Lucene search
+L

1707 matches found

Positive Technologies
Positive Technologies
•added 2025/09/09 12:00 a.m.•19 views

PT-2025-36803

Name of the Vulnerable Software and Affected Versions: Pixeline's Email Protector versions through 1.3.8 Description: Pixeline's Email Protector is susceptible to a cross-site scripting XSS issue due to improper input neutralization during web page generation. This allows for stored XSS attacks...

5.9CVSS5.1AI score0.00177EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/09 12:00 a.m.•4 views

CVE-2025-58982: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pixeline Pixeline's Email Protector pixelines-email-protector allows Stored XSS.This issue affects Pixeline's Email Protector: from n/a through = 1.3.8...

5.9CVSS5.8AI score0.00177EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/06 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2025-39704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix stack protector issue in sendipidata Function kvmiobusread is called in...

8.8CVSS5.6AI score0.00152EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/09/05 11:23 p.m.•20 views

SUSE CVE-2025-39704

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix stack protector issue in sendipidata Function kvmiobusread is called in function sendipidata, buffer size of parameter val should be at least 8 bytes. Since some emulation functions like loongarchipireadl and...

8.8CVSS7AI score0.00152EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2025/09/05 6:15 p.m.•16 views

DEBIAN-CVE-2025-39704

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix stack protector issue in sendipidata Function kvmiobusread is called in function sendipidata, buffer size of parameter val should be at least 8 bytes. Since some emulation functions like loongarchipireadl and...

5.5CVSS5.7AI score0.00152EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/05 6:15 p.m.•18 views

CVE-2025-39704

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix stack protector issue in sendipidata Function kvmiobusread is called in function sendipidata, buffer size of parameter val should be at least 8 bytes. Since some emulation functions like loongarchipireadl and...

8.8CVSS0.00152EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2025/09/05 6:15 p.m.•17 views

UBUNTU-CVE-2025-39704

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix stack protector issue in sendipidata Function kvmiobusread is called in function sendipidata, buffer size of parameter val should be at least 8 bytes. Since some emulation functions like loongarchipireadl and...

8.8CVSS5.9AI score0.00152EPSS
SaveExploits0References5
CVE
CVE
•added 2025/09/05 5:21 p.m.•69 views

CVE-2025-39704

The provided connected documents confirm CVE-2025-39704 affects LoongArch KVM in the Linux kernel, where send_ipi_data() calls kvm_io_bus_read() and may write an 8-byte signed extension into *val regardless of the given length. This can cause a buffer overflow when CONFIG_STACKPROTECTOR is enable...

8.8CVSS6.4AI score0.00152EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/09/05 5:21 p.m.•35 views

CVE-2025-39704 LoongArch: KVM: Fix stack protector issue in send_ipi_data()

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix stack protector issue in sendipidata Function kvmiobusread is called in function sendipidata, buffer size of parameter val should be at least 8 bytes. Since some emulation functions like loongarchipireadl and...

8.8CVSS0.00152EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/09/05 5:21 p.m.•21 views

CVE-2025-39704 LoongArch: KVM: Fix stack protector issue in send_ipi_data()

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix stack protector issue in sendipidata Function kvmiobusread is called in function sendipidata, buffer size of parameter val should be at least 8 bytes. Since some emulation functions like loongarchipireadl and...

8.8CVSS6.7AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/09/03 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2018-12886

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stackprotectprologue in cfgexpand.c and stackprotectepilogue in function.c in GNU Compiler Collection GCC 4.1 through 8 under certain circumstances generate...

8.1CVSS7AI score0.02738EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2025/08/21 12:00 a.m.•4 views

Ubuntu: Security Advisory (USN-7700-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.8CVSS7.5AI score0.01036EPSS
SaveExploits1References2
osv_usn
osv_usn
•added 2025/08/19 1:11 p.m.•21 views

USN-7700-1 gcc-10, gcc-11, gcc-12 vulnerability

It was discovered that the -fstack-protector hardening feature in GCC for AArch64 did not properly protect dynamically-sized local variables such as those created using C99 variable length arrays or alloca. As a result, an attacker who was able to trigger a buffer overflow in such cases could...

4.8CVSS7.3AI score0.01036EPSS
SaveExploits1References2
Ubuntu
Ubuntu
•added 2025/08/19 1:11 p.m.•16 views

USN-7700-1: GCC vulnerability

It was discovered that the -fstack-protector hardening feature in GCC for AArch64 did not properly protect dynamically-sized local variables such as those created using C99 variable length arrays or alloca. As a result, an attacker who was able to trigger a buffer overflow in such cases could...

4.8CVSS6.8AI score0.01036EPSS
SaveExploits1
Akamai Blog
Akamai Blog
•added 2025/07/10 6:00 a.m.•16 views

Mitigating CitrixBleed 2 (CVE‑2025‑5777) NetScaler Memory Disclosure with App & API Protector

...

9.3CVSS8.1AI score0.99972EPSS
SaveExploits20
CNNVD
CNNVD
•added 2025/07/04 12:00 a.m.•16 views

WordPress plugin Email Address Security by WebEmailProtector 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...

6.5CVSS5.6AI score0.00231EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/06/16 12:00 a.m.•6 views

TencentOS Server 4: gcc (TSSA-2025:0132)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0132 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

4.8CVSS6.5AI score0.01036EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/23 9:28 a.m.•16 views

CVE-2024-36075

The CoSoSys Endpoint Protector through 5.9.3 and Unify agent through 7.0.6 is susceptible to an arbitrary code execution vulnerability due to the way an archive obtained from the Endpoint Protector or Unify server is extracted on the endpoint. An attacker who is able to modify the archive on the...

6.5CVSS8.1AI score0.00547EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:28 a.m.•18 views

CVE-2024-36072

Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the logging component of the Endpoint Protector and Unify server application which allows an unauthenticated remote attacker to send a malicious request, resulting in...

9.8CVSS8.4AI score0.01003EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:38 a.m.•22 views

CVE-2023-44237

Cross-Site Request Forgery CSRF vulnerability in Moriyan Jay WP Site Protector plugin = 2.0 versions...

8.8CVSS7.1AI score0.00271EPSS
SaveExploits0
Rows per page
Query Builder