Lucene search
+L

13307 matches found

CNNVD
CNNVD
•added 2025/03/12 12:00 a.m.•18 views

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS that originates from the processing of specially crafted LLDP frames that could cause the firewall to restart unexpected...

6.8CVSS6.5AI score0.00235EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/03/12 12:00 a.m.•21 views

SQL Directus Authentication Bypass

The vulnerability of the application layer in real-time content management system SQL Directus relates to bypassing authentication by using a user-controlled key. Exploiting this vulnerability could allow an attacker to gain access to the user account...

4.3CVSS5.6AI score0.00329EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
•added 2025/03/11 9:42 p.m.•12 views

WordPress Bee Layer Slider plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Bee Layer Slider versions = 1.1...

6.5CVSS7.7AI score0.00273EPSS
SaveExploits0Affected Software1
osv_cve
osv_cve
•added 2025/03/11 9:15 p.m.•35 views

CVE-2025-28879

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aumsrini Bee Layer Slider allows Stored XSS. This issue affects Bee Layer Slider: from n/a through 1.1...

5.4CVSS7.3AI score0.00273EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/11 9:15 p.m.•22 views

CVE-2025-28879

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aumsrini Bee Layer Slider bee-layer-slider allows Stored XSS.This issue affects Bee Layer Slider: from n/a through = 1.1...

6.5CVSS0.00273EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/11 9:00 p.m.•33 views

CVE-2025-28879 WordPress Bee Layer Slider plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aumsrini Bee Layer Slider bee-layer-slider allows Stored XSS.This issue affects Bee Layer Slider: from n/a through = 1.1...

6.5CVSS0.00273EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/11 9:00 p.m.•76 views

CVE-2025-28879

CVE-2025-28879 : WordPress Bee Layer Slider plugin

6.5CVSS7.2AI score0.00273EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/11 9:00 p.m.•8 views

CVE-2025-28879 WordPress Bee Layer Slider plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aumsrini Bee Layer Slider bee-layer-slider allows Stored XSS.This issue affects Bee Layer Slider: from n/a through = 1.1...

6.5CVSS8.6AI score0.00273EPSS
SaveExploits0References1
osv_usn
osv_usn
•added 2025/03/11 4:46 p.m.•32 views

USN-7332-2 linux-kvm vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

9.8CVSS7AI score0.03395EPSS
SaveExploits3References38
Ubuntu
Ubuntu
•added 2025/03/11 4:46 p.m.•38 views

USN-7332-2: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

9.8CVSS7.9AI score0.03395EPSS
SaveExploits3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•3 views

CVE-2025-26658: Session Fixation

The Service Layer in SAP Business One, allows attackers to potentially gain unauthorized access and impersonate other users in the application to perform unauthorized actions. Due to the improper session management, the attackers can elevate themselves to higher privilege and can read, modify...

6.8CVSS6.8AI score0.00294EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•8 views

CVE-2025-28879: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aumsrini Bee Layer Slider bee-layer-slider allows Stored XSS.This issue affects Bee Layer Slider: from n/a through = 1.1...

6.5CVSS5.8AI score0.00273EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•4 views

PT-2025-10926

Name of the Vulnerable Software and Affected Versions: aumsrini Bee Layer Slider versions n/d through 1.1 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS. Recommendations: For versions...

6.5CVSS0.00273EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•15 views

WordPress plugin Bee Layer Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS8.3AI score0.00273EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/03/11 12:00 a.m.•22 views

TCC Component Unauthorized Access

The vulnerability of the TCC component in macOS, iOS, and iPadOS is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to protected information...

3.9CVSS5.5AI score0.00212EPSS
SaveExploits0References4Affected Software3
Microsoft CVE
Microsoft CVE
•added 2025/03/10 7:00 a.m.•14 views

Xorg: xwayland: use-after-free in playreleasedevents()

...

7.8CVSS7.8AI score0.00393EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/03/10 12:00 a.m.•5 views

PT-2025-10672

Name of the Vulnerable Software and Affected Versions SAP Business One affected versions not specified Description The issue in the Service Layer of SAP Business One allows attackers to potentially gain unauthorized access, impersonate other users, and perform unauthorized actions due to improper...

6.8CVSS0.00294EPSS
SaveExploits0References11
Citrix
Citrix
•added 2025/03/10 12:00 a.m.•20 views

When resizing an OS layer to a smaller size, the Finalize process fails

When attempting to shrink an OS layer version OS layer using a size that is smaller then it currently is , the Finalize process may fail. The CALCE or UNISYSLIB logs from the Compositing Engine would shows an error similar to the following: 2024-01-17 09:29:11 ERROR 1668 uni.ca.syslib.reghive...

7AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/08 8:00 a.m.•10 views

Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()

...

7.8CVSS7.2AI score0.00241EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/08 8:00 a.m.•14 views

net: lapb: increase LAPB_HEADER_LEN

...

5.5CVSS7.4AI score0.00226EPSS
SaveExploits0
Rows per page
Query Builder