Lucene search
+L

14118 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•5 views

CVE-2025-21037: Undefined Security Weakness

Improper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability...

4.3CVSS5.8AI score0.0015EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/03 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2016-8644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context. CVE-2016-8644 Note that Nessus relies on the presence of the package...

5.3CVSS5.9AI score0.01176EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/09/03 12:00 a.m.•15 views

SAMSUNG Notes 安全漏洞

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. An information disclosure vulnerability exists in SAMSUNG Notes, which can be exploited by an attacker to access exported notes files...

5CVSS6.2AI score0.00122EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/03 12:00 a.m.•14 views

SAMSUNG Notes 安全漏洞

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an information disclosure vulnerability that can be exploited by an attacker to cause data access across user profiles...

4.3CVSS6.2AI score0.0015EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/03 12:00 a.m.•16 views

PT-2025-35690

Name of the Vulnerable Software and Affected Versions Samsung Notes versions prior to 4.4.30.63 Description Improper access control in Samsung Notes prior to version 4.4.30.63 allows local privileged attackers to access exported note files. User interaction is required for exploitation...

5CVSS6AI score0.00122EPSS
SaveExploits0References6
Veeam
Veeam
•added 2025/09/03 12:00 a.m.•37 views

Release Information for Veeam ONE 13 Patch 1

Veeam ONE 13 Releases 13.0.2.6723 2026-05-27 What's New New Features and Improvements Suspicious Incremental Backup Size Alarm -- Extended Platform Support The Suspicious Incremental Backup Size alarm now covers all platforms supported in Veeam ONE v13, including Proxmox VE, oVirt KVM Oracle Linu...

5.8AI score
SaveExploits0Affected Software1
NVD
NVD
•added 2025/09/02 5:15 p.m.•12 views

CVE-2025-55474

Many Notes 0.10.1 is vulnerable to Cross Site Scripting XSS, which allows malicious Markdown files to execute JavaScript when viewed...

6.1CVSS0.00365EPSS
SaveExploits1References3
CVE
CVE
•added 2025/09/02 12:00 a.m.•29 views

CVE-2025-55474

Many Notes version 0.10.1 is vulnerable to Cross-Site Scripting (XSS) due to improper handling of Markdown files. This flaw allows malicious Markdown files to execute JavaScript when viewed by a user. While the documents confirm the vulnerability exists, there is currently no information provided...

6.1CVSS6.2AI score0.00365EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2025/09/02 12:00 a.m.•12 views

many-notes 安全漏洞

many-notes is a Markdown reader by Bruno Personal Developer. A security vulnerability exists in many-notes version 0.10.1, which stems from improper handling of Markdown files and could lead to cross-site scripting attacks...

6.1CVSS5.8AI score0.00365EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/02 12:00 a.m.•22 views

CVE-2025-55474

Many Notes 0.10.1 is vulnerable to Cross Site Scripting XSS, which allows malicious Markdown files to execute JavaScript when viewed...

0.00365EPSS
SaveExploits1References3
OSV
OSV
•added 2025/09/02 12:00 a.m.•10 views

CVE-2025-55474

Many Notes 0.10.1 is vulnerable to Cross Site Scripting XSS, which allows malicious Markdown files to execute JavaScript when viewed...

6.1CVSS6.8AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/09/02 12:00 a.m.•3 views

CVE-2025-55474

Many Notes 0.10.1 is vulnerable to Cross Site Scripting XSS, which allows malicious Markdown files to execute JavaScript when viewed...

6.2AI score0.00365EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/02 12:00 a.m.•3 views

CVE-2025-55474: Improper Neutralization of Input During Web Page Generation

Many Notes 0.10.1 is vulnerable to Cross Site Scripting XSS, which allows malicious Markdown files to execute JavaScript when viewed...

6.1CVSS6AI score0.00365EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/08/30 6:21 p.m.•9 views

CVE-2025-52035

A vulnerability in NotesCMS and specifically in the page /index.php?route=notes. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as of commit 7d821a0f028b0778b245b99ab3d3bff1ac10e2d3 dated...

6.1CVSS6.3AI score0.00207EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/08/30 6:21 p.m.•11 views

CVE-2025-52036

A vulnerability has been found in NotesCMS and classified as medium. Affected by this vulnerability is the page /index.php?route=categories. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as o...

6.1CVSS6.5AI score0.00207EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2023-1710

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A sensitive information disclosure vulnerability in GitLab affecting all versions from 15.0 prior to 15.8.5, 15.9 prior to 15.9.4 and 15.10 prior to 15.10.1...

5.3CVSS5.6AI score0.00786EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2021-31864

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows attackers to bypass the addissuenotes permission requirement by leveraging the incoming...

5.3CVSS5.7AI score0.01192EPSS
SaveExploits0References2
Malwarebytes
Malwarebytes
•added 2025/08/28 11:07 a.m.•17 views

Claude AI chatbot abused to launch “cybercrime spree”

Anthropic—the company behind the widely renowned coding chatbot, Claude—says it uncovered a large-scale extortion operation in which cybercriminals abused Claude to automate and orchestrate sophisticated attacks. The company issued a Threat Intelligence report in which it describes several...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/28 7:16 a.m.•13 views

MAL-2025-41480 Malicious code in @twork-data-services/company-notes (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/26 3:15 p.m.•10 views

CVE-2025-52035

A vulnerability in NotesCMS and specifically in the page /index.php?route=notes. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as of commit 7d821a0f028b0778b245b99ab3d3bff1ac10e2d3 dated...

6.1CVSS5.7AI score0.00207EPSS
SaveExploits1References2
Rows per page
Query Builder