Lucene search
+L

13226 matches found

CNVD
CNVD
•added 2025/03/06 12:00 a.m.•52 views

Weak Password Vulnerability in Kingh5stream of Beijing Asian Control Technology Development Co.

Beijing Asian Control Technology Development Co., Ltd. is a high-tech enterprise of industrial automation and informatization software platform, focusing on independent research and development, marketing and service of domestic industrial software. A weak password vulnerability exists in Beijing...

7AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2025/03/05 5:20 p.m.•22 views

Security Bulletin: Oracle Outside In Technology (OIT) Security Vulnerabilities - July 2024

Summary Oracle Outside In Technology OIT Security Vulnerabilities CVE-2023-45853 and CVE-2023-52425 - Resolved in July 2024 Oracle OIT v8.5.7 BP3 p36705510 Vulnerability Details CVEID:CVE-2023-45853 DESCRIPTION: MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer...

9.8CVSS7.5AI score0.03448EPSS
SaveExploits1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/03/05 1:44 p.m.•33 views

CVE-2025-26918

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in enituretechnology Small Package Quotes – Unishippers Edition small-package-quotes-unishippers-edition allows Reflected XSS.This issue affects Small Package Quotes – Unishippers Edition: from n/a...

7.1CVSS7.2AI score0.00328EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2023-46841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Recent x86 CPUs offer functionality named Control-flow Enforcement Technology CET. A sub-feature of this are Shadow Stacks CET-SS. CET-SS is a hardware feature...

6.5CVSS5.8AI score0.00269EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2024-36006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix incorrect list API usage Both the function that migrates all the...

5.5CVSS5.6AI score0.00226EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2025/03/04 8:44 p.m.•11 views

Security Bulletin: Multiple security vulnerabilities in IBM SDK, Java Technology Edition affects IBM OpenPages

Summary IBM® SDK, Java™ Technology Edition is shipped as a supporting program of IBM OpenPages. Information about a security vulnerability affecting IBM SDK, Java Technology Edition has been published in multiple security bulletins. These products have addressed the applicable CVEs. For a complet...

7AI score
SaveExploits0Affected Software1
Rapid7 Blog
Rapid7 Blog
•added 2025/03/04 2:00 p.m.•17 views

Building a High Performance Team in India: Meet Swami Nathan

Swami Nathan has a track record of building new teams from scratch for global companies. Through his experiences, he’s identified what it takes to build not just any team - but a high performing team that drives innovation and growth for business while propelling career trajectories for those who...

6.8AI score
SaveExploits0
HackRead
HackRead
•added 2025/03/03 9:27 p.m.•21 views

AI-powered SEO services: revolutionizing digital marketing

Artificial Intelligence is a tool that is currently changing how businesses approach digital marketing and SEO. Explore how your business can transform with AI-powered SEO services here...

7.3AI score
SaveExploits0
Qualys Blog
Qualys Blog
•added 2025/03/03 5:00 p.m.•13 views

How Qualys Policy Compliance Helps You Adopt NIST AI RMF 1.0

Artificial Intelligence AI technologies are reshaping industries at an unprecedented pace. But while these technologies present incredible opportunities for innovation, they also pose unique risks. AI systems are no longer just futuristic concepts; they are actively influencing business decisions...

7.7AI score
SaveExploits0
NVD
NVD
•added 2025/03/03 2:15 p.m.•32 views

CVE-2025-27268

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows SQL Injection.This issue affects Small Package Quotes – Worldwide Express Edition: from n/...

9.3CVSS0.00503EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/03 2:15 p.m.•30 views

CVE-2025-26918

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in enituretechnology Small Package Quotes – Unishippers Edition small-package-quotes-unishippers-edition allows Reflected XSS.This issue affects Small Package Quotes – Unishippers Edition: from n/a...

7.1CVSS0.00328EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/03 1:30 p.m.•83 views

CVE-2025-26918

CVE-2025-26918 is a Reflected XSS in the WordPress plugin Small Package Quotes – Unishippers Edition, affecting versions up to 2.4.9. Connected sources corroborate the vulnerability and list a patch as available in newer releases; exploitation would require a crafted input reflected by a web page...

7.1CVSS7.2AI score0.00328EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/03 1:30 p.m.•10 views

CVE-2025-27268 WordPress Small Package Quotes – Worldwide Express Edition Plugin <= 5.2.18 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows SQL Injection.This issue affects Small Package Quotes – Worldwide Express Edition: from n/...

9.3CVSS5.6AI score0.00503EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/03 1:30 p.m.•90 views

CVE-2025-27268

CVE-2025-27268 affects the WordPress plugin Small Package Quotes – Worldwide Express Edition (versions up to 5.2.18). The issue is an SQL Injection caused by improper neutralization of special elements in SQL commands. The CVSS 3.1 vector reports Network attack on non-authenticated user with a Ch...

9.3CVSS5.9AI score0.00503EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/03 1:30 p.m.•44 views

CVE-2025-27268 WordPress Small Package Quotes – Worldwide Express Edition Plugin <= 5.2.18 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows SQL Injection.This issue affects Small Package Quotes – Worldwide Express Edition: from n/...

9.3CVSS0.00503EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/01 12:30 a.m.•20 views

CVE-2025-25331

An issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplying a crafted link...

5.5CVSS6AI score0.00187EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/01 12:28 a.m.•27 views

CVE-2025-25329

An issue in Tencent Technology Beijing Company Limited Tencent MicroVision iOS 8.137.0 allows attackers to access sensitive user information via supplying a crafted link...

5.5CVSS6AI score0.00187EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/01 12:28 a.m.•29 views

CVE-2025-25330

An issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via supplying a crafted link...

5.5CVSS6AI score0.00187EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/01 12:28 a.m.•27 views

CVE-2025-25325

An issue in Yibin Fengguan Network Technology Co., Ltd YuPao DirectHire iOS 8.8.0 allows attackers to access sensitive user information via supplying a crafted link...

5.5CVSS6AI score0.00187EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/01 12:26 a.m.•25 views

CVE-2025-25323

An issue in Qianjin Network Information Technology Shanghai Co., Ltd 51Job iOS 14.22.0 allows attackers to access sensitive user information via supplying a crafted link...

5.5CVSS6AI score0.00187EPSS
SaveExploits0References1
Rows per page
Query Builder