Lucene search
+L

41657 matches found

CNNVD
CNNVD
added 2025/08/20 12:00 a.m.10 views

Liferay Portal和Liferay DXP 跨站请求伪造漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS, and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DX...

7.1CVSS6.4AI score0.00167EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/19 5:15 p.m.3 views

DEBIAN-CVE-2025-38587

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6infousesdev fib6infousesdev seems to rely on RCU without an explicit protection. Like the prior fix in rt6nlmsgsize, we need to make sure fib6delroute or fib6addrt2node have not removed the...

5.5CVSS5.4AI score0.00156EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/19 5:15 p.m.7 views

UBUNTU-CVE-2025-38587

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6infousesdev fib6infousesdev seems to rely on RCU without an explicit protection. Like the prior fix in rt6nlmsgsize, we need to make sure fib6delroute or fib6addrt2node have not removed the...

5.5CVSS5.9AI score0.00156EPSS
SaveExploits0References31
NVD
NVD
added 2025/08/19 3:15 p.m.26 views

CVE-2025-50897

A vulnerability exists in riscv-boom SonicBOOM 1.2 BOOMv1.2 processor implementation, where valid virtual-to-physical address translations configured with write permissions PTEW in SV39 mode may incorrectly trigger a Store/AMO access fault during store instructions sd. This occurs despite the...

4.3CVSS0.00268EPSS
SaveExploits1References3
OSV
OSV
added 2025/08/19 3:15 p.m.9 views

CVE-2025-50897

A vulnerability exists in riscv-boom SonicBOOM 1.2 BOOMv1.2 processor implementation, where valid virtual-to-physical address translations configured with write permissions PTEW in SV39 mode may incorrectly trigger a Store/AMO access fault during store instructions sd. This occurs despite the...

4.3CVSS5.8AI score0.00268EPSS
SaveExploits1References3
CVE
CVE
added 2025/08/19 8:07 a.m.27 views

CVE-2025-41689

CVE-2025-41689 affects Wiesemann & Theis Motherbox 3, a measurement data centralization device. The vulnerability allows an unauthenticated remote attacker to access stored measurement data with read-only rights due to an access-control weakness. Impact per CVSS v3.1 is High (Network, no privileg...

7.5CVSS6.5AI score0.00372EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/08/19 12:00 a.m.10 views

NodeShield: Runtime Enforcement of Security-Enhanced SBOMs for Node.Js

The software supply chain is an increasingly common attack vector for malicious actors. The Node.js ecosystem has been subject to a wide array of attacks, likely due to its size and prevalence. To counter such attacks, the research community and practitioners have proposed a range of static and...

7.1AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2025/08/19 12:00 a.m.22 views

VulnCheck KEV: CVE-2023-26258

Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashServiceImpl leaks the AuthUUID token. This token can be used at /WebServiceImpl/services/VirtualStandbyServiceImpl to obtain a valid session. This session can be used to execute a...

9.8CVSS5.9AI score0.37715EPSS
SaveIn wildExploits2References131
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:00 a.m.7 views

Amazon Linux 2 : edk2 (ALAS-2025-2975)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2975 advisory. EDK2 contains a vulnerability in BIOS where an attacker may cause Protection Mechanism Failure by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impa...

7CVSS7.6AI score0.0015EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
added 2025/08/19 12:00 a.m.9 views

CIA+TA Risk Assessment for AI Reasoning Vulnerabilities

As AI systems increasingly influence critical decisions, they face threats that exploit reasoning mechanisms rather than technical infrastructure. We present a framework for cognitive cybersecurity, a systematic protection of AI reasoning processes from adversarial manipulation. Our contributions...

7.2AI score
SaveExploits0
CVE
CVE
added 2025/08/19 12:00 a.m.33 views

CVE-2025-50897

The CVE-2025-50897 entry concerns riscv-boom SonicBOOM 1.2 (BOOMv1.2). It describes a flaw in the MMU/PMP/memory enforcement where valid virtual-to-physical translations with write permissions in SV39 can trigger a Store/AMO access fault during sd store operations, despite valid PTEs. The fault o...

4.3CVSS7AI score0.00268EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2025/08/18 3:58 p.m.6 views

SUSE-SU-2025:02852-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hcievent: Fix checking conn for leconncompleteevt bsc1238160. - CVE-2023-52923: netfilter: nftables: split async and sync catchall in t...

9.8CVSS8.5AI score0.00546EPSS
SaveExploits2References64
OSV
OSV
added 2025/08/18 3:57 p.m.11 views

SUSE-SU-2025:02850-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hcievent: Fix checking conn for leconncompleteevt bsc1238160. - CVE-2023-52927: netfilter: allow exp not to be removed in...

9.8CVSS8.6AI score0.00466EPSS
SaveExploits2References35
OSV
OSV
added 2025/08/18 3:57 p.m.6 views

SUSE-SU-2025:02849-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hcievent: Fix checking conn for leconncompleteevt bsc1238160. - CVE-2023-52923: netfilter: nftables: split async and sync catchall in two...

9.8CVSS8.6AI score0.00546EPSS
SaveExploits2References59
OSV
OSV
added 2025/08/18 3:55 p.m.6 views

SUSE-SU-2025:02848-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50211: md-raid10: fix KASAN warning bsc1245140. - CVE-2023-2176: Fixed an out-of-boundary read in comparenetdevandip in drivers/infiniband/core/cma.c in RDM...

9.8CVSS8.6AI score0.00466EPSS
SaveExploits2References41
RedhatCVE
RedhatCVE
added 2025/08/18 11:27 a.m.33 views

CVE-2025-38512

In the Linux kernel, the following vulnerability has been resolved: wifi: prevent A-MSDU attacks in mesh networks This patch is a mitigation to prevent the A-MSDU spoofing vulnerability for mesh networks. The initial update to the IEEE 802.11 standard, in response to the FragAttacks, missed this...

9.1CVSS7.2AI score0.03537EPSS
SaveExploits2References4
The Hacker News
The Hacker News
added 2025/08/18 10:15 a.m.13 views

Wazuh for Regulatory Compliance

Organizations handling various forms of sensitive data or personally identifiable information PII require adherence to regulatory compliance standards and frameworks. These compliance standards also apply to organizations operating in regulated sectors such as healthcare, finance, government...

6.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/08/18 7:16 a.m.16 views

CVE-2025-8896

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gdprcommunicationpreferences' parameter in all versions up to, and including, 3.14.3 due to insufficient input sanitization and...

6.4CVSS6AI score0.00199EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-49935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can...

8.8CVSS7.6AI score0.0104EPSS
SaveExploits0References2
NVD
NVD
added 2025/08/16 12:15 p.m.9 views

CVE-2025-38523

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the smbdresponse slab to allow usercopy The handling of received data in the smbdirect client code involves using copytoiter to copy data from the smbdreponse struct's packet trailer to a folioq buffer provided by...

7.5CVSS0.00345EPSS
SaveExploits0References3
Rows per page
Query Builder