Lucene search
+L

158 matches found

Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.8 views

PT-2025-42090

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A flaw exists in the Microsoft Windows Search Component due to improper input validation. This issue could allow a local attacker to cause a denial of service. Recommendations At th...

5CVSS8.4AI score0.00442EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.10 views

PT-2025-42131

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An improper access control issue exists in the Microsoft Windows Search Component. This can allow an authorized attacker to cause a denial of service locally. Recommendations At the...

5.5CVSS8.8AI score0.00314EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.12 views

PT-2025-42082

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An issue with input validation in the Microsoft Windows Search Component can allow a local attacker to cause a denial of service. Recommendations At the moment, there is no...

5.5CVSS8.6AI score0.00467EPSS
SaveExploits0References3
NVD
NVD
added 2025/10/11 3:16 p.m.7 views

CVE-2025-11606

A security flaw has been discovered in iPynch Social Network Website up to b6933b6d7f82c84819abe458ccf0e59d61119541. The affected element is an unknown function of the component Search. Performing manipulation results in sql injection. The attack is possible to be carried out remotely. The exploi...

6.5CVSS0.00229EPSS
SaveExploits0References4
CVE
CVE
added 2025/10/11 3:2 p.m.16 views

CVE-2025-11606

Summary: CVE-2025-11606 affects the iPynch Social Network Website, specifically the Search component. Concrete details from connected documents show that manipulating an unknown function within the Search component enables SQL injection, exploitable remotely, with an exploit publicly released. Th...

6.5CVSS6.4AI score0.00229EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/11 12:0 a.m.9 views

Social Network Website SQL注入漏洞

Social Network Website is a simple social networking website by Pynch Personal Developers. Social Network Website suffers from a SQL injection vulnerability that stems from incorrect manipulation of an unknown function in the component Search, which could lead to an SQL injection attack...

6.5CVSS6.9AI score0.00229EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/11 12:0 a.m.8 views

PT-2025-41692

Name of the Vulnerable Software and Affected Versions iPynch Social Network Website versions prior to b6933b6d7f82c84819abe458ccf0e59d61119541 Description A security flaw exists in the Search component of iPynch Social Network Website. Manipulation of an unknown function within this component can...

6.5CVSS6.6AI score0.00229EPSS
SaveExploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-18963

Malware in sbrugna...

4.4CVSS4.6AI score0.00328EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-6326

Malware in sbrugna...

6.1CVSS6.3AI score0.00765EPSS
SaveExploits0References2
NVD
NVD
added 2025/07/08 5:15 p.m.5 views

CVE-2025-49685

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

7CVSS0.00323EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/08 5:15 p.m.3 views

CVE-2025-49685

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

7CVSS5.7AI score0.00323EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/06/04 4:12 p.m.21 views

CVE-2025-48941

MyBB is free and open source forum software. Prior to version 1.8.39, the search component does not validate permissions correctly, which allows attackers to determine the existence of hidden draft, unapproved, or soft-deleted threads containing specified text in the title. The visibility state...

5.3CVSS7.1AI score0.00296EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/02 3:58 p.m.11 views

CVE-2025-48941 MyBB may disclosure unviewable threads' titles in searches

MyBB is free and open source forum software. Prior to version 1.8.39, the search component does not validate permissions correctly, which allows attackers to determine the existence of hidden draft, unapproved, or soft-deleted threads containing specified text in the title. The visibility state...

5.3CVSS6.5AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/06/02 12:0 a.m.10 views

PT-2025-23536 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.39 Description: The search component in MyBB does not validate permissions correctly, allowing attackers to determine the existence of hidden threads, including draft, unapproved, or soft-deleted threads, by analyzi...

5.3CVSS6.2AI score0.00296EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/06/02 12:0 a.m.7 views

MyBB 安全漏洞

MyBB MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. A security vulnerability exists in MyBB versions prior to 1.8.39, which stems from the search componen...

5.3CVSS6.4AI score0.00296EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/05/22 9:2 p.m.7 views

CVE-2021-2039

Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM component: Search. Supported versions that are affected are 20.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Core - Server Framework...

7.6CVSS6.1AI score0.00937EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:30 p.m.7 views

CVE-2021-30074

docsify 4.12.1 is affected by Cross Site Scripting XSS because the search component does not appropriately encode Code Blocks and mishandles the " character...

6.1CVSS6.2AI score0.00785EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/05/21 12:0 a.m.11 views

PT-2025-22322 · Hkcms · Hkcms

Name of the Vulnerable Software and Affected Versions: HkCms versions up to 2.3.2.240702 Description: A problematic issue was found in HkCms, affecting an unknown part of the file /index.php/search/index.html of the component Search. The manipulation of the keyword argument leads to cross-site...

5.3CVSS4.3AI score0.00585EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/04/23 3:40 p.m.6 views

Malicious code in @sporta-technology/d11-web-components.search (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
CVE
CVE
added 2025/04/03 8:0 a.m.80 views

CVE-2025-3152

CVE-2025-3152 affects Caipeichao ThinkOX 1.0, specifically the Search component at /ThinkOX-master/index.php?s=/Weibo/Index/search.html. The vulnerability arises from manipulation of the keywords argument, enabling cross-site scripting. It can be triggered remotely and the exploit has been disclo...

5.1CVSS6.4AI score0.00314EPSS
SaveExploits0References4
Rows per page
Query Builder