CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7890 matches found

RedhatCVE•added 2025/10/23 8:16 p.m.•22 views

CVE-2025-62247

Missing Authorization in Collection Provider component in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.19...

6.5CVSS6.7AI score0.0025EPSS

SaveExploits0References1

OSV•added 2025/10/23 4:25 p.m.•10 views

GO-2025-3981 Gardener provider extensions vulnerable to code injection when Terraform is used for infrastructure provisioning in github.com/gardener/gardener-extension-provider-aws

Gardener provider extensions vulnerable to code injection when Terraform is used for infrastructure provisioning in github.com/gardener/gardener-extension-provider-aws...

9.9CVSS7.6AI score0.00517EPSS

SaveExploits0References10

Positive Technologies•added 2025/10/23 12:00 a.m.•4 views

PT-2025-43469

Name of the Vulnerable Software and Affected Versions MediaProvider.java affected versions not specified Description A flaw exists in multiple functions of MediaProvider.java that may allow a bypass of external storage write permissions due to a confused deputy condition. Successful exploitation...

8.4CVSS6.1AI score0.00101EPSS

SaveExploits0References7

Positive Technologies•added 2025/10/23 12:00 a.m.•23 views

PT-2025-43456

In grantAllowlistedPackagePermissions of SettingsSliceProvider.java, there is a possible way for a third party app to modify secure settings due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed fo...

6.8AI score0.00085EPSS

SaveExploits0References4

Kaspersky•added 2025/10/23 12:00 a.m.•15 views

KLA89723 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Compute Resource Provider can be exploited...

10CVSS7.3AI score0.00716EPSS

SaveExploits0References5

Positive Technologies•added 2025/10/23 12:00 a.m.•6 views

PT-2025-43468

Name of the Vulnerable Software and Affected Versions MediaProvider.java affected versions not specified Description A flaw exists in multiple functions within MediaProvider.java that may allow bypassing the WRITE EXTERNAL STORAGE permission due to a missing permission check. Successful...

7.8CVSS6.1AI score0.00099EPSS

SaveExploits0References7

SUSE CVE•added 2025/10/22 11:59 p.m.•7 views

SUSE CVE-2023-53704

In the Linux kernel, the following vulnerability has been resolved: clk: imx: clk-imx8mp: improve error handling in imx8mpclocksprobe Replace ofiomap and kzalloc with devmofiomap and devmkzalloc which can automatically release the related memory when the device or driver is removed or unloaded to...

3.3CVSS6.7AI score0.00205EPSS

SaveExploits0References19

Github Security Blog•added 2025/10/22 9:31 p.m.•13 views

Liferay Portal and DXP are Missing Authorization in Collection Provider

6.5CVSS6.8AI score0.0025EPSS

SaveExploits0References5Affected Software1

EUVD•added 2025/10/22 9:31 p.m.•11 views

EUVD-2025-35627

Liferay Portal and DXP are Missing Authorization in Collection Provider...

2CVSS6.4AI score0.0025EPSS

SaveExploits0References4

OSV•added 2025/10/22 9:31 p.m.•19 views

GHSA-CQWV-9XH5-25FG Liferay Portal and DXP are Missing Authorization in Collection Provider

2CVSS6.8AI score0.0025EPSS

SaveExploits0References5

OSV•added 2025/10/22 8:15 p.m.•14 views

CVE-2025-62247

6.5CVSS5.8AI score

SaveExploits0References1

NVD•added 2025/10/22 8:15 p.m.•12 views

CVE-2025-62247

6.5CVSS0.0025EPSS

SaveExploits0References1

Cvelist•added 2025/10/22 7:27 p.m.•15 views

CVE-2025-62247

2CVSS0.0025EPSS

SaveExploits0References1

Vulnrichment•added 2025/10/22 7:27 p.m.•4 views

CVE-2025-62247

2CVSS6.3AI score0.0025EPSS

SaveExploits0References1

EUVD•added 2025/10/22 7:18 p.m.•14 views

EUVD-2025-35626

OpenBao is an open source identity-based secrets management system. In versions 2.2.0 to 2.4.1, OpenBao's audit log experienced a regression wherein raw HTTP bodies used by few endpoints were not correctly redacted HMAC'd. This impacts those using the ACME functionality of PKI, resulting in...

5.7CVSS6.2AI score0.00293EPSS

SaveExploits0References3

NVD•added 2025/10/22 2:15 p.m.•16 views

CVE-2023-53704

0.00205EPSS

SaveExploits0References6

OSV•added 2025/10/22 2:15 p.m.•3 views

DEBIAN-CVE-2023-53704

5.4AI score0.00205EPSS

SaveExploits0References1

OSV•added 2025/10/22 2:15 p.m.•7 views

UBUNTU-CVE-2023-53704

5.9AI score0.00205EPSS

SaveExploits0References9

CVE•added 2025/10/22 1:23 p.m.•25 views

CVE-2023-53704

CVE-2023-53704 affects the Linux kernel in clk-imx clock driver paths (e.g., clk-imx8mp/clk-imx8mq). The issue involves memory management during probe/setup, where memory was previously released manually and iounmap’d regions could leak. The published fix replaces of_iomap() and kzalloc() with de...

6.3AI score0.00205EPSS

SaveExploits0References6

Cvelist•added 2025/10/22 1:23 p.m.•22 views

CVE-2023-53704 clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()

0.00205EPSS

SaveExploits0References6

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by