Lucene search
+L

663 matches found

CVE
CVE
added 2025/11/19 12:0 a.m.24 views

CVE-2025-51661

FileCodeBox has a path traversal vulnerability affecting v2.2 and earlier where SystemFileStorage.save_file uses unvalidated user-supplied filenames to build save_path. An unauthenticated /share/file/upload endpoint can be abused to write arbitrary files outside the intended directory by crafted ...

7.5CVSS6.5AI score0.0052EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2025/11/18 5:16 p.m.10 views

CVE-2025-56527

Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage...

7.5CVSS0.00416EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.8 views

Cinnamon kotaemon 安全漏洞

Cinnamon kotaemon is a RAG-based open source tool from Cinnamon Open Source. A security vulnerability exists in Cinnamon kotaemon version 0.11.0, which originates from storing plaintext passwords in client-side localStorage...

7.5CVSS6.5AI score0.00416EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/18 12:0 a.m.6 views

CVE-2025-56527

Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage...

7.5CVSS7AI score
SaveExploits0References7
EUVD
EUVD
added 2025/11/18 12:0 a.m.8 views

EUVD-2025-198038

Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage...

7.5CVSS6.5AI score0.00416EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2025/11/18 12:0 a.m.17 views

CVE-2025-56527

Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage...

0.00416EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/11/18 12:0 a.m.8 views

PT-2025-47336

Name of the Vulnerable Software and Affected Versions Kotaemon version 0.11.0 Description The software stores passwords in plaintext within the client's localStorage. This poses a significant risk as anyone with access to the client's storage can easily retrieve user credentials. Recommendations...

7.5CVSS6.4AI score0.00416EPSS
SaveExploits2References6
CVE
CVE
added 2025/11/18 12:0 a.m.17 views

CVE-2025-56527

The CVE-2025-56527 entry concerns Kotaemon 0.11.0 where plaintext passwords are stored in the client’s localStorage. The associated CVSS 3.1 score is 7.5 (HIGH) with an attack vector of Network, attack complexity Low, no privileges required, no user interaction, and but with Confidentiality Impac...

7.5CVSS6.7AI score0.00416EPSS
SaveExploits1References5Affected Software1
RedHat Linux
RedHat Linux
added 2025/11/11 9:13 a.m.4 views

kernel: bpf: Fix deadlock when freeing cgroup storage

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock when freeing cgroup storage The following commit bc235cdb423a "bpf: Prevent deadlock from recursive bpftaskstorageget|delete" first introduced deadlock prevention for fentry/fexit programs attaching on...

5.5CVSS6.8AI score0.00162EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/11/11 8:21 a.m.10 views

kernel: bpf: Fix deadlock when freeing cgroup storage

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock when freeing cgroup storage The following commit bc235cdb423a "bpf: Prevent deadlock from recursive bpftaskstorageget|delete" first introduced deadlock prevention for fentry/fexit programs attaching on...

5.5CVSS6.8AI score0.00162EPSS
SaveExploits0References5
AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.5 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed out-of-bounds access in cgroup local storage Lonial reported that an out-of-bounds access in cgroup local storage can occur through tail calls. This occurs when two programs each utilize a cgroup local storage with...

7.8CVSS6.4AI score0.00161EPSS
SaveExploits0References3
Veracode
Veracode
added 2025/10/13 10:6 a.m.10 views

Arbitrary File Write

github.com/usememos/memos is vulnerable to arbitrary file write. The vulnerability is due to improper validation of file paths in the CreateResource endpoint when storing objects locally, which allows an attacker to create files with path traversal sequences and write arbitrary files on the serve...

4.3CVSS7.2AI score0.00343EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-13970

Malware in sbrugna...

5.5CVSS5.6AI score0.00293EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2017-9965

Malware in sbrugna...

4.9CVSS5.2AI score0.00723EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-26056

Malware in sbrugna...

4CVSS4.6AI score0.00249EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2019-13784

Malware in sbrugna...

4CVSS4.8AI score0.0034EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2020-6589

Malware in sbrugna...

7.5CVSS7.5AI score0.0112EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2021-2467

Malware in sbrugna...

7.1CVSS6.9AI score0.01327EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2019-13781

Malware in sbrugna...

4CVSS4.8AI score0.0034EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-12589

Malware in sbrugna...

6.1CVSS6.3AI score0.00633EPSS
SaveExploits0References2
Rows per page
Query Builder