Lucene search
+L

35 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-31153

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00531EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-31152

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00375EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-31142

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00431EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/09/26 12:52 a.m.•25 views

CVE-2025-29155

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint...

6.5CVSS8AI score0.00431EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/26 12:52 a.m.•22 views

CVE-2025-29156

Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/pet...

6.1CVSS7AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/26 12:52 a.m.•29 views

CVE-2025-29157

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/cart, the server returns a 404-error page exposing sensitive information including the Servlet name default and server version...

6.5CVSS7.8AI score0.00531EPSS
SaveExploits1References1
NVD
NVD
•added 2025/09/25 7:15 p.m.•28 views

CVE-2025-29157

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/cart, the server returns a 404-error page exposing sensitive information including the Servlet name default and server version...

6.5CVSS0.00531EPSS
SaveExploits1References3
OSV
OSV
•added 2025/09/25 7:15 p.m.•17 views

CVE-2025-29156

Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/pet...

6.1CVSS6.1AI score0.00375EPSS
SaveExploits0References3
NVD
NVD
•added 2025/09/25 7:15 p.m.•14 views

CVE-2025-29156

Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/pet...

6.1CVSS0.00375EPSS
SaveExploits0References3
OSV
OSV
•added 2025/09/25 7:15 p.m.•14 views

CVE-2025-29157

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/cart, the server returns a 404-error page exposing sensitive information including the Servlet name default and server version...

6.5CVSS6.1AI score0.00531EPSS
SaveExploits1References3
OSV
OSV
•added 2025/09/25 6:15 p.m.•12 views

CVE-2025-29155

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint...

6.5CVSS6.1AI score0.00431EPSS
SaveExploits0References3
NVD
NVD
•added 2025/09/25 6:15 p.m.•74 views

CVE-2025-29155

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint...

6.5CVSS0.00431EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/09/25 12:00 a.m.•27 views

CVE-2025-29156

Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/pet...

0.00375EPSS
SaveExploits0References3
CVE
CVE
•added 2025/09/25 12:00 a.m.•42 views

CVE-2025-29156

A Cross-Site Scripting (XSS) vulnerability exists in petstore version 1.0.7 due to the /api/v3/pet interface failing to validate specially crafted scripts. A remote attacker can exploit this by submitting a malicious script to the endpoint, potentially leading to the execution of arbitrary code. ...

6.1CVSS6.7AI score0.00375EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2025/09/25 12:00 a.m.•50 views

PT-2025-39439

Name of the Vulnerable Software and Affected Versions petstore version 1.0.7 Description A Cross Site Scripting issue exists in petstore version 1.0.7. This allows a remote attacker to execute arbitrary code by providing a crafted script to the /api/v3/pet API endpoint. The attack vector involves...

6.1CVSS6.8AI score0.00375EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/09/25 12:00 a.m.•20 views

Swagger Petstore Sample 安全漏洞

Swagger Petstore Sample is a sample petstore system in the Swagger open source. A security vulnerability exists in Swagger Petstore Sample version 1.0.7 that stems from the DELETE endpoint not properly validating input, which could lead to remote code execution...

6.5CVSS7.7AI score0.00431EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/09/25 12:00 a.m.•17 views

Swagger Petstore Sample 安全漏洞

Swagger Petstore Sample is a sample petstore system in the Swagger open source. A security vulnerability exists in Swagger Petstore Sample version 1.0.7, which stems from the /api/v3/pet interface not validating specially crafted scripts, which could lead to a cross-site scripting attack...

6.1CVSS6AI score0.00375EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/09/25 12:00 a.m.•25 views

CVE-2025-29155

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint...

0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/25 12:00 a.m.•6 views

CVE-2025-29155: Improper Neutralization of Special Elements used in a Command

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint...

6.5CVSS6.6AI score0.00431EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/25 12:00 a.m.•19 views

Swagger Petstore Sample 安全漏洞

Swagger Petstore Sample is a sample petstore system in the Swagger open source. A security vulnerability exists in Swagger Petstore Sample version 1.0.7, which stems from a server returning a 404 error page and exposing sensitive information when accessing a non-existent endpoint or shopping cart...

6.5CVSS7.7AI score0.00531EPSS
SaveExploits1References4
Rows per page
Query Builder