Lucene search
+L

1243 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 3:54 a.m.11 views

CVE-2023-46148

Missing Authorization vulnerability in Themify Themify Ultra.This issue affects Themify Ultra: from n/a through 7.3.5...

8.8CVSS6.9AI score0.00444EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 3:10 a.m.11 views

CVE-2023-21439

Improper input validation vulnerability in UwbDataTxStatusEvent prior to SMR Feb-2023 Release 1 allows attackers to launch certain activities...

8.5CVSS6.7AI score0.00185EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:43 a.m.27 views

CVE-2023-46149

Unrestricted Upload of File with Dangerous Type vulnerability in Themify Themify Ultra.This issue affects Themify Ultra: from n/a through 7.3.5...

9.9CVSS8.5AI score0.00584EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:48 p.m.14 views

CVE-2022-46816

Cross-Site Request Forgery CSRF vulnerability in Booking Ultra Pro Appointments Booking Calendar Plugin plugin = 1.1.4 versions...

8.8CVSS7AI score0.00256EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:20 a.m.14 views

CVE-2019-15400

The Asus ZenFone 3 Ultra Android device with a build fingerprint of asus/WWPhone/ASUSA001:7.0/NRD90M/14.1010.1804.75-20180612:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

7.8CVSS7AI score0.00449EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:20 a.m.9 views

CVE-2019-15413

The Asus ZenFone 3 Ultra Android device with a build fingerprint of asus/WWPhone/ASUSA001:7.0/NRD90M/14.1010.1804.75-20180612:user/release-keys contains a pre-installed app with a package name of com.asus.splendidcommandagent app versionCode=1510200105, versionName=1.2.0.21180605 that allows othe...

7.8CVSS7AI score0.00449EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
added 2025/05/22 8:53 a.m.10 views

Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20250512 release bsc1243123 CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel Processors may allow an authenticated user...

6.8CVSS7.6AI score0.00413EPSS
SaveExploits0References18
OSV
OSV
added 2025/05/22 8:51 a.m.4 views

SUSE-SU-2025:01650-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20250512 release bsc1243123 - CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel Processors may allow an authenticated us...

6.8CVSS6.9AI score0.00413EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2025/05/22 6:24 a.m.14 views

CVE-2015-9392

The users-ultra plugin before 1.5.63 for WordPress has XSS via the pname parameter...

5.4CVSS6AI score0.01173EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:30 a.m.12 views

CVE-2015-9393

The users-ultra plugin before 1.5.63 for WordPress has XSS via the pdesc parameter...

5.4CVSS6.1AI score0.00709EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:06 a.m.16 views

CVE-2015-9395

The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action...

8.8CVSS8.4AI score0.01735EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:53 a.m.13 views

CVE-2015-9402

The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload...

8.8CVSS7.2AI score0.01965EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:53 a.m.12 views

CVE-2015-9394

The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=packageaddnew to wp-admin/admin-ajax.php...

8.8CVSS7.1AI score0.00671EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:44 p.m.13 views

CVE-2009-3540

Cross-site scripting XSS vulnerability in listads.php in YourFreeWorld Ultra Classifieds Pro allows remote attackers to inject arbitrary web script or HTML via the cn parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS5.8AI score0.00845EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:44 p.m.20 views

CVE-2009-3539

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow remote attackers to inject arbitrary web script or HTML via the 1 cname parameter to subclass.php and the 2 sn parameter to listads.php...

4.3CVSS6AI score0.01525EPSS
SaveExploits3References1
BDU FSTEC
BDU FSTEC
added 2025/05/19 12:00 a.m.13 views

The vulnerability of the Branch Prediction Unit (BPU) in Intel Core Ultra microprogramming systems allows a hacker to disclose protected information.

The vulnerability of the Branch Prediction Unit BPU in Intel Core Ultra microprogrammed software processors is related to incorrect initialization of resources. Exploiting this vulnerability can allow attackers to disclose protected information...

5.6CVSS6.7AI score0.00184EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/19 12:00 a.m.12 views

The vulnerability of Intel Core Ultra microprogramming software, related to performing actions in the wrong order, allows a perpetrator to disclose protected information.

The vulnerability of Intel Core Ultra microprogramming software relates to the execution of actions in the wrong order. Exploiting this vulnerability can allow an attacker to disclose protected information...

4.9CVSS6.6AI score0.00259EPSS
SaveExploits0References8Affected Software3
SUSE Linux
SUSE Linux
added 2025/05/16 1:38 p.m.12 views

Security update for microcode_ctl

This update for microcodectl fixes the following issues: Intel CPU Microcode was updated to the 20250512 release bsc1243123 CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel Processors may allow an authenticated use...

6.8CVSS7.2AI score0.00413EPSS
SaveExploits0References18
Packet Storm News
Packet Storm News
added 2025/05/16 12:00 a.m.15 views

Anti-Sensing: Defense against Unauthorized Radar-Based Human Vital Sign Sensing with Physically Realizable Wearable Oscillators

Recent advancements in Ultra-Wideband UWB radar technology have enabled contactless, non-line-of-sight vital sign monitoring, making it a valuable tool for healthcare. However, UWB radar's ability to capture sensitive physiological data, even through walls, raises significant privacy concerns,...

6.8AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/05/13 11:41 p.m.8 views

SUSE CVE-2025-24495

Incorrect initialization of resource in the branch prediction unit for some IntelR Coretm Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access...

5.6CVSS5.6AI score0.00184EPSS
SaveExploits0References12
Rows per page
Query Builder