Lucene search
+L

835 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/06 12:00 a.m.•6 views

CVE-2025-21267: Improperly Implemented Security Check for Standard

Microsoft Edge Chromium-based Spoofing Vulnerability...

4.4CVSS5.7AI score0.00572EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2025/02/05 12:00 a.m.•17 views

Slackware: Security Advisory (SSA:2025-035-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.5AI score0.01207EPSS
SaveExploits0References13
RedhatCVE
RedhatCVE
•added 2025/02/04 10:13 p.m.•16 views

CVE-2024-35198

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. TorchServe 's check on allowedurls configuration can be by-passed if the URL contains characters such as ".." but it does not prevent the model from being downloaded into the model store. Once a fi...

9.8CVSS6.8AI score0.00799EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/03 8:47 a.m.•9 views

SUSE-SU-2025:20010-1 Security update for wget

This update for wget fixes the following issues: - CVE-2024-38428: Fix mishandled semicolons in the userinfo subcomponent of a URI. bsc1226419 - Update to GNU wget 1.24.5: Fix how subdomain matches are checked for HSTS. Wget will now also parse the srcset attribute in HTML tags Support reading...

9.1CVSS7.3AI score0.00672EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/01/31 12:00 a.m.•12 views

Ubuntu: Security Advisory (USN-7240-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.4AI score0.018EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2025/01/31 12:00 a.m.•9 views

Mageia: Security Advisory (MGASA-2025-0028)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.5CVSS7.5AI score0.0107EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/01/28 7:13 p.m.•11 views

CVE-2024-40676

In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.9AI score0.00168EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/28 12:00 a.m.•5 views

CVE-2024-40676: Access of Resource Using Incompatible Type

In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.7CVSS5.8AI score0.00168EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2025/01/27 12:00 a.m.•17 views

Debian: Security Advisory (DSA-5850-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.01057EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/01/24 12:00 a.m.•11 views

Fedora: Security Advisory (FEDORA-2025-50deb0acd5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.5CVSS7.1AI score0.0107EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2025/01/23 12:00 a.m.•6 views

SUSE: Security Advisory (SUSE-SU-2025:0216-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/01/10 12:00 a.m.•22 views

openSUSE Security Advisory (SUSE-SU-2025:0049-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.00656EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2025/01/10 12:00 a.m.•16 views

Ubuntu: Security Advisory (USN-7185-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS9.4AI score0.00886EPSS
SaveExploits3References2
OpenVAS
OpenVAS
•added 2025/01/08 12:00 a.m.•18 views

Fedora: Security Advisory (FEDORA-2024-d6b0e72e3d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.1AI score0.00785EPSS
SaveExploits1References6
osv-cve
osv-cve
•added 2024/12/26 9:41 p.m.•15 views

CVE-2024-53850 The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation

The Addressing GLPI plugin enables you to create IP reports for visualize IP addresses used and free on a given network.. Starting with 3.0.0 and before 3.0.3, a poor security check allows an unauthenticated attacker to determine whether data exists by name in GLPI...

8.2CVSS6.9AI score
SaveExploits0References4
CVE
CVE
•added 2024/12/18 8:41 p.m.•110 views

CVE-2024-56140

CVE-2024-56140 affects the Astro CSRF-protection middleware. A semicolon-delimited parameter after the Content-Type (e.g., application/x-www-form-urlencoded; abc) causes the request to be treated as a simple request, bypassing preflight validation and CSRF checks when security.checkOrigin is true...

6.5CVSS5.7AI score0.00223EPSS
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
•added 2024/12/12 12:00 a.m.•34 views

Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2024-2942)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.7CVSS8.2AI score0.02527EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2024/12/09 12:00 a.m.•19 views

SUSE: Security Advisory (SUSE-SU-2024:4079-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.6AI score0.00963EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2024/12/09 12:00 a.m.•34 views

Debian: Security Advisory (DLA-3986-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.9AI score0.02238EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2024/12/06 12:00 a.m.•17 views

openSUSE Security Advisory (SUSE-SU-2024:4202-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.8CVSS6.8AI score0.01149EPSS
SaveExploits0References7
Rows per page
Query Builder