Lucene search
+L

13566 matches found

ATTACKERKB
ATTACKERKB
added 2025/06/02 9:15 a.m.7 views

CVE-2025-5455

An issue was found in the private API function qDecodeDataUrl in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If the function was called with malformed data, for example, an URL that contained a "charset" parameter that lacked a value such as...

8.4CVSS6.9AI score0.0038EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2025/06/02 12:00 a.m.12 views

openSUSE Security Advisory (SUSE-SU-2025:01746-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8AI score0.01188EPSS
SaveExploits0References12
Circl
Circl
added 2025/06/01 9:55 a.m.25 views

CVE-2025-5400

creationtimestamp| type| source ---|---|--- 2025-06-01 09:55:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqjykvxvrm42 2025-06-01 11:37:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqk6csdle72o...

9.8CVSS7.3AI score0.00574EPSS
SaveExploits1References2
OSV
OSV
added 2025/05/30 7:15 p.m.21 views

UBUNTU-CVE-2025-48938

go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by replacing HTTP URL...

9.8CVSS5.9AI score0.00527EPSS
SaveExploits0References5
OSV
OSV
added 2025/05/30 6:45 p.m.12 views

CVE-2025-48938 Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server

go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by replacing HTTP URL...

6.5CVSS6.5AI score
SaveExploits0References5
Circl
Circl
added 2025/05/29 12:40 p.m.35 views

CVE-2025-48046

creationtimestamp| type| source ---|---|--- 2025-05-29 12:40:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqcqfmdnnab2 2025-05-29 13:51:56+00:00| seen|...

5.3CVSS6.6AI score0.00529EPSS
SaveExploits0References8
Veracode
Veracode
added 2025/05/29 7:00 a.m.14 views

Server Side Request Forgery (SSRF)

@strapi/admin is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insufficient validation of webhook URLs, allowing requests to internal domains such as localhost and 127.0.0.1...

7.5CVSS6.8AI score0.00562EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2025/05/29 6:31 a.m.23 views

GHSA-FRQ9-3HP2-XVXG Markdownify MCP Server allows Server-Side Request Forgery (SSRF) via the Markdownify.get() function

All versions of the package mcp-markdownify-server are vulnerable to Server-Side Request Forgery SSRF via the Markdownify.get function. An attacker can craft a prompt that, once accessed by the MCP host, can invoke the webpage-to-markdown, bing-search-to-markdown, and youtube-to-markdown tools to...

8.2CVSS6.9AI score0.004EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/05/28 5:47 p.m.27 views

CVE-2025-5256 Open Redirect vulnerability on user unlock path

SummaryThis advisory addresses an Open Redirection vulnerability in Mautic's user unlocking endpoint. This vulnerability could be exploited by an attacker to redirect legitimate users to malicious websites, potentially leading to phishing attacks or the delivery of exploit kits. Open Redirection...

5.4CVSS0.00239EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/28 5:36 p.m.54 views

GHSA-2HJ5-G64G-FP6P Argo CD allows cross-site scripting on repositories page

Impact This vulnerability allows an attacker to perform arbitrary actions on behalf of the victim via the API, such as creating, modifying, and deleting Kubernetes resources. Due to the improper filtering of URL protocols in the repository page, an attacker can achieve cross-site scripting with...

9CVSS9.1AI score0.00455EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2025/05/26 12:00 a.m.8 views

Fedora: Security Advisory (FEDORA-2024-c5d55d5845)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.9AI score0.01686EPSS
SaveExploits0References8
OpenVAS
OpenVAS
added 2025/05/26 12:00 a.m.8 views

Fedora: Security Advisory (FEDORA-2025-d9219c6a43)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9AI score0.07935EPSS
SaveExploits12References10
OpenVAS
OpenVAS
added 2025/05/26 12:00 a.m.12 views

Fedora: Security Advisory (FEDORA-2025-1c1e378468)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.8AI score0.00422EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2025/05/26 12:00 a.m.5 views

Fedora: Security Advisory (FEDORA-2025-8fdb7be3cb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.1AI score0.00807EPSS
SaveExploits1References7
OpenVAS
OpenVAS
added 2025/05/26 12:00 a.m.8 views

Fedora: Security Advisory (FEDORA-2024-308628ebb8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.02527EPSS
SaveExploits5References40
OpenVAS
OpenVAS
added 2025/05/26 12:00 a.m.10 views

Fedora: Security Advisory (FEDORA-2024-40c0ff79e8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.8AI score0.93305EPSS
SaveExploits4References4
OpenVAS
OpenVAS
added 2025/05/26 12:00 a.m.10 views

Fedora: Security Advisory (FEDORA-2024-1e45ea2e6c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.00644EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2025/05/26 12:00 a.m.4 views

Fedora: Security Advisory (FEDORA-2025-9b0b1cc333)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS9.6AI score0.03153EPSS
SaveExploits2References7
OpenVAS
OpenVAS
added 2025/05/26 12:00 a.m.8 views

openSUSE Security Advisory (SUSE-SU-2025:01662-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.7CVSS4.3AI score0.00507EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2025/05/26 12:00 a.m.8 views

Fedora: Security Advisory (FEDORA-2024-e109b67926)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.4AI score0.00673EPSS
SaveExploits2References17
Rows per page
Query Builder