability assessment, URL filtering, patch management, etc.. A security vulnerabili...

5.5CVSS5.5AI score0.0011EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.11 views

PT-2025-36283

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in its ftrace functionality where the reader of filter files does not allocate and copy the hash, leading to a use-after-free UAF condition. Specifically...

7.8CVSS6.7AI score0.0018EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.15 views

PT-2025-37303

Name of the Vulnerable Software and Affected Versions: Zabbix Agent 2 affected versions not specified Description: The Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, which allows an attacker to inject unexpected arguments into the smartctl command. This can b...

7.5CVSS6.1AI score0.01273EPSS
SaveExploits0References22
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.5 views

PT-2025-47801

Name of the Vulnerable Software and Affected Versions GnuTLS versions 15.0 and -current GnuTLS versions prior to Fedora 43 Description A stack overflow issue exists in GnuTLS. The issue is related to a flaw that could potentially allow for malicious exploitation. Recommendations Update GnuTLS to...

7.2CVSS6.6AI score0.00207EPSS
SaveExploits0References137
GithubExploit
GithubExploit
added 2024/12/31 1:06 p.m.194 views

Exploit for Improper Preservation of Permissions in Modernwms

Admin MD5 Password Hash Disclosure - ModernWMS v1.0 - CVE-2024...

7.5CVSS7.1AI score0.00389EPSS
SaveExploits1
CNNVD
CNNVD
added 2024/12/30 12:00 a.m.12 views

free-one-api 安全漏洞

free-one-api is open source software developed by RockChinQ, which is a LLM Large Language Model reverse engineering interface management tool. A security vulnerability exists in versions of free-one-api prior to 1.0.1, which stems from the fact that MD5, which is used to hash passwords before...

6.9CVSS6.5AI score0.00335EPSS
SaveExploits0References2
OSV
OSV
added 2024/12/28 10:15 a.m.9 views

UBUNTU-CVE-2024-56681

In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - add error check in the ahashhmacinit function The ahashinit functions may return fails. The ahashhmacinit should not return ok when ahashinit returns error. For an example, ahashinit will return -ENOMEM when...

7.8CVSS6.2AI score0.00241EPSS
SaveExploits0References46
OSV
OSV
added 2024/12/27 6:30 a.m.16 views

GHSA-W95C-7994-GHPR TCPDF has incorrect comparison

An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != aka loose comparison and does not use a constant-time function to compare TCPDF tag hashes...

7.5CVSS7.3AI score0.00627EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2024/12/27 6:30 a.m.31 views

TCPDF has incorrect comparison

An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != aka loose comparison and does not use a constant-time function to compare TCPDF tag hashes...

7.5CVSS6.8AI score0.00627EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2024/12/27 5:15 a.m.18 views

CVE-2024-56522

An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != aka loose comparison and does not use a constant-time function to compare TCPDF tag hashes...

7.5CVSS0.00627EPSS
SaveExploits0References5
OSV
OSV
added 2024/12/27 5:15 a.m.9 views

UBUNTU-CVE-2024-56522

An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != aka loose comparison and does not use a constant-time function to compare TCPDF tag hashes...

7.5CVSS5.8AI score0.00627EPSS
SaveExploits0References6
Rows per page
Query Builder