Lucene search
+L

7687 matches found

OSV
OSV
added 2025/06/17 6:15 p.m.9 views

CVE-2025-33122

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 could allow a user to gain elevated privileges due to an unqualified library call in IBM Advanced Job Scheduler for i. A malicious actor could cause user-controlled code to run with administrator privilege...

7.5CVSS5.8AI score0.00352EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/17 6:15 p.m.45 views

CVE-2025-33122

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 could allow a user to gain elevated privileges due to an unqualified library call in IBM Advanced Job Scheduler for i. A malicious actor could cause user-controlled code to run with administrator privilege...

7.5CVSS0.00352EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/17 5:13 p.m.50 views

CVE-2025-33122 IBM i privilege escalation

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 could allow a user to gain elevated privileges due to an unqualified library call in IBM Advanced Job Scheduler for i. A malicious actor could cause user-controlled code to run with administrator privilege...

7.5CVSS0.00352EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/17 3:15 p.m.16 views

CVE-2025-48274

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpjobportal WP Job Portal wp-job-portal allows Blind SQL Injection.This issue affects WP Job Portal: from n/a through = 2.3.2...

9.3CVSS0.00292EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/17 3:01 p.m.7 views

CVE-2025-48274 WordPress WP Job Portal <= 2.3.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpjobportal WP Job Portal allows Blind SQL Injection. This issue affects WP Job Portal: from n/a through 2.3.2...

9.3CVSS9.7AI score0.00292EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/17 3:01 p.m.30 views

CVE-2025-48274

CVE-2025-48274 affects WP Job Portal

9.3CVSS5.9AI score0.00292EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/06/17 3:01 p.m.20 views

CVE-2025-48274 WordPress WP Job Portal plugin <= 2.3.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpjobportal WP Job Portal wp-job-portal allows Blind SQL Injection.This issue affects WP Job Portal: from n/a through = 2.3.2...

9.3CVSS0.00292EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/06/17 12:00 a.m.14 views

PT-2025-25739 · Ibm · Ibm I +1

Name of the Vulnerable Software and Affected Versions: IBM i versions 7.2 through 7.6 Description: The issue allows a user to gain elevated privileges due to an unqualified library call in IBM Advanced Job Scheduler for i. A malicious actor could cause user-controlled code to run with administrat...

7.5CVSS6.7AI score0.00352EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/06/17 12:00 a.m.17 views

PT-2025-25686 · Unknown · Wp Job Portal

Name of the Vulnerable Software and Affected Versions: WP Job Portal versions n/a through 2.3.2 Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection, which can b...

9.3CVSS9.3AI score0.00292EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/06/17 12:00 a.m.12 views

WordPress plugin WP Job Portal SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

9.3CVSS9.1AI score0.00292EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.6 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Add a step to move a job to the pending list if the reset operation was skipped. When a CL/CSD job times out, we check whether the GPU has made any progress since the last timeout. If so, instead of resetting the hardwar...

5.5CVSS5.4AI score0.00164EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.5 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Ensure that the job pointer is set to NULL after the job completes. After a job is completed, the corresponding pointer in the device must be set to NULL. Failure to do this will trigger a warning when unloading the...

7.8CVSS6.2AI score0.00255EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.6 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: accel/ivpu: Fixed the locking order in ivpujobsubmit. Fixed deadlocks in job submission and abort handling. When a thread aborts currently executing jobs due to a fault, it first locks the global lock that protects submittedjo...

5.5CVSS6.4AI score0.00132EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/06/13 6:19 p.m.9 views

CVE-2025-22236

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions = 3007.0. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

8.1CVSS7.9AI score0.00148EPSS
SaveExploits0References2
OSV
OSV
added 2025/06/13 9:30 a.m.2 views

GHSA-JH7C-XH74-H76F Salt has minion event bus authorization bypass vulnerability

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions = 3007.0...

8.1CVSS7.2AI score0.00148EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2025/06/13 9:30 a.m.9 views

Salt has minion event bus authorization bypass vulnerability

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions = 3007.0...

8.1CVSS8.1AI score0.00148EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2025/06/13 7:15 a.m.11 views

CVE-2025-22236

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions = 3007.0...

8.1CVSS0.00148EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/06/13 6:53 a.m.6 views

CVE-2025-22236 CVE-2025-22236 salt advisory

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions = 3007.0...

8.1CVSS7.2AI score0.00148EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/06/13 6:53 a.m.24 views

CVE-2025-22236 CVE-2025-22236 salt advisory

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions = 3007.0...

8.1CVSS0.00148EPSS
SaveExploits0References2
CVE
CVE
added 2025/06/13 6:53 a.m.132 views

CVE-2025-22236

CVE-2025-22236 concerns Salt minion: an attacker with a minion key could craft a message to trigger a job on other minions via the minion event bus authorization bypass. Technical details in connected sources show this affects Salt Minion components (v3xxx series with 3007.0+ listed as affected) ...

8.1CVSS8.1AI score0.00148EPSS
SaveExploits0References2
Rows per page
Query Builder