Lucene search
+L

278128 matches found

OSV
OSV
added 2025/12/09 6:07 a.m.3 views

BELL-CVE-2025-40255

Bulletin has no description...

5.7AI score0.00182EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/09 6:06 a.m.11 views

BELL-CVE-2025-40326

Bulletin has no description...

7.5CVSS5.7AI score0.00342EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/09 6:06 a.m.6 views

BELL-CVE-2025-40299

Bulletin has no description...

5.7AI score0.00181EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/09 6:06 a.m.20 views

BELL-CVE-2025-40291

Bulletin has no description...

7.8CVSS5.7AI score0.0014EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/09 6:06 a.m.6 views

BELL-CVE-2025-40290

Bulletin has no description...

7.8CVSS5.7AI score0.00139EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/09 6:06 a.m.9 views

BELL-CVE-2025-40267

Bulletin has no description...

5.7AI score0.00168EPSS
SaveExploits0References1
Circl
Circl
added 2025/12/09 3:38 a.m.10 views

CVE-2025-67504

creationtimestamp| type| source ---|---|--- 2025-12-09 03:38:40+00:00| seen| https://bsky.app/profile/potato.software/post/3m7jmmwjypo22 2025-12-09 04:34:10+00:00| seen| https://infosec.exchange/users/offseq/statuses/115687741812939306 2025-12-09 04:34:12+00:00| seen|...

9.8CVSS5.8AI score0.00505EPSS
SaveExploits1References4
OSV
OSV
added 2025/12/09 1:37 a.m.15 views

CVE-2025-66508 1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers

1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.14 and below use Gin's default configuration which trusts all IP addresses as proxies TrustedProxies = 0.0.0.0/0, allowing any client to spoof the X-Forwarded-For header. Since all IP-based access controls...

6.5CVSS6.8AI score
SaveExploits0References4
Circl
Circl
added 2025/12/09 12:41 a.m.5 views

CVE-2023-53794

creationtimestamp| type| source ---|---|--- 2025-12-09 00:41:24+00:00| seen| https://bsky.app/profile/potato.software/post/3m7jcpwzro42t 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-07 18:00:00+00:00| seen|...

9.8CVSS5.3AI score0.00503EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/12/09 12:31 a.m.11 views

EUVD-2025-201818

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of temporary files without atomic operations which may expose sensitive information to an authenticated user due to race condition attacks...

4.3CVSS5.7AI score0.00209EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/09 12:31 a.m.10 views

EUVD-2025-201834

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.6 views

PT-2025-50131

Name of the Vulnerable Software and Affected Versions DNG SDK versions 1.7.0 and earlier Description The DNG SDK is affected by an Integer Overflow or Wraparound issue. Successful exploitation could lead to arbitrary code execution with the privileges of the current user. User interaction is...

7.8CVSS7.4AI score0.00201EPSS
SaveExploits4References7
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.14 views

PT-2025-49989

Name of the Vulnerable Software and Affected Versions adata Software GmbH Mitarbeiterportal version 2.15.2.0 Description The software contains multiple incorrect access control issues. A remote, authenticated user with low privileges can perform administrative functions and modify data belonging ...

8.1CVSS6.6AI score0.00527EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.9 views

ELECOM Clone 代码问题漏洞

ELECOM Clone is a data cloning software from ELECOM Japan. A code issue vulnerability exists in ELECOM Clone that originates from an unquoted file path and could lead to the execution of arbitrary code with SYSTEM privileges...

8.4CVSS6.8AI score0.00151EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.8 views

PT-2025-50132

Name of the Vulnerable Software and Affected Versions DNG SDK versions 1.7.0 and earlier Description The DNG SDK is affected by a Heap-based Buffer Overflow that may result in memory exposure or application denial of service. An attacker could exploit this issue to disclose sensitive memory...

7.1CVSS6.4AI score0.00195EPSS
SaveExploits2References7
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.10 views

Adobe DNG SDK 缓冲区错误漏洞

Adobe DNG Software Development Kit SDK is a software development kit from the American company Audobee Adobe. The Adobe DNG Software Development Kit SDK contains an out-of-bounds read vulnerability that can be exploited by attackers to obtain sensitive information or cause a denial of service...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits5References1
EUVD
EUVD
added 2025/12/08 10:36 p.m.9 views

EUVD-2025-201838

Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap Community Edition versions below 17.0.99.1762444754 and Tuleap Enterprise Edition versions prior to 17.0-2, 16.13-7 and 16.12-10 allow attackers trick victims into changing tracker general settings. Th...

4.6CVSS6.2AI score0.00142EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/08 10:15 p.m.9 views

CVE-2025-36017

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/08 8:15 a.m.7 views

CVE-2025-66324

Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vulnerability may affect app data integrity...

5.5CVSS5.8AI score0.00086EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/08 8:15 a.m.18 views

CVE-2025-14254

Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS6AI score0.00316EPSS
SaveExploits0References2
Rows per page
Query Builder