Lucene search
+L

1609 matches found

OSV
OSV
•added 2025/10/17 12:00 a.m.•10 views

CVE-2024-31573

XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet used for an XSLT transformation, because XSLT extension functions are enabled...

4CVSS7.7AI score
SaveExploits0References5
Packet Storm News
Packet Storm News
•added 2025/10/13 12:00 a.m.•14 views

(Dis)Proving Spectre Security with Speculation-Passing Style

Constant-time CT verification tools are commonly used for detecting potential side-channel vulnerabilities in cryptographic libraries. Recently, a new class of tools, called speculative constant-time SCT tools, has also been used for detecting potential Spectre vulnerabilities. In many cases, the...

7.5AI score
SaveExploits0
OSV
OSV
•added 2025/10/09 2:25 p.m.•9 views

SUSE-SU-2025:20855-1 Security update for git

This update for git fixes the following issues: Update to 2.51.0: - CVE-2025-27613: arbitrary writable file creation and truncation in Gitk bsc1245938 - CVE-2025-27614: arbitrary script execution via repo clonation in gitk bsc1245939 - CVE-2025-46835: untrusted repository cloning can lead to...

8.6CVSS7.2AI score0.042EPSS
SaveExploits9References13
BDU FSTEC
BDU FSTEC
•added 2025/10/09 12:00 a.m.•11 views

The vulnerability of the software solution for integrating corporate-level data, Transformation Extender Advanced, relates to the disclosure of information through registration files, allowing a perpetrator to disclose confidential information.

The vulnerability of the software solution for integrating corporate-level data with the Transformation Extender Advanced solution is related to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to disclose confidential information...

1.9CVSS5.7AI score0.00116EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/09 12:00 a.m.•10 views

The vulnerability of the software solution for integrating corporate-level data, Transformation Extender Advanced, is related to an incorrect session expiration time. This allows a malicious actor to intercept the session and gain access to the user account.

The vulnerability of the software solution for integrating corporate-level data with the Transformation Extender Advanced solution is related to an incorrect session expiration time. Exploiting this vulnerability could allow a malicious actor to intercept the session and gain access to the user...

6.5CVSS5.8AI score0.00219EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/10/09 12:00 a.m.•8 views

Fedora 44 : rubygem-actioncable / rubygem-actionmailbox / rubygem-actionmailer / etc (2025-6e5c27d218)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-6e5c27d218 advisory. Update to Ruby on Rails 8.0.3 Fix CVE-2025-24293: Active Storage allowed transformation methods potentially unsafe Fix CVE-2025-55193: ANSI escape...

9.2CVSS8.5AI score0.05468EPSS
SaveExploits3References3
BDU FSTEC
BDU FSTEC
•added 2025/10/09 12:00 a.m.•13 views

The vulnerability of the software solution for integrating corporate-level data, Transformation Extender Advanced, is related to weak password requirements, allowing attackers to gain access to user accounts.

The vulnerability of the software solution for integrating corporate-level data with the Transformation Extender Advanced solution is related to weak password requirements. Exploiting this vulnerability could allow an attacker to gain access to user accounts remotely...

5.9CVSS5.7AI score0.00273EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/09 12:00 a.m.•13 views

The vulnerability of the software solution for integrating corporate-level data, Transformation Extender Advanced, is related to deficiencies in access control. This allows attackers to compromise the integrity of the protected information.

The vulnerability of the software solution for integrating corporate-level data with the Transformation Extender Advanced solution is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

5.1CVSS5.8AI score0.00109EPSS
SaveExploits0References2Affected Software1
SUSE CVE
SUSE CVE
•added 2025/10/08 11:29 p.m.•10 views

SUSE CVE-2023-53684

In the Linux kernel, the following vulnerability has been resolved: xfrm: Zero padding when dumping algos and encap When copying data to user-space we should ensure that only valid data is copied over. Padding in structures may be filled with random possibly sensitve data and should never be give...

5.5CVSS6.5AI score0.00145EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2000-0650

Malware in sbrugna...

4.6CVSS6.4AI score0.01378EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2016-6214

Malware in sbrugna...

8.8CVSS9.3AI score0.02253EPSS
SaveExploits0References18
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2020-17906

Malware in sbrugna...

9.8CVSS9.4AI score0.02424EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2000-0483

Malware in sbrugna...

2.1CVSS6.4AI score0.02389EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2020-3846

Malware in sbrugna...

8.1CVSS7.7AI score0.00932EPSS
SaveExploits2References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2017-1643

Malware in sbrugna...

9.8CVSS9.5AI score0.02024EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2008-5647

Malware in sbrugna...

5CVSS6.2AI score0.01472EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2010-5149

Malware in sbrugna...

5CVSS6.4AI score0.01431EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•39 views

EUVD-2007-3700

Malware in sbrugna...

9.3CVSS8.9AI score0.03554EPSS
SaveExploits0References15
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2021-24830

Malware in sbrugna...

6.1CVSS6.2AI score0.01156EPSS
SaveExploits3References5
Packet Storm News
Packet Storm News
•added 2025/10/07 12:00 a.m.•15 views

Enhancing Automotive Security with a Hybrid Approach Towards Universal Intrusion Detection System

Security measures are essential in the automotive industry to detect intrusions in-vehicle networks. However, developing a one-size-fits-all Intrusion Detection System IDS is challenging because each vehicle has unique data profiles. This is due to the complex and dynamic nature of the data...

7AI score
SaveExploits0
Rows per page
Query Builder