Lucene search
+L

946 matches found

Cvelist
Cvelist
•added 2025/11/26 12:00 a.m.•24 views

CVE-2025-65235

OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 was discovered to contain a SQL injection vulnerability via the ID parameter in the getSubUsersByProvider function...

0.00448EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/11/26 12:00 a.m.•7 views

CVE-2025-65236

OpenCode Systems USSD Gateway OC Release: 5 was discovered to contain a SQL injection vulnerability via the Session ID parameter in the /occontrolpanel/index.php endpoint...

5.8AI score0.00448EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2025/11/25 12:00 a.m.•13 views

The vulnerability of the Setting Handler component in D-Link’s router microprogramming software for models DSR-150, DSR-150N, and DSR-250 allows a hacker to gain full access to these devices.

The vulnerability of the Setting Handler component in D-Link’s router microprogramming software, including the DSR-150, DSR-150N, and DSR-250 models, is related to insufficient protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full acces...

10CVSS6.5AI score0.10893EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/11/18 12:00 a.m.•17 views

Fortinet FortiWeb 信任管理问题漏洞

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...

5.5CVSS7AI score0.00119EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/11/11 12:00 a.m.•14 views

The vulnerability of the Stolen Device Protection function in iOS and iPadOS operating systems allows a thief to disable this function.

The vulnerability of the Stolen Device Protection function in iOS and iPadOS operating systems is related to insufficient protection for service data. Exploiting this vulnerability could allow a hacker to disable the Stolen Device Protection function...

4.9CVSS5.8AI score0.0021EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•17 views

WordPress plugin Blog2Social 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plug...

5.3CVSS6.7AI score0.00213EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/05 12:00 a.m.•20 views

WordPress plugin WPeMatico RSS Feed Fetcher 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...

6.4CVSS6.7AI score0.00238EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2025/10/27 12:00 a.m.•13 views

The vulnerability of the microprogramming software of the RUGGEDCOM RST2428P routing and switching platform, due to the lack of protection for service data, allows attackers to disclose confidential information.

The vulnerability of the microprogramming software in the RUGGEDCOM RST2428P routing and switching platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose confidential information...

3.1CVSS5.7AI score0.00175EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/23 12:00 a.m.•13 views

WordPress plugin RSS Aggregator by Feedzy 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin RSS...

5CVSS5.8AI score0.00293EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/10/23 12:00 a.m.•16 views

PT-2025-43504

Name of the Vulnerable Software and Affected Versions Android Framework affected versions not specified Description A flaw in the Android Framework component allows a remote attacker to cause a persistent denial of service through resource exhaustion. The issue exists in the onHeaderDecoded...

10CVSS8.2AI score0.00474EPSS
SaveExploits0References30
BDU FSTEC
BDU FSTEC
•added 2025/10/20 12:00 a.m.•19 views

The vulnerability of the NTLM component of Windows operating systems, which allows attackers to perform spoofing attacks

The vulnerability of the NTLM component in Windows operating systems is related to insufficient protection for service data. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

3.3CVSS7.2AI score0.01035EPSS
SaveExploits1References3Affected Software6
BDU FSTEC
BDU FSTEC
•added 2025/10/16 12:00 a.m.•11 views

The vulnerability of the Windows Push Notification Service allows a perpetrator to disclose protected information on Windows operating systems.

The vulnerability of the Windows Push Notification Service in Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS8.1AI score0.00467EPSS
SaveExploits0References2Affected Software22
BDU FSTEC
BDU FSTEC
•added 2025/10/16 12:00 a.m.•16 views

The vulnerability of the Windows Push Notification Service allows a perpetrator to disclose protected information on Windows operating systems.

The vulnerability of the Windows Push Notification Service in Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS8.1AI score0.00612EPSS
SaveExploits0References2Affected Software22
Redos
Redos
•added 2025/10/08 12:00 a.m.•11 views

ROS-20251008-02

Thunderbird email client vulnerability is related to insufficient protection of service data. Exploitation exploitation of the vulnerability could allow an attacker acting remotely to download arbitrary files...

6.8AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2015-8249

Malware in sbrugna...

6.8CVSS8.7AI score0.02078EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2017-17158

Malware in sbrugna...

4.6CVSS4.8AI score0.0026EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2017-12862

Malware in sbrugna...

7.8CVSS7.3AI score0.004EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2021-13131

Malware in sbrugna...

5.5CVSS5.6AI score0.00219EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2019-4167

Malware in sbrugna...

7.1CVSS7.2AI score0.00582EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2020-5840

Malware in sbrugna...

8.8CVSS7.8AI score0.00257EPSS
SaveExploits0References4
Rows per page
Query Builder