CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

11660 matches found

SUSE CVE•added 2025/08/22 11:29 p.m.•6 views

SUSE CVE-2025-38620

In the Linux kernel, the following vulnerability has been resolved: zloop: fix KASAN use-after-free of tag set When a zoned loop device, or zloop device, is removed, KASAN enabled kernel reports "BUG KASAN use-after-free" in blkmqfreetagset. The BUG happens because zloopctlremove calls putdisk,...

7.8CVSS6.7AI score0.00157EPSS

SaveExploits0References3

NVD•added 2025/08/22 4:15 p.m.•19 views

CVE-2025-38620

7.8CVSS0.00157EPSS

SaveExploits0References2

osv_ubuntu•added 2025/08/22 4:15 p.m.•20 views

UBUNTU-CVE-2025-38620

7.8CVSS6.8AI score0.00157EPSS

SaveExploits0References5

osv_cve•added 2025/08/22 4:00 p.m.•16 views

CVE-2025-38620 zloop: fix KASAN use-after-free of tag set

6.7AI score0.00157EPSS

SaveExploits0References5

Debian CVE•added 2025/08/22 4:00 p.m.•18 views

CVE-2025-38620

7.8CVSS6.8AI score0.00157EPSS

SaveExploits0

Cvelist•added 2025/08/22 4:00 p.m.•38 views

CVE-2025-38620 zloop: fix KASAN use-after-free of tag set

0.00157EPSS

SaveExploits0References2

CVE•added 2025/08/22 4:00 p.m.•62 views

CVE-2025-38620

The CVE-2025-38620 vulnerability affects the Linux kernel’s zloop (zoned loop) device. It arises from a use-after-free in blk_mq_free_tag_set() during zloop removal: zloop_ctl_remove() frees zlo memory (via zloop_free_disk()) and then accesses zlo->tag_set, which now points to freed memory. Th...

7.8CVSS6.7AI score0.00157EPSS

SaveExploits0References2Affected Software1

RedhatCVE•added 2025/08/22 12:26 p.m.•40 views

CVE-2025-43741

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.3, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows ...

5.1CVSS5.7AI score0.00217EPSS

SaveExploits0References1

Redos•added 2025/08/21 12:00 a.m.•26 views

ROS-20250821-08

A vulnerability in the TCPDF PHP library is related to reading arbitrary files from the server's file system via the src tag. Exploitation of the vulnerability could allow an attacker to gain access to sensitive information. information Vulnerability in TCPDF PHP library is related to improper...

7.5CVSS7.2AI score0.01325EPSS

SaveExploits3

Tenable Nessus•added 2025/08/21 12:00 a.m.•17 views

TencentOS Server 4: mod_security (TSSA-2025:0553)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0553 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

6.5CVSS6.7AI score0.00382EPSS

SaveExploits0References2

Tenable Nessus•added 2025/08/21 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2024-53989

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain configurations of...

6.1CVSS5.8AI score0.00475EPSS

SaveExploits0References2

RedhatCVE•added 2025/08/20 5:33 p.m.•26 views

CVE-2025-55291

Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allows the tag to be prematurely closed, leading to a reflected Cross-Site Scripting XSS vulnerability. This vulnerability is fixed in 0.15.0...

7.1CVSS5.9AI score0.00234EPSS

SaveExploits0References1

Cvelist•added 2025/08/20 3:31 p.m.•33 views

CVE-2011-10027 AOL Desktop 9.6 RTX Stack-Based Buffer Overflow

AOL Desktop 9.6 contains a buffer overflow vulnerability in its Tool\rich.rct component when parsing .rtx files. By embedding an overly long string in a hyperlink tag, an attacker can trigger a stack-based buffer overflow due to the use of unsafe strcpy operations. This allows remote attackers to...

8.4CVSS0.00585EPSS

SaveExploits1References6

CVE•added 2025/08/20 3:31 p.m.•33 views

CVE-2011-10027

CVE-2011-10027 affects AOL Desktop 9.6. The vulnerability is a stack-based buffer overflow in the Tool\rich.rct component while parsing .rtx files, triggered by embedding an overly long string in a hyperlink tag and caused by unsafe strcpy usage. This can allow remote code execution when a user o...

8.4CVSS7.2AI score0.00585EPSS

SaveExploits1References6

Snyk•added 2025/08/20 12:31 p.m.•13 views

Cross-site Scripting (XSS)

Overview com.liferay:com.liferay.asset.taglib is a portal for Liferay. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the assetTagNames parameter. An authenticated attacker can execute arbitrary JavaScript in the context of a user's browser by crafting a maliciou...

5.4CVSS5.7AI score0.00217EPSS

SaveExploits0References2

Github Security Blog•added 2025/08/20 12:31 p.m.•30 views

Liferay Portal Vulnerable to Cross-Site Scripting via assetTagNames Parameter

5.4CVSS5.6AI score0.00217EPSS

SaveExploits0References5Affected Software1

osv_ghsa•added 2025/08/20 12:31 p.m.•27 views

GHSA-J6P8-G3RJ-GHPM Liferay Portal Vulnerable to Cross-Site Scripting via assetTagNames Parameter

5.1CVSS5.6AI score0.00217EPSS

SaveExploits0References5

osv_cve•added 2025/08/20 12:15 p.m.•23 views

CVE-2025-43741

5.4CVSS5.8AI score

SaveExploits0References1

NVD•added 2025/08/20 12:15 p.m.•27 views

CVE-2025-43741

5.4CVSS0.00217EPSS

SaveExploits0References1

Cvelist•added 2025/08/20 11:54 a.m.•33 views

CVE-2025-43741

5.1CVSS0.00217EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by