Lucene search
K

10753 matches found

Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.8 views

PT-2025-46321

Name of the Vulnerable Software and Affected Versions TNC Toolbox: Web Performance plugin for WordPress versions up to and including 1.4.2 Description The TNC Toolbox: Web Performance plugin for WordPress is affected by a sensitive information exposure issue. The plugin stores cPanel API...

10CVSS6.9AI score0.00913EPSS
Exploits1References10
CNNVD
CNNVD
added 2025/11/11 12:0 a.m.0 views

Intel Thread Director Visualizer 安全漏洞

Intel Thread Director Visualizer is a desktop application from Intel Corporation USA. It helps end-users visualize CPU utilization and the distribution between P-cores performance cores and E-cores energy-efficient cores for Alder Lake and above platforms. A security vulnerability exists in Intel...

6.7CVSS6.6AI score0.00013EPSS
Exploits0References2
NVD
NVD
added 2025/11/10 10:15 p.m.2 views

CVE-2025-64502

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0-alpha....

6.9CVSS0.00118EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/11/10 9:40 p.m.2 views

CVE-2025-64502 Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0-alpha....

6.9CVSS6.3AI score0.00118EPSS
Exploits0References3
Amazon
Amazon
added 2025/11/10 12:0 a.m.3 views

Important: docker

Issue Overview: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed withi...

7.5CVSS6.9AI score0.00044EPSS
Exploits0
CNNVD
CNNVD
added 2025/11/10 12:0 a.m.1 views

JetBrains ReSharper 安全漏洞

JetBrains dotTrace is a professional .NET performance analysis tool from JetBrains Czech Republic that is used to detect and analyze performance bottlenecks in .NET and .NET Core applications. This CVE number has been withdrawn...

7CVSS6.7AI score0.00001EPSS
Exploits0References1
Fedora
Fedora
added 2025/11/08 2:57 a.m.4 views

[SECURITY] Fedora 41 Update: libnbd-1.22.5-1.fc41

NBD =E2=80=94 Network Block Device =E2=80=94 is a protocol for accessing Bloc k Devices hard disks and disk-like things over a Network. This is the NBD client library in userspace, a simple library for writing NBD clients. The key features are: Synchronous and asynchronous APIs, both for ease of...

7AI score
Exploits0
Microsoft CVE
Microsoft CVE
added 2025/11/07 1:1 a.m.10 views

perf: Fix hang while freeing sigtrap event

...

5.5CVSS8.8AI score0.00031EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/11/07 12:0 a.m.1 views

Fedora 43 : webkitgtk (2025-452a101260)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-452a101260 advisory. Update to WebKitGTK 2.50.1: Improve text rendering performance. Fix audio playback broken on instagram. Fix rendering of layers with fractional transforms. F...

9.8CVSS7.7AI score0.00359EPSS
Exploits0References2
OSV
OSV
added 2025/11/06 12:58 p.m.1 views

BIT-GOLANG-2025-61724 Excessive CPU consumption in Reader.ReadResponse in net/textproto

The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption...

5.3CVSS6.9AI score0.00023EPSS
Exploits0References6
OSV
OSV
added 2025/11/06 12:58 p.m.1 views

BIT-GOLANG-2025-61723 Quadratic complexity when parsing some invalid inputs in encoding/pem

The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs...

7.5CVSS6.6AI score0.00042EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/11/06 10:13 a.m.2 views

CVE-2025-6075

A vulnerability in Python’s os.path.expandvars function that can cause performance degradation. When processing specially crafted, user-controlled input with nested environment variable patterns, the function exhibits quadratic time complexity, potentially leading to excessive CPU usage and denia...

4CVSS7AI score0.00021EPSS
Exploits0References5
Fedora
Fedora
added 2025/11/05 2:13 a.m.4 views

[SECURITY] Fedora 43 Update: ruff-0.14.2-1.fc43

An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 plus dozens of plugins, Black, isort, pydocstyle,...

8.1CVSS7.2AI score0.00017EPSS
Exploits1
Fedora
Fedora
added 2025/11/05 2:12 a.m.4 views

[SECURITY] Fedora 43 Update: python-fastapi-0.120.1-1.fc43

FastAPI is a modern, fast high-performance, web framework for building APIs with Python based on standard Python type hints. The key features are: =E2=80=A2 Fast: Very high performance, on par with NodeJS and Go thanks to Starlette and Pydantic. One of the fastest Python frameworks available...

8.1CVSS7.2AI score0.00017EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.2 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990288)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990288 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/cpumsf: Handle CPU hotplug remove during sampling CPU hotplug remove handling triggers the...

7.8CVSS6.2AI score0.00024EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.2 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990319 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Fix use of mutex in IRQs disabled section Current imc-pmu code triggers a WARNIN...

5.5CVSS6.2AI score0.00021EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.1 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989736 advisory. In the Linux kernel, the following vulnerability has been resolved: perf/core: Bail out early if the request AUX area is out of bound When perf-record with a large A...

7.8CVSS5.9AI score0.00015EPSS
Exploits0References4
Malwarebytes
Malwarebytes
added 2025/11/03 2:0 p.m.5 views

Malwarebytes aces PCMag Readers’ Choice Awards and AVLab Cybersecurity Foundation tests

Malwarebytes proudly topped three categories in PCMag’s 2025 Readers’ Choice Awards, recognized for exceptional protection and user satisfaction. We also earned the latest badge from AVLab Cybersecurity Foundation’s September “Advanced In-The-Wild Malware Test” by blocking 100% of malware samples...

6.8AI score
Exploits0
Fedora
Fedora
added 2025/11/03 1:7 a.m.4 views

[SECURITY] Fedora 42 Update: ruff-0.14.2-1.fc42

An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 plus dozens of plugins, Black, isort, pydocstyle,...

8.1CVSS7.2AI score0.00017EPSS
Exploits1
Fedora
Fedora
added 2025/11/03 1:2 a.m.4 views

[SECURITY] Fedora 41 Update: ruff-0.14.2-1.fc41

An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 plus dozens of plugins, Black, isort, pydocstyle,...

8.1CVSS7.2AI score0.00017EPSS
Exploits1
Rows per page
Query Builder