Lucene search
+L

5577 matches found

CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•15 views

WordPress plugin Astra Security Suite – Firewall & Malware Scan 授权问题漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An authorization issue vulnerability exists in the WordPress plugin Astra Security Suite -...

8.1CVSS7.8AI score0.00517EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•5 views

CVE-2025-11521: Improper Authorization

The Astra Security Suite – Firewall & Malware Scan plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient validation of remote URLs for zip downloads and an easily guessable key in all versions up to, and including, 0.2. This makes it possible for unauthenticated attacke...

8.1CVSS6.3AI score0.00517EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/11 12:00 a.m.•20 views

ALSA-2025:20983 Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: database/sql: Postgres Scan Race Condition CVE-2025-47907 podman: Podman kube play comman...

8.1CVSS6.8AI score0.01105EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/11/07 12:19 a.m.•26 views

CVE-2025-60541

A Server-Side Request Forgery SSRF in the /api/proxy/ component of linshenkx prompt-optimizer v1.3.0 to v1.4.2 allows attackers to scan internal resources via a crafted request...

7.3CVSS5.8AI score0.00249EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/11/06 12:00 a.m.•8 views

CVE-2025-60541

A Server-Side Request Forgery SSRF in the /api/proxy/ component of linshenkx prompt-optimizer v1.3.0 to v1.4.2 allows attackers to scan internal resources via a crafted request...

5.8AI score0.00249EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•3 views

CVE-2025-60541: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF in the /api/proxy/ component of linshenkx prompt-optimizer v1.3.0 to v1.4.2 allows attackers to scan internal resources via a crafted request...

7.3CVSS5.8AI score0.00249EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/05 4:14 a.m.•22 views

CVE-2025-47370

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan...

6.5CVSS7AI score0.00124EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/11/05 12:00 a.m.•6 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989168)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989168 advisory. In the Linux kernel, the following vulnerability has been resolved: nvdimm: Fix firmware activation deadlock scenarios Lockdep reports the following deadlock...

5.5CVSS6AI score0.00203EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/11/05 12:00 a.m.•9 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988862)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988862 advisory. In the Linux kernel, the following vulnerability has been resolved: ath11k: disable spectral scan during spectral deinit When ath11k modules are removed using rmmod...

5.5CVSS5.8AI score0.00261EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/11/05 12:00 a.m.•16 views

The vulnerability of the ieee80211_scan_rx() function in the net/mac80211/scan.c module of the mac80211 stack implementation in the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the ieee80211scanrx function in the net/mac80211/scan.c module of the mac80211 stack implementation in the Linux operating system is related to incorrect input of configuration data. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00231EPSS
SaveExploits0References9Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/11/05 12:00 a.m.•11 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990219)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990219 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix memcpy field-spanning write warning in mwifiexconfigscan Replace one-element...

5.5CVSS6.1AI score0.00296EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/11/05 12:00 a.m.•8 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990166)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990166 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check In 'cfg80211wextsiwscan', add extra check...

5.5CVSS6.1AI score0.00233EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/11/05 12:00 a.m.•5 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989233)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989233 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: fix memory leak in jffs2scanmedium If an error is returned in jffs2scaneraseblock and some...

5.5CVSS5.6AI score0.00268EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/11/05 12:00 a.m.•14 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989712)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989712 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check In 'cfg80211wextsiwscan', add extra check...

5.5CVSS6.1AI score0.00233EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/11/05 12:00 a.m.•13 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990108)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990108 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: Fix a memory leak in an error handling path If 'acpidevicesetname' fails, we must fre...

5.5CVSS5.8AI score0.00249EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2025/11/04 7:52 p.m.•14 views

database/sql: Postgres Scan Race Condition

A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leadin...

7CVSS6.5AI score0.00383EPSS
SaveExploits0References8
NVD
NVD
•added 2025/11/04 4:15 a.m.•52 views

CVE-2025-47370

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan...

6.5CVSS0.00124EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/04 3:19 a.m.•44 views

CVE-2025-47370

Technical details, affected product/versions, root cause, and fixes for CVE-2025-47370 are not publicly provided in the supplied documents. Monitor for updates from vendors/security bulletins.

6.5CVSS6.8AI score0.00124EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/11/04 3:19 a.m.•71 views

CVE-2025-47370 Reachable Assertion in BT Controller

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan...

6.5CVSS0.00124EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•7 views

CVE-2025-47370: Reachable Assertion

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan...

6.5CVSS6.8AI score0.00124EPSS
SaveExploits0References1
Rows per page
Query Builder