Lucene search
+L

20064 matches found

Fedora
Fedora
added 2025/05/12 1:56 a.m.19 views

[SECURITY] Fedora 42 Update: chromium-136.0.7103.92-1.fc42

Chromium is an open-source web browser, powered by WebKit Blink...

8.8CVSS7.1AI score0.00474EPSS
SaveExploits0
CNVD
CNVD
added 2025/05/12 12:00 a.m.14 views

Mattermost has an unspecified vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost has a security vulnerability that stems from the Wrangler plugin that can bypass AI access control. No details of the vulnerability are provided at this time...

4.3CVSS3.4AI score0.00213EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/05/12 12:00 a.m.6 views

Mattermost Improper Access Control Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an Improper Access Control Vulnerability, no details of the vulnerability are provided at this time...

4.3CVSS7.1AI score0.00268EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/05/12 12:00 a.m.16 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to...

8.7CVSS5.2AI score0.00781EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/12 12:00 a.m.12 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in synchronization errors when using shared resources. This allows attackers to circumvent existing security restrictions and gain unauthorized access to protected information.

The vulnerabilities of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow remote attackers to bypass...

3.7CVSS5.6AI score0.00392EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/12 12:00 a.m.13 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B relates to access control errors. These errors allow attackers to bypass existing security restrictions and gain unauthorized access to protected information.

The vulnerabilities of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to access control errors. Exploiting these vulnerabilities can allow attackers to bypass existing security restrictions and gain...

4.3CVSS5.5AI score0.00521EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/12 12:00 a.m.13 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in synchronization errors when using shared resources. This allows attackers to circumvent existing security restrictions and gain unauthorized access to protected information.

The vulnerabilities of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow remote attackers to bypass...

3.7CVSS5.6AI score0.00392EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/12 12:00 a.m.11 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B, related to lack of access control, allows attackers to bypass existing security restrictions and gain unauthorized access to protected information.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to lack of access control mechanisms. Exploiting these vulnerabilities can allow unauthorized actors to bypass existing security...

5.5CVSS5.5AI score0.00441EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/12 12:00 a.m.14 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B, related to lack of access control, allows attackers to bypass existing security restrictions and gain unauthorized access to protected information.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to lack of access control mechanisms. Exploiting these vulnerabilities can allow unauthorized actors to bypass existing security...

4.3CVSS5.5AI score0.00537EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/12 12:00 a.m.10 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B, related to improper authentication procedures, allows attackers to bypass existing security restrictions and gain unauthorized access to protected information.

The vulnerabilities of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to improper authentication processes. Exploiting these vulnerabilities allows a malicious actor to bypass existing security restrictions...

9.7CVSS5.5AI score0.17186EPSS
SaveExploits0References3Affected Software3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/11 6:11 p.m.8 views

Malicious code in atlaskit-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a82f51289bb90a9a96816fcf188b81cd24166b48cac9cc66d28af7e68e1acc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
Fedora
Fedora
added 2025/05/11 1:43 a.m.23 views

[SECURITY] Fedora 40 Update: chromium-136.0.7103.92-1.fc40

Chromium is an open-source web browser, powered by WebKit Blink...

8.8CVSS7AI score0.00474EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/10 1:15 p.m.8 views

Malicious code in iconnect (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e53aae69656f138607d0de8abe11d4b48ed6156875f07ec0da7485dd776f7158 Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

8.3AI score
SaveExploits0References2
CNNVD
CNNVD
added 2025/05/10 12:00 a.m.11 views

Code-Projects Simple Banking System 安全漏洞

Code-Projects Simple Banking System is a simple banking system from Code-Projects open source. A security vulnerability exists in Code-Projects Simple Banking System version 1.0 and earlier, which originates from a buffer overflow due to a parameter password2 operation in the Sign In component...

7.8CVSS5.8AI score0.00357EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/05/09 12:00 a.m.8 views

itsourcecode Gym Management System 注入漏洞

itsourcecode Gym Management System is an open source gym management system by itsourcecode. An injection vulnerability exists in itsourcecode Gym Management System version 1.0, which originates from an SQL injection caused by a parameter ID operation in the file /ajax.php?action=deletetrainer...

9.8CVSS7.8AI score0.00542EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/05/09 12:00 a.m.9 views

Mirror Registry 安全漏洞

Mirror Registry is a QUAY open source standalone registry for installing mirror images for Openshift. A security vulnerability exists in Mirror Registry that stems from improperly written permissions in the /etc/passwd file, which could lead to elevated privileges...

8.2CVSS6.6AI score0.00223EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/09 12:00 a.m.9 views

Code-Projects Jewelery Store Management system 安全漏洞

Code-Projects Jewelery Store Management system is Code-Projects open source a jewelry store management system. A security vulnerability exists in Code-Projects Jewelery Store Management system version 1.0, which originates from a stack-based buffer overflow due to a parameter str2 operation in th...

7.8CVSS5.8AI score0.00363EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
added 2025/05/09 12:00 a.m.13 views

Engineering Risk-Aware, Security-By-Design Frameworks for Assurance of Large-Scale Autonomous AI Models

As AI models scale to billions of parameters and operate with increasing autonomy, ensuring their safe, reliable operation demands engineering-grade security and assurance frameworks. This paper presents an enterprise-level, risk-aware, security-by-design approach for large-scale autonomous AI...

6.9AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/08 6:25 p.m.24 views

Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities

Summary There are vulnerabilities in multiple Open Source Software OSS components consumed by IBM Planning Analytics Workspace. For more information about the vulnerability impact, refer to the table in the "Related Information" section. This Security Bulletin relates only to the direct usage of...

9.8CVSS8.7AI score0.10395EPSS
SaveExploits8Affected Software5
CNNVD
CNNVD
added 2025/05/08 12:00 a.m.11 views

Halo 安全漏洞

Halo is a powerful and easy-to-use open source website builder from Halo Open Source. A security vulnerability exists in Halo versions 2.174.101 and earlier and versions 2.175.1 through 2.184.21, which stems from insufficient input validation and could lead to open redirection and cross-site...

7.1CVSS5.9AI score0.00344EPSS
SaveExploits0References1
Rows per page
Query Builder