Lucene search
+L

12390 matches found

CNNVD
CNNVD
added 2025/07/28 12:00 a.m.7 views

IBM Informix Dynamic Server 安全漏洞

IBM Informix Dynamic Server IDS is a scalable object-relational database server from International Business Machines IBM that provides clustered data centers with features such as continuous data availability and disaster recovery. A security vulnerability exists in IBM Informix Dynamic Server...

7.5CVSS6.4AI score0.00339EPSS
SaveExploits0References3
Gitee
Gitee
added 2025/07/27 4:46 a.m.107 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2020-0796 PoC aka CoronaBlue aka SMBGhost Usage ./CVE-2020-0796.py servername This script connects to the target host, and compresses the authentication request with a bad offset field set in the transformation header, causing the decompressor to buffer overflow and crash the target. This...

10CVSS9.5AI score0.9981EPSS
SaveExploits126
SUSE CVE
SUSE CVE
added 2025/07/25 11:22 p.m.12 views

SUSE CVE-2025-38444

In the Linux kernel, the following vulnerability has been resolved: raid10: cleanup memleak at raid10makerequest If raid10readrequest or raid10writerequest registers a new request and the REQNOWAIT flag is set, the code does not free the malloc from the mempool. unreferenced object...

5.5CVSS6.7AI score0.0015EPSS
SaveExploits0References22
OSV
OSV
added 2025/07/25 4:15 p.m.3 views

DEBIAN-CVE-2025-38444

In the Linux kernel, the following vulnerability has been resolved: raid10: cleanup memleak at raid10makerequest If raid10readrequest or raid10writerequest registers a new request and the REQNOWAIT flag is set, the code does not free the malloc from the mempool. unreferenced object...

5.5CVSS5.7AI score0.0015EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/25 4:15 p.m.15 views

AZL-72926 CVE-2025-38444 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: raid10: cleanup memleak at raid10makerequest If raid10readrequest or raid10writerequest registers a new request and the REQNOWAIT flag is set, the code does not free the malloc from the mempool. unreferenced object...

5.5CVSS6.8AI score0.0015EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/25 4:15 p.m.10 views

UBUNTU-CVE-2025-38444

In the Linux kernel, the following vulnerability has been resolved: raid10: cleanup memleak at raid10makerequest If raid10readrequest or raid10writerequest registers a new request and the REQNOWAIT flag is set, the code does not free the malloc from the mempool. unreferenced object...

5.5CVSS6.3AI score0.0015EPSS
SaveExploits0References40
OSV
OSV
added 2025/07/23 12:15 a.m.9 views

CVE-2025-43486

A potential stored cross-site scripting vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The website allows user input to be stored and rendered without proper sanitization. HP has addressed the issue in the latest software update...

4.8CVSS5.6AI score0.00178EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/23 12:15 a.m.8 views

CVE-2025-43483

A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow the retrieval of hardcoded cryptographic keys. HP has addressed the issue in the latest software update...

5.7CVSS5.8AI score0.00153EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/22 11:15 p.m.9 views

CVE-2025-43021

A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow the use and retrieval of the default password. HP has addressed the issue in the latest software update...

5.7CVSS5.7AI score0.00153EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/22 11:15 p.m.7 views

CVE-2025-43020

A potential command injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability could allow a privileged user to submit arbitrary input. HP has addressed the issue in the latest software update...

6.8CVSS5.8AI score0.00246EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/22 10:15 p.m.9 views

UBUNTU-CVE-2025-53538

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. In versions 7.0.10 and below and 8.0.0-beta1 through 8.0.0-rc1, mishandling of data on HTTP2 stream 0 can lead to uncontrolled memory usage, leading to loss of...

7.5CVSS5.8AI score0.00432EPSS
SaveExploits0References3
Circl
Circl
added 2025/07/22 5:33 p.m.10 views

CVE-2022-41077

creationtimestamp| type| source ---|---|--- 2025-07-22 17:33:32+00:00| seen| Telegram/RpMW-dV4Ll-Kyzjuz9wIbxv8RLGRfQPDTucvkXENNlKE...

7.8CVSS7.9AI score0.00515EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/07/22 12:00 a.m.9 views

HP Poly Clariti Manager devices 操作系统命令注入漏洞

HP Poly Clariti Manager devices is a device management system from Hewlett-Packard HP in the United States. An operating system command injection vulnerability exists in HP Poly Clariti Manager devices versions prior to 10.12.2, which originates from a privileged user being able to submit arbitra...

6.8CVSS7.5AI score0.00246EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/07/22 12:00 a.m.12 views

HP Poly Clariti Manager SQL注入漏洞

HP Poly Clariti Manager is a centralized management, control and optimization of video conferencing infrastructure from Hewlett-Packard HP. A security vulnerability exists in HP Poly Clariti Manager versions prior to 10.12.1 that originates from a privileged user being able to execute SQL command...

7.3CVSS7.5AI score0.00324EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
added 2025/07/22 12:00 a.m.14 views

July 22, 2025—KB5062649 (OS Build 19045.6159) Preview

None None...

6.1AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2025/07/21 12:00 a.m.24 views

VulnCheck KEV: CVE-2023-5285

A vulnerability classified as critical was found in Tongda OA 2017. Affected by this vulnerability is an unknown functionality of the file general/hr/recruit/recruitment/delete.php. The manipulation of the argument RECRUITMENTID leads to sql injection. The attack can be launched remotely. The...

7.5CVSS5.6AI score0.00624EPSS
SaveIn wildExploits1References2
Photon
Photon
added 2025/07/21 12:00 a.m.11 views

Important Photon OS Security Update - PHSA-2025-5.0-91-0565

Updates of 'apache-tomcat9', 'apache-tomcat10' packages of Photon OS have been released...

7.5CVSS7.7AI score0.01991EPSS
SaveExploits0
OSV
OSV
added 2025/07/18 7:15 p.m.10 views

CVE-2025-54309

CrushFTP 10 before 10.8.5 and 11 before 11.3.423, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote attackers to obtain admin access via HTTPS, as exploited in the wild in July 2025...

9.8CVSS5.9AI score0.94362EPSS
SaveExploits7References6
CNNVD
CNNVD
added 2025/07/18 12:00 a.m.11 views

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost versions 10.5.7 and prior 10.5.x, 9.11.16 and prior 9.11.x. The vulnerability stems from a failure to negotiate a new token when accepting an invitation,...

3.1CVSS6.4AI score0.00175EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/07/17 4:30 p.m.12 views

WordPress JetSearch plugin <= 3.5.10 - SQL Injection vulnerability

SQL Injection vulnerability discovered by stealthcopter in WordPress Plugin JetSearch versions = 3.5.10...

9.3CVSS8.1AI score0.00396EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder