Lucene search
K

14 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/13 8:53 p.m.3 views

CVE-2026-44379

MISP is an open source threat intelligence and sharing platform. Prior to 2.5.37, MISP Collections did not enforce RFC 4122 UUID validation on the uuid field. As a result, a user able to create or modify Collection records could submit malformed UUID values, potentially causing integrity issues o...

5.3CVSS5.9AI score0.00047EPSS
Exploits0References3Affected Software1
FreeBSD
FreeBSD
added 2026/02/23 12:0 a.m.7 views

Vaultwarden -- Multiple vulnerabilities

The Vaultwarden project reports: GHSA-w9f8-m526-h7fh. This vulnerability would allow an attacker to access a cipher from a different user fully encrypted if they already know its internal UUID. GHSA-h4hq-rgvh-wh27. This vulnerability allows an attacker with manager-level access within an...

5.6AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/19 12:24 p.m.1 views

CVE-2025-14882 Insecure direct object reference

An API endpoint allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only...

7CVSS6.4AI score0.00063EPSS
Exploits0References1
OSV
OSV
added 2025/12/18 9:9 a.m.1 views

RLSA-2025:23201 Important: keylime security update

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. Security Fixes: keylime: Keylime: Registrar allows identity takeover via duplicate UUID registration CVE-2025-13609 For more details about the security issues, including the impact, a CVSS...

8.2CVSS7AI score0.00094EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/10 2:32 a.m.2 views

CVE-2025-66565

Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's cryptographic random number generator crypto/rand fails, both functions silently fall back to returning predictable UUID values, including the zero UUID...

9.8CVSS6.6AI score0.0008EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 1:47 a.m.1 views

CVE-2025-66565 Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values

Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's cryptographic random number generator crypto/rand fails, both functions silently fall back to returning predictable UUID values, including the zero UUID...

9.3CVSS6.4AI score0.0008EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/09 1:47 a.m.26 views

CVE-2025-66565 Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values

Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's cryptographic random number generator crypto/rand fails, both functions silently fall back to returning predictable UUID values, including the zero UUID...

9.3CVSS0.0008EPSS
Exploits0References2
NVD
NVD
added 2025/11/24 6:15 p.m.2 views

CVE-2025-13609

A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module TPM device but claiming an existing agent's unique identifier UUID. This action overwrites the legitimate agent's identity, enabling the...

8.2CVSS0.00094EPSS
Exploits0References9
OSV
OSV
added 2025/11/24 6:15 p.m.1 views

PYSEC-2025-77

A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module TPM device but claiming an existing agent's unique identifier UUID. This action overwrites the legitimate agent's identity, enabling the...

8.2CVSS5.7AI score0.00094EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2025/07/02 5:30 a.m.3 views

firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...

4.3CVSS5.8AI score0.00411EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/07/01 9:20 p.m.4 views

firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...

4.3CVSS5.8AI score0.00411EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/03/16 12:0 a.m.2 views

Pimcore SQL注入漏洞

Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce frameworks and product information management applications. A SQL injection vulnerability exists in Pimcor...

7.9CVSS7.5AI score0.00015EPSS
Exploits0References4
OSV
OSV
added 2022/12/22 8:15 p.m.0 views

CVE-2022-31746

Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header. This vulnerability affects Firefox for iOS 102...

6.5CVSS5.8AI score0.0022EPSS
Exploits0References2
Microsoft Security Update
Microsoft Security Update
added 1976/01/01 12:0 a.m.2 views

MS:99B3C1B3-859B-46D1-B5DF-76972EF69024

...

7AI score
Exploits0
Rows per page
Query Builder