Lucene search
+L

6671 matches found

OSV
OSV
added 2025/10/01 3:30 p.m.36 views

GHSA-5M5W-W2H2-FQGQ SPDK is vulnerable to buffer overflow in the NVMe-oF target component

Storage Performance Development Kit SPDK 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf...

5.5CVSS7.1AI score0.00305EPSS
SaveExploits0References5
NVD
NVD
added 2025/10/01 3:15 p.m.28 views

CVE-2025-57275

Storage Performance Development Kit SPDK 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf...

5.5CVSS0.00305EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/01 12:0 a.m.5 views

CVE-2025-57275

Storage Performance Development Kit SPDK 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf...

6.5AI score0.00305EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/01 12:0 a.m.11 views

Storage Performance Development Kit 安全漏洞

Storage Performance Development Kit SPDK is a storage performance development kit from the SPDK community. The product is primarily used for writing high-performance, scalable user-mode storage applications. A security vulnerability exists in Storage Performance Development Kit SPDK version 25.05...

5.5CVSS7AI score0.00305EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/01 12:0 a.m.10 views

CVE-2025-57275

Storage Performance Development Kit SPDK 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf...

5.5CVSS7.1AI score
SaveExploits0References4
Cvelist
Cvelist
added 2025/10/01 12:0 a.m.26 views

CVE-2025-57275

Storage Performance Development Kit SPDK 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf...

0.00305EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/01 12:0 a.m.7 views

PT-2025-40249

Name of the Vulnerable Software and Affected Versions Storage Performance Development Kit SPDK version 25.05 Description The Storage Performance Development Kit SPDK version 25.05 contains a buffer overflow in the NVMe-oF target component, specifically within lib/nvmf. Recommendations At the...

5.5CVSS6.2AI score0.00305EPSS
SaveExploits0References22
CVE
CVE
added 2025/10/01 12:0 a.m.19 views

CVE-2025-57275

CVE-2025-57275 affects Storage Performance Development Kit (SPDK) 25.05 and the NVMe-oF target component (lib/nvmf). The root cause is improper bounds handling leading to a Buffer Overflow. Documents describe potential buffer overflow that could crash or, per Veracode, enable arbitrary behavior. ...

5.5CVSS6.6AI score0.00305EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/30 12:0 a.m.5 views

NewStart CGSL MAIN 6.06 : p11-kit Multiple Vulnerabilities (NS-SA-2025-0209)

The remote NewStart CGSL host, running version MAIN 6.06, has p11-kit packages installed that are affected by multiple vulnerabilities: - An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remo...

7.5CVSS7.1AI score0.03486EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/09/27 8:44 a.m.8 views

CVE-2025-60120

Missing Authorization vulnerability in WPDirectoryKit WP Directory Kit wpdirectorykit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through = 1.4.0...

5.3CVSS5.9AI score0.0027EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/26 4:54 p.m.3 views

MAL-2025-47839 Malicious code in @my-pvz/ui-kit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cdc756704726b9cfb66ba52746b5d42a7b6f8742370a8bf409a664879607281 Any computer that has this package installed or running should be considered...

6.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/26 4:54 p.m.6 views

Malicious code in @my-pvz/ui-kit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cdc756704726b9cfb66ba52746b5d42a7b6f8742370a8bf409a664879607281 Any computer that has this package installed or running should be considered...

6.8AI score
SaveExploits0References1
vulnersOsv
vulnersOsv
added 2025/09/26 2:38 p.m.8 views

@omchat/common (>=1.0.0 <=1.0.4), @tverse/ui (>=0.1.0 <=0.1.1) +2 more potentially affected by CVE-2025-59364 via express-xss-sanitizer (=1.2.1)

express-xss-sanitizer NPM version =1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on express-xss-sanitizer and may be impacted: - @omchat/common =1.0.0, =0.1.0, =1.0.0, =1.14.31, =1.15.2 Source cves: CVE-2025-59364 Source advisory:...

5.3CVSS5.8AI score0.00419EPSS
SaveExploits0
Patchstack
Patchstack
added 2025/09/26 9:54 a.m.5 views

WordPress WP Directory Kit plugin <= 1.4.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin WP Directory Kit versions = 1.4.0...

5.3CVSS6.8AI score0.0027EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/09/26 9:15 a.m.4 views

CVE-2025-60120

Missing Authorization vulnerability in WPDirectoryKit WP Directory Kit wpdirectorykit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through = 1.4.0...

5.3CVSS0.0027EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/26 8:31 a.m.14 views

CVE-2025-60120

CVE-2025-60120 : WP Directory Kit plugin for WordPress had a Missing Authorization vulnerability affecting versions up to 1.4.0, enabling exploitation of access-control misconfigurations. The Wordfence entry confirms patch in 1.4.0. Remediation: upgrade to a version &gt;= 1.4.0 (or apply vendor p...

5.3CVSS5.9AI score0.0027EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/26 8:31 a.m.16 views

CVE-2025-60120 WordPress WP Directory Kit plugin <= 1.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPDirectoryKit WP Directory Kit wpdirectorykit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through = 1.4.0...

5.3CVSS0.0027EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/26 8:31 a.m.1 views

CVE-2025-60120 WordPress WP Directory Kit plugin <= 1.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPDirectoryKit WP Directory Kit wpdirectorykit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through = 1.4.0...

5.3CVSS5.1AI score0.0027EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/26 12:0 a.m.6 views

WordPress plugin WP Directory Kit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.5AI score0.0027EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/26 12:0 a.m.6 views

PT-2025-39567

Name of the Vulnerable Software and Affected Versions WP Directory Kit versions through 1.3.8 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. Recommendations Update WP Directory Kit to a version later than 1.3.8...

5.3CVSS6.5AI score0.0027EPSS
SaveExploits0References3
Rows per page
Query Builder