Lucene search
+L

7207 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:13 a.m.13 views

CVE-2019-2947

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Inventory Integration privilege with network access via HTTP ...

7.1CVSS6.4AI score0.01244EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:20 a.m.27 views

CVE-2021-33667

Under certain conditions, SAP Business Objects Web Intelligence BI Launchpad versions - 420, 430, allows an attacker to access jsp source code, through SDK calls, of Analytical Reporting bundle, a part of the frontend application, which would otherwise be restricted...

4.3CVSS6.8AI score0.00656EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:15 a.m.28 views

CVE-2025-40696

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'fullname', 'location' and 'message' parameters via POST at the endpoint '/ofrs/reporting.php'. This vulnerability could...

5.4CVSS5.5AI score0.00207EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:46 a.m.27 views

CVE-2025-40691

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'todate' parameter in the endpoint '/ofrs/admin/bwdates-report-result.php'...

9.8CVSS7.9AI score0.00331EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:45 a.m.13 views

CVE-2025-40692

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'requestid' parameter in the endpoint '/ofrs/details.php'...

9.8CVSS7.9AI score0.00331EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:45 a.m.24 views

CVE-2025-40687

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'mobilenumber', 'teamleadname' and 'teammember' parameters in the endpoint '/ofrs/admin/add-team.php'...

9.8CVSS7.9AI score0.00334EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:45 a.m.21 views

CVE-2025-40690

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'teamid' parameter in the endpoint '/ofrs/admin/edit-team.php'...

9.8CVSS7.9AI score0.00331EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:33 a.m.7 views

CVE-2024-39656

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Uncanny Owl Tin Canny Reporting for LearnDash allows Reflected XSS.This issue affects Tin Canny Reporting for LearnDash: from n/a through 4.3.0.7...

7.1CVSS6.4AI score0.00302EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/06 7:10 p.m.9 views

Malicious code in py-publish-test-0126 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 993085ca23a6a729d332eade4d58778a42c1d19b18237ab4b3c3a6bacf9fd126 Dependency confusion demonstration package with reporting through a decorator function --- Category: PROBABLYPENTEST - Packages looking like typical pentest...

7.2AI score
SaveExploits0References1
Fedora
Fedora
added 2026/01/02 12:57 a.m.10 views

[SECURITY] Fedora 42 Update: direwolf-1.8.1-1.fc42

Dire Wolf is a modern software replacement for the old 1980's style TNC built with special hardware. Without any additional software, it can perform as an APRS GPS Tracker, Digipeater, Internet Gateway IGate, APRStt gateway. It can also be used as a virtual TNC for other applications such as...

8.7CVSS6.7AI score0.00455EPSS
SaveExploits0
Packet Storm News
Packet Storm News
added 2026/01/02 12:0 a.m.9 views

Scapy Packet Manipulation Tool 2.7.0

Scapy is a powerful interactive packet manipulation tool, packet generator, network scanner, network discovery tool, and packet sniffer. It provides classes to interactively create packets or sets of packets, manipulate them, send them over the wire, sniff other packets from the wire, match answe...

6.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.8 views

PT-2026-26122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where a shared memory region for statistics reporting between the driver and the Network Interface Card NIC is susceptible to corruption. The NIC...

7.8CVSS5.8AI score0.0012EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/12/31 12:29 a.m.10 views

SUSE CVE-2023-54185

In the Linux kernel, the following vulnerability has been resolved: btrfs: remove BUGON's in addnewfreespace At addnewfreespace we have these BUGON's that are there to deal with any failure to add free space to the in memory free space cache. Such failures are mostly -ENOMEM that should be very...

6.6AI score0.00172EPSS
SaveExploits0References17
UbuntuCve
UbuntuCve
added 2025/12/30 1:16 p.m.9 views

CVE-2023-54185

In the Linux kernel, the following vulnerability has been resolved: btrfs: remove BUGON's in addnewfreespace At addnewfreespace we have these BUGON's that are there to deal with any failure to add free space to the in memory free space cache. Such failures are mostly -ENOMEM that should be very...

5.7AI score0.00172EPSS
SaveExploits0References5
OSV
OSV
added 2025/12/30 12:8 p.m.8 views

CVE-2023-54185 btrfs: remove BUG_ON()'s in add_new_free_space()

In the Linux kernel, the following vulnerability has been resolved: btrfs: remove BUGON's in addnewfreespace At addnewfreespace we have these BUGON's that are there to deal with any failure to add free space to the in memory free space cache. Such failures are mostly -ENOMEM that should be very...

6.4AI score
SaveExploits0References6
GithubExploit
GithubExploit
added 2025/12/26 11:42 a.m.212 views

blacksmith

BlacksmithAI OPEN-SOURCE AI-Powered Penetration Testing F...

7.8AI score
SaveExploits0
NVD
NVD
added 2025/12/24 1:16 p.m.9 views

CVE-2023-54119

In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotifyfreeingmark races with inotifyhandleinodeevent it can happen that inotifyhandleinodeevent sees that imark-wd got already reset to -1 and reports this value to userspace...

0.00191EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2025/12/24 1:16 p.m.14 views

CVE-2023-54070

In the Linux kernel, the following vulnerability has been resolved: igb: clean up in all error paths when enabling SR-IOV After commit 50f303496d92 "igb: Enable SR-IOV after reinit", removing the igb module could hang or crash depending on the machine when the module has been loaded with the maxv...

6.3AI score0.00165EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/24 1:16 p.m.10 views

UBUNTU-CVE-2023-54119

In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotifyfreeingmark races with inotifyhandleinodeevent it can happen that inotifyhandleinodeevent sees that imark-wd got already reset to -1 and reports this value to userspace...

5.7AI score0.00191EPSS
SaveExploits0References9
OSV
OSV
added 2025/12/22 10:16 p.m.1 views

DEBIAN-CVE-2025-34458

wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 3658a87, contain a reachable assertion vulnerability in the APRS MIC-E decoder function aprsmice located in src/decodeaprs.c. When processing a specially crafted AX.25 frame containing a MIC-E message with an empty or...

8.7CVSS5.2AI score0.00412EPSS
SaveExploits0References1
Rows per page
Query Builder