Lucene search
+L

1093 matches found

RedhatCVE
RedhatCVE
added 2025/04/03 4:35 p.m.13 views

CVE-2025-31895

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in paulrosen ABC Notation abc-notation allows Stored XSS.This issue affects ABC Notation: from n/a through = 6.1.3...

6.5CVSS7.2AI score0.00204EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/02 1:35 a.m.7 views

USN-7404-1 phpseclib vulnerabilities

It was discovered that phpseclib did not correctly handle RSA PKCS1 v1.5 signature verification. An attacker could possibly use this issue to bypass authentication. This issue only affected Ubuntu 20.04 LTS. CVE-2021-30130 It was discovered that phpseclib did not correctly handle certain characte...

7.5CVSS5.7AI score0.01055EPSS
SaveExploits1References5
NVD
NVD
added 2025/04/01 3:16 p.m.25 views

CVE-2025-31895

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in paulrosen ABC Notation abc-notation allows Stored XSS.This issue affects ABC Notation: from n/a through = 6.1.3...

6.5CVSS0.00204EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/01 2:52 p.m.29 views

CVE-2025-31895 WordPress ABC Notation Plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in paulrosen ABC Notation abc-notation allows Stored XSS.This issue affects ABC Notation: from n/a through = 6.1.3...

6.5CVSS0.00204EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.7 views

WordPress plugin ABC Notation 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.5AI score0.00204EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/28 12:0 a.m.12 views

MISP 安全漏洞

MISP is an open source software solution from MISP Open Source. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.193...

7.2CVSS6.7AI score0.00217EPSS
SaveExploits0References2
Wolfi
Wolfi
added 2025/03/27 4:43 p.m.33 views

CVE-2025-29778 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

8CVSS6AI score0.00317EPSS
SaveExploits1
Wolfi
Wolfi
added 2025/03/27 4:43 p.m.14 views

GHSA-46MP-8W32-6G94 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

5.8AI score
SaveExploits0
Chainguard
Chainguard
added 2025/03/27 4:13 p.m.41 views

CVE-2025-29778 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, kyverno, kyverno-fips, commercial-kyverno, kyverno-notation-aws...

8CVSS5.8AI score0.00317EPSS
SaveExploits1
Chainguard
Chainguard
added 2025/03/27 4:12 p.m.16 views

GHSA-46MP-8W32-6G94 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, kyverno, kyverno-fips, commercial-kyverno, kyverno-notation-aws...

5.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.8 views

The vulnerability of the ABC Notation plugin for WordPress’ content management system arises from incorrect restrictions on the path to the restricted catalog. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the ABC Notation plugin in the WordPress content management system is related to errors in processing the relative path to the catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

6.8CVSS7.7AI score0.00654EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2025/03/20 10:15 a.m.12 views

PYSEC-2025-83

A directory traversal vulnerability exists in modelscope/agentscope version 0.0.4. An attacker can exploit this vulnerability to read any local JSON file by sending a crafted POST request to the /read-examples endpoint...

7.5CVSS7.2AI score0.01211EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2025/03/07 12:0 a.m.8 views

Python JSON Logger 安全漏洞

Python JSON Logger is a JSON formatting tool for Python logs by the individual developer Nicholas Hairs. A security vulnerability exists in Python JSON Logger versions prior to 3.3.0, which stems from a missing dependency that could lead to remote code execution...

8.8CVSS8.3AI score0.01543EPSS
SaveExploits1References5
Ubuntu
Ubuntu
added 2025/03/06 8:58 p.m.10 views

USN-7336-1: GNU Chess vulnerability

Michael Vaughan discovered an overflow vulnerability in GNU Chess that occurs when reading a specially crafted Portable Game Notation PGN file. An attacker could possibly use this issue to cause GNU Chess to crash, resulting in a denial of service, or the execution of arbitrary code...

7.8CVSS7.5AI score0.01769EPSS
SaveExploits1
OSV
OSV
added 2025/03/06 8:58 p.m.4 views

USN-7336-1 gnuchess vulnerability

Michael Vaughan discovered an overflow vulnerability in GNU Chess that occurs when reading a specially crafted Portable Game Notation PGN file. An attacker could possibly use this issue to cause GNU Chess to crash, resulting in a denial of service, or the execution of arbitrary code...

7.8CVSS6AI score0.01769EPSS
SaveExploits1References2
Wolfi
Wolfi
added 2025/02/25 3:16 p.m.19 views

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, gptscript, mage, mods, splunk-otel-collector, tempo, terraform-docs, wave, kserve-rest-proxy, sonobuoy, configmap-reload, kyverno-policy-reporter-kyverno-plugin, grpcurl, direnv, nsc, flannel-cni-plugin, docker-credential-ecr-login, ytt,...

5.4AI score
SaveExploits0
Chainguard
Chainguard
added 2025/02/25 1:11 p.m.4 views

GHSA-3RQ2-J576-XV9R vulnerabilities

Vulnerabilities for packages: mysql...

7.3AI score
SaveExploits0
OSV
OSV
added 2025/02/24 9:31 p.m.13 views

GHSA-4HMR-39VP-XFRR Moodle has an arbitrary file read risk through pdfTeX

Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available such as those with TeX Live installed...

8.6CVSS8.5AI score0.00427EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2025/02/24 9:31 p.m.21 views

Moodle has an arbitrary file read risk through pdfTeX

Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available such as those with TeX Live installed...

8.6CVSS7.2AI score0.00427EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2025/02/24 8:15 p.m.16 views

CVE-2025-26525

Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available such as those with TeX Live installed...

8.6CVSS0.00427EPSS
SaveExploits0References2
Rows per page
Query Builder