Lucene search
+L

3008 matches found

Vivaldi Security Advisories
Vivaldi Security Advisories
added 2025/09/19 10:45 a.m.19 views

Minor update(8) for Vivaldi Android Browser 7.5

Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the seventh 7.5 stable, minor update: Backported V8...

9.8CVSS5.8AI score0.05391EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/09/19 12:00 a.m.3 views

CVE-2025-59689

Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For...

6.1CVSS7.2AI score0.01864EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/18 12:00 a.m.42 views

CVE-2025-55911

CVE-2025-55911 affects ClipBucket v5.5.2 Build#90. Multiple sources describe a vulnerability in actions/file_downloader.php where the file parameter enables a server-side request/command path that can lead to remote code execution. Exploitation could allow an authenticated user to trigger SSRF or...

6.5CVSS7.2AI score0.0107EPSS
SaveExploits4References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/09/16 1:27 p.m.14 views

CVE-2025-0164

IBM QRadar SIEM 7.5 through 7.5 Update Pack 13 Independent Fix 01 could allow a local privileged user to perform unauthorized actions on configuration files due to improper permission assignment...

2.3CVSS6.3AI score0.00123EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/16 12:00 a.m.6 views

EulerOS Virtualization 2.13.1 : gnupg2 (EulerOS-SA-2025-2162)

According to the versions of the gnupg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that...

4.7CVSS6AI score0.00192EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/09/14 12:00 a.m.17 views

PT-2025-37411

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.5 through 7.5 Update Pack 13 Independent Fix 01 Description IBM QRadar SIEM versions 7.5 through 7.5 Update Pack 13 Independent Fix 01 may allow a local privileged user to perform unauthorized actions on configuratio...

2.3CVSS6.2AI score0.00123EPSS
SaveExploits0References8
Vivaldi Security Advisories
Vivaldi Security Advisories
added 2025/09/12 11:02 a.m.25 views

Minor update (10) for Vivaldi Desktop Browser 7.5

Download Vivaldi The following improvements were made since the ninth 7.5 minor update: Chromium Update to 138.0.7204.261 CVE-2025-10200 Main photo byAmerican Heritage Chocolate...

8.8CVSS5.8AI score0.00574EPSS
SaveExploits0References1
Vivaldi Security Advisories
Vivaldi Security Advisories
added 2025/09/12 10:18 a.m.21 views

Minor update(7) for Vivaldi Android Browser 7.5

Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the sixth 7.5 stable, minor update: Upgraded to...

8.8CVSS5.8AI score0.00574EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/11 9:30 p.m.12 views

CVE-2025-49459

Missing authorization in the installer for Zoom Workplace for Windows on ARM before version 6.5.0 may allow an authenticated user to conduct an escalation of privilege via local access...

7.8CVSS7AI score0.00147EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/11 5:29 p.m.9 views

CVE-2025-54249

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate server-side requests and bypass security controls...

6.5CVSS6.5AI score0.01941EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/10 7:15 a.m.17 views

CVE-2025-9943

An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service. An unauthenticated attacker can exploit this issue via blind SQL injection, allowing f...

8.3AI score
SaveExploits0References3
OSV
OSV
added 2025/09/10 7:15 a.m.6 views

DEBIAN-CVE-2025-9943

An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service. An unauthenticated attacker can exploit this issue via blind SQL injection, allowing f...

9.1CVSS6AI score0.00398EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/10 12:00 a.m.11 views

IBM Security Verify Information Queue 安全漏洞

IBM Security Verify Information Queue is a microservices architecture integration platform that leverages Kafka technology and a publish/subscribe model to integrate data between IBMSecurity products, acting as a cross-product data exchange hub. A denial of service vulnerability exists in IBM...

6.5CVSS5.8AI score0.00364EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/10 12:00 a.m.11 views

PT-2025-37087

Name of the Vulnerable Software and Affected Versions: Papermerge DMS versions through 3.5.3 Description: A security flaw exists in Papermerge DMS related to the Authorization Token Handler component. Manipulation of this component can lead to improper authorization. This issue can be exploited...

5.5CVSS5.1AI score0.00285EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2011-2813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and...

7.6CVSS6AI score0.02288EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2021-39210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free Asset and IT management software package. In versions prior to 9.5.6, the cookie used to store the autologin cookie when a user uses the remember...

6.5CVSS7AI score0.01014EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-23610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a Free Asset and IT Management Software package. Versions prior to 9.5.12 and 10.0.6 are vulnerable to Improper Privilege Management. Any user having...

6.5CVSS6.7AI score0.0073EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/09 5:15 p.m.12 views

CVE-2025-54248

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Scope is...

7.7CVSS5.8AI score0.0544EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/09 4:36 p.m.47 views

CVE-2025-54251

Affected product : Adobe Experience Manager (AEM) ≤ 6.5.23.0. Vulnerability type : XML Injection that can bypass security features. Root cause / vector : Unspecified in the CVE entry, but the Nuclei template and related notes describe an XML injection that allows manipulation of XML queries and c...

4.3CVSS6.6AI score0.01724EPSS
SaveIn wildExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/09 12:00 a.m.12 views

PT-2025-36982

Name of the Vulnerable Software and Affected Versions: Zoom Workplace for Windows on ARM versions prior to 6.5.0 Description: Missing authorization in the installer may allow an authenticated user to conduct an escalation of privilege via local access. Recommendations: Update Zoom Workplace for...

7.8CVSS6.5AI score0.00147EPSS
SaveExploits0References4
Rows per page
Query Builder