Lucene search
+L

13191 matches found

CNNVD
CNNVD
added 2025/03/03 12:00 a.m.9 views

Esri ArcGIS Server 跨站脚本漏洞

Esri ArcGIS Server is Esri's Web-oriented enterprise software platform for providing geolocation services. A cross-site scripting vulnerability exists in Esri ArcGIS Server versions 10.9.1 through 11.3, which can be exploited by an attacker to create a specially crafted link that, when clicked, m...

4.8CVSS6.3AI score0.00256EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.8 views

WordPress plugin Guten Free Options 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

7.1CVSS5.9AI score0.00378EPSS
SaveExploits0References2
OSV
OSV
added 2025/03/01 10:21 a.m.14 views

CLSA-2025-1740824456 mysql: Fix of 49 CVEs

Update to MySQL 8.0.41 - CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231...

9.1CVSS7.1AI score0.17301EPSS
SaveExploits3References1
OSV
OSV
added 2025/03/01 10:06 a.m.17 views

CLSA-2025-1740823577 mysql: Fix of 49 CVEs

Update to MySQL 8.0.41 - CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231...

9.1CVSS7.1AI score0.17301EPSS
SaveExploits3References1
CNNVD
CNNVD
added 2025/03/01 12:00 a.m.15 views

SkyCaiji 代码问题漏洞

SkyCaiji Blue Sky Collector is an open source free crawler system by zorlan individual developer. A code issue vulnerability exists in SkyCaiji version 2.9, which stems from an unrestricted file upload. An attacker can exploit the vulnerability to remotely execute code...

9.8CVSS6.7AI score0.00381EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/03/01 12:00 a.m.10 views

WordPress plugin Better Messages 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

7.5CVSS7.8AI score0.00481EPSS
SaveExploits0References5
OSV
OSV
added 2025/02/28 5:15 p.m.11 views

CVE-2025-0985

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD stores potentially sensitive information in environment variables that could be obtained by a local user...

5.5CVSS5.8AI score0.00257EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/28 4:15 a.m.13 views

AZL-57639 CVE-2025-1744 affecting package gdal 3.6.3-2

Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before 5.9.9...

10CVSS7.5AI score0.00497EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/02/28 3:15 a.m.6 views

CVE-2025-0975

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters...

8.8CVSS5.9AI score0.00679EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/28 3:15 a.m.6 views

CVE-2025-23225

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the improper handling of invalid headers sent to the queue...

6.5CVSS5.8AI score0.00433EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/28 3:15 a.m.6 views

CVE-2025-0975

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters...

8.8CVSS5.9AI score0.00679EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/28 3:15 a.m.18 views

CVE-2024-54173

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled...

4.7CVSS5.7AI score0.00125EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/28 12:00 a.m.5 views

Radare2 安全漏洞

Radare2 is a Libre reverse framework open-sourced by radare for Unix geeks. A security vulnerability exists in Radare2 versions prior to 5.9.9 that stems from a heap buffer over-read or buffer overflow...

10CVSS8.7AI score0.00497EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/28 12:00 a.m.6 views

PT-2025-9052

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.9.9 Description The issue is an Out-of-bounds Write vulnerability that allows heap-based buffer over-read or buffer overflow. This can lead to a buffer overflow, which is a type of attack where more data is written ...

10CVSS7.5AI score0.00497EPSS
SaveExploits0References24
SUSE CVE
SUSE CVE
added 2025/02/27 3:02 a.m.5 views

SUSE CVE-2022-49703

In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Store vhost pointer during subcrq allocation Currently the back pointer from a queue to the vhost adapter isn't set until after subcrq interrupt registration. The value is available when a queue is first allocated a...

5.5CVSS7.5AI score0.0026EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/02/27 12:00 a.m.11 views

WordPress plugin FooGallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

5.1CVSS7.7AI score0.00408EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/02/27 12:00 a.m.8 views

Infoblox NIOS 输入验证错误漏洞

Infoblox NIOS is a system for managing and automating network devices and services from Infoblox, Inc. It is used to automate the configuration and management of networks and to ensure stable network operation. A security vulnerability exists in Infoblox NIOS version 8.6.4 and earlier and version...

9.8CVSS6.5AI score0.00434EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/27 12:00 a.m.11 views

MongoDB Shell 安全漏洞

MongoDB Shell mongosh is an interactive database manipulation tool from the American company MongoDB. It is used to interact with the MongoDB database, execute commands and manipulate data. A security vulnerability exists in MongoDB Shell versions prior to 2.3.9 that stems from control character...

8.8CVSS7.5AI score0.00273EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/27 12:00 a.m.12 views

MongoDB Shell 注入漏洞

MongoDB Shell mongosh is an interactive database manipulation tool from the American company MongoDB. It is used to interact with the MongoDB database, execute commands and manipulate data. A security vulnerability exists in MongoDB Shell versions prior to 2.3.9 that stems from control character...

7.6CVSS7.5AI score0.00305EPSS
SaveExploits0References2
Circl
Circl
added 2025/02/26 4:24 p.m.8 views

CVE-2022-4095

creationtimestamp| type| source ---|---|--- 2025-02-26 16:24:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5525...

7.8CVSS6.3AI score0.00258EPSS
SaveExploits0References1
Rows per page
Query Builder