Lucene search
+L

31421 matches found

CNNVD
CNNVD
β€’added 2025/02/26 12:00 a.m.β€’16 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not forcing a single empty string when argv is null in execve...

5.5CVSS6.4AI score0.00305EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
β€’added 2025/02/25 12:00 a.m.β€’8 views

CVE-2025-26957: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Deetronix Affiliate Coupons affiliate-coupons allows PHP Local File Inclusion.This issue affects Affiliate Coupons: from n/a through = 1.7.3...

7.5CVSS8.6AI score0.0077EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
β€’added 2025/02/25 12:00 a.m.β€’9 views

CVE-2025-26979: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows PHP Local File Inclusion.This issue affects Funnel Builder by FunnelKit: from n/a through = 3.9.0...

7.5CVSS8.6AI score0.008EPSS
SaveExploits0References1
osv_cve
osv_cve
β€’added 2025/02/24 2:15 a.m.β€’23 views

CVE-2024-55898

IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege...

8.5CVSS7.8AI score0.00446EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
β€’added 2025/02/24 12:00 a.m.β€’8 views

CVE-2025-27272: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in vinagecko VG PostCarousel vg-postcarousel allows PHP Local File Inclusion.This issue affects VG PostCarousel: from n/a through = 1.1...

7.5CVSS8.6AI score0.00794EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
β€’added 2025/02/22 3:52 p.m.β€’15 views

CVE-2025-26757 WordPress FULL – Cliente plugin <= 3.1.26 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in FULL SERVICES FULL Customer full-customer allows PHP Local File Inclusion.This issue affects FULL Customer: from n/a through = 3.1.26...

7.5CVSS7.3AI score0.00581EPSS
SaveExploits0References1
NVD
NVD
β€’added 2025/02/21 10:15 p.m.β€’30 views

CVE-2025-27104

vyper is a Pythonic Smart Contract Language for the EVM. Multiple evaluation of a single expression is possible in the iterator target of a for loop. While the iterator expression cannot produce multiple writes, it can consume side effects produced in the loop body e.g. read a storage variable...

7.5CVSS0.00447EPSS
SaveExploits1References2
osv_cve
osv_cve
β€’added 2025/02/21 9:32 p.m.β€’25 views

CVE-2025-27104 double eval in For List Iter in Vyper

vyper is a Pythonic Smart Contract Language for the EVM. Multiple evaluation of a single expression is possible in the iterator target of a for loop. While the iterator expression cannot produce multiple writes, it can consume side effects produced in the loop body e.g. read a storage variable...

2.3CVSS7AI score0.00447EPSS
SaveExploits1References4
Openbugbounty
Openbugbounty
β€’added 2025/02/21 5:54 a.m.β€’22 views

britcham.org.sg Open Redirect vulnerability OBB-4027452

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
CNNVD
CNNVD
β€’added 2025/02/21 12:00 a.m.β€’21 views

Vyper security vulnerabilities

Vyper is a Pythonic smart contract language for EVM open sourced by vyperlang. A security vulnerability exists in Vyper that stems from multiple evaluations of an iterator expression, which could lead to abnormal program behavior...

7.5CVSS7.2AI score0.00447EPSS
SaveExploits1References4
Wordfence Blog
Wordfence Blog
β€’added 2025/02/20 3:22 p.m.β€’430 views

Wordfence Intelligence Weekly WordPress Vulnerability Report (February 10, 2025 to February 16 2025)

Did you know Wordfence runs aBug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability , for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we...

10CVSS7.3AI score0.03655EPSS
SaveExploits15
RedhatCVE
RedhatCVE
β€’added 2025/02/20 7:19 a.m.β€’17 views

CVE-2024-57964

Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems. This issue affects HVAC Energy Saving Program:...

7.3CVSS6.8AI score0.00176EPSS
SaveExploits0References1
NVD
NVD
β€’added 2025/02/18 7:15 a.m.β€’24 views

CVE-2024-57964

Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems. This issue affects HVAC Energy Saving Program:...

7.3CVSS0.00176EPSS
SaveExploits0References1
CVE
CVE
β€’added 2025/02/18 6:33 a.m.β€’70 views

CVE-2024-57964

The CVE-2024-57964 entry concerns the HVAC Energy Saving Program, where insecure loading of Dynamic Link Libraries is the root cause. The vulnerability can allow a local attacker to disclose information or execute arbitrary code on affected systems, with a CVSS v3.1 base score of 7.3 ( HIGH ) and...

7.3CVSS6AI score0.00176EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
β€’added 2025/02/18 6:33 a.m.β€’11 views

CVE-2024-57964 Insecure Loading of Dynamic Link Libraries in HVAC Energy Saving Program

Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems. This issue affects HVAC Energy Saving Program:...

7.3CVSS6AI score0.00176EPSS
SaveExploits0References1
Cvelist
Cvelist
β€’added 2025/02/18 6:33 a.m.β€’34 views

CVE-2024-57964 Insecure Loading of Dynamic Link Libraries in HVAC Energy Saving Program

Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems. This issue affects HVAC Energy Saving Program:...

7.3CVSS0.00176EPSS
SaveExploits0References1
CNNVD
CNNVD
β€’added 2025/02/18 12:00 a.m.β€’15 views

Hitachi HVAC Energy Saving Program security vulnerability

Hitachi HVAC Energy Saving Program is an energy saving program project of Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi HVAC Energy Saving Program that originates from an unsafe loading of a dynamic link library, which could lead to local code execution or information...

7.3CVSS6.2AI score0.00176EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
β€’added 2025/02/18 12:00 a.m.β€’8 views

CVE-2024-57964: Uncontrolled Search Path Element

Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems. This issue affects HVAC Energy Saving Program:...

7.3CVSS6AI score0.00176EPSS
SaveExploits0References1
Wordfence Blog
Wordfence Blog
β€’added 2025/02/17 5:22 p.m.β€’33 views

Creative SVG File Upload to Local File Inclusion Vulnerability Affecting 90,000 Sites Patched in Jupiter X Core WordPress Plugin

πŸ“’Did you know Wordfence runs aBug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability , for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we...

8.8CVSS9.3AI score0.01645EPSS
SaveExploits0
Huntr
Huntr
β€’added 2025/02/15 8:25 a.m.β€’28 views

A malicious manifests can lead to DoS due to unchecked array bound access via network in ollama/ollama

This report is not public...

7.5CVSS7.4AI score0.00521EPSS
SaveExploits1
Rows per page
Query Builder