Lucene search
+L

306 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2015-0939

Malware in sbrugna...

6.8CVSS5.8AI score0.02441EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2023-28987

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.0022EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•42 views

EUVD-2021-31368

Malicious code in bioql PyPI...

7.8CVSS7.5AI score0.02749EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-4910

Malicious code in bioql PyPI...

7.3CVSS6.4AI score0.00448EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2024-3174

Malicious code in bioql PyPI...

5.3CVSS6.5AI score0.00441EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2025/09/22 12:00 a.m.•18 views

The vulnerability of the FFmpeg multimedia library, related to improper control of resource identifiers (“resource injection”), allows attackers to gain unauthorized access to protected information and compromise its integrity.

The vulnerability of the FFmpeg multimedia library is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and compromise its integrity...

7.2CVSS6.7AI score0.00376EPSS
SaveExploits0References12Affected Software5
OSV
OSV
•added 2025/08/21 12:30 a.m.•22 views

GHSA-6RQ7-M52P-8PQG xxl-job Vulnerable to Resource Injection and Authorization Bypass Through User-Controlled Key

A vulnerability has been found in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is the function getJobsByGroup of the file /src/main/java/com/xxl/job/admin/controller/JobLogController.java. Such manipulation of the argument jobGroup leads to improper control of resource identifiers...

5.3CVSS5.5AI score0.00324EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
•added 2025/08/21 12:30 a.m.•40 views

xxl-job Vulnerable to Resource Injection and Authorization Bypass Through User-Controlled Key

A vulnerability has been found in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is the function getJobsByGroup of the file /src/main/java/com/xxl/job/admin/controller/JobLogController.java. Such manipulation of the argument jobGroup leads to improper control of resource identifiers...

5.3CVSS5.5AI score0.00324EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
•added 2025/08/20 11:02 p.m.•37 views

CVE-2025-9263 Xuxueli xxl-job JobLogController.java getJobsByGroup resource injection

A vulnerability has been found in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is the function getJobsByGroup of the file /src/main/java/com/xxl/job/admin/controller/JobLogController.java. Such manipulation of the argument jobGroup leads to improper control of resource identifiers...

5.3CVSS0.00324EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/08/20 11:02 p.m.•13 views

CVE-2025-9263 Xuxueli xxl-job JobLogController.java getJobsByGroup resource injection

A vulnerability has been found in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is the function getJobsByGroup of the file /src/main/java/com/xxl/job/admin/controller/JobLogController.java. Such manipulation of the argument jobGroup leads to improper control of resource identifiers...

5.3CVSS7.2AI score0.00324EPSS
SaveExploits1References5
Snyk
Snyk
•added 2025/08/10 4:42 a.m.•6 views

Resource Injection

Overview Affected versions of this package are vulnerable to Resource Injection via the projectID argument. An attacker can gain unauthorized access to information by manipulating resource identifiers remotely. Remediation There is no fixed version for...

5.3CVSS6.9AI score0.00426EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/08/10 4:02 a.m.•12 views

CVE-2025-8793 LitmusChaos Litmus resource injection

A vulnerability classified as problematic was found in LitmusChaos Litmus up to 3.19.0. Affected by this vulnerability is an unknown functionality. The manipulation of the argument projectID leads to improper control of resource identifiers. The attack can be launched remotely. The exploit has be...

5.3CVSS7.1AI score0.00426EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/08/10 4:02 a.m.•30 views

CVE-2025-8793 LitmusChaos Litmus resource injection

A vulnerability classified as problematic was found in LitmusChaos Litmus up to 3.19.0. Affected by this vulnerability is an unknown functionality. The manipulation of the argument projectID leads to improper control of resource identifiers. The attack can be launched remotely. The exploit has be...

5.3CVSS0.00426EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/07/17 7:55 p.m.•18 views

CVE-2025-49829

Conjur provides secrets management and application identity for infrastructure. Missing validations in Secrets Manager, Self-Hosted allows authenticated attackers to inject resources into the database and to bypass permission checks. This issue affects Secrets Manager, Self-Hosted formerly Conjur...

6.5CVSS7AI score0.00421EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/07/15 7:47 p.m.•25 views

CVE-2025-49829 Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) missing validations

Conjur provides secrets management and application identity for infrastructure. Missing validations in Secrets Manager, Self-Hosted allows authenticated attackers to inject resources into the database and to bypass permission checks. This issue affects Secrets Manager, Self-Hosted formerly Conjur...

6CVSS0.00421EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/07/15 7:47 p.m.•9 views

CVE-2025-49829 Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) missing validations

Conjur provides secrets management and application identity for infrastructure. Missing validations in Secrets Manager, Self-Hosted allows authenticated attackers to inject resources into the database and to bypass permission checks. This issue affects Secrets Manager, Self-Hosted formerly Conjur...

6CVSS6.3AI score0.00421EPSS
SaveExploits0References2
OSV
OSV
•added 2025/07/15 7:47 p.m.•14 views

CVE-2025-49829 Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) missing validations

Conjur provides secrets management and application identity for infrastructure. Missing validations in Secrets Manager, Self-Hosted allows authenticated attackers to inject resources into the database and to bypass permission checks. This issue affects Secrets Manager, Self-Hosted formerly Conjur...

6CVSS6.6AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2025/06/24 12:31 a.m.•30 views

CVE-2025-6534 xxyopen/201206030 novel-plus File FileController.java remove resource injection

A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3. This affects the function remove of the file novel-admin/src/main/java/com/java2nb/common/controller/FileController.java of the component File Handler. The manipulation leads to improper...

4.2CVSS0.0048EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/06/24 12:31 a.m.•11 views

CVE-2025-6534 xxyopen/201206030 novel-plus File FileController.java remove resource injection

A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3. This affects the function remove of the file novel-admin/src/main/java/com/java2nb/common/controller/FileController.java of the component File Handler. The manipulation leads to improper...

4.2CVSS7AI score0.0048EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2025/06/23 12:00 a.m.•21 views

The vulnerability of the __ioremap_checkother() function in the arch/x86/mm/ioremap.c module on the x86 kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ioremapcheckother function in the arch/x86/mm/ioremap.c module on the x86 kernel of the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...

6.2CVSS6.4AI score0.00237EPSS
SaveExploits0References10Affected Software1
Rows per page
Query Builder