Lucene search
+L

6942 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2020-14983

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled numplayers value, leading to a buffer overflow. A malicious user c...

9.8CVSS7.3AI score0.02245EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2021-26955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because xcb::xproto::GetAtomNameReply::name calls...

9.8CVSS8.2AI score0.01728EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2017-17524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - library/wwwbrowser.pl in SWI-Prolog 7.2.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allo...

8.8CVSS7.2AI score0.0122EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/08/26 2:26 p.m.17 views

CVE-2025-6366 Event List <= 2.0.4 - Authenticated (Subscriber+) Privilege Escalation

The Event List plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.0.4. This is due to the plugin not properly validating a user's capabilities prior to updating their profile in the elupdateprofile function. This makes it possible for authenticated...

8.8CVSS0.00304EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/25 12:00 a.m.7 views

PHPGurukul Hospital Management System 安全漏洞

Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the docname parameter of add-doctor.php. No details of the...

9.8CVSS8AI score0.00433EPSS
SaveExploits0References3
Talos
Talos
added 2025/08/25 12:00 a.m.14 views

The Biosig Project libbiosig MFER unvalidated length stack-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2234 The Biosig Project libbiosig MFER unvalidated length stack-based buffer overflow vulnerability August 25, 2025 CVE Number...

9.8CVSS6.3AI score0.00706EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
added 2025/08/25 12:00 a.m.8 views

The vulnerability of the blk_mq_alloc_request_hctx() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the blkmqallocrequesthctx function in the Linux operating system is related to unvalidated array indexing. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS6.7AI score0.00297EPSS
SaveExploits0References10Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/08/25 12:00 a.m.10 views

The vulnerability of the bpf_trampoline_get_progs() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpftrampolinegetprogs function in the Linux operating system’s kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS6.5AI score0.00296EPSS
SaveExploits0References13Affected Software6
RedhatCVE
RedhatCVE
added 2025/08/24 12:13 a.m.10 views

CVE-2025-51092

The LogIn-SignUp project by VishnuSivadasVS is vulnerable to SQL Injection due to unsafe construction of SQL queries in DataBase.php. The functions logIn and signUp build queries by directly concatenating user input and unvalidated table names without using prepared statements. While a prepareDat...

9.8CVSS8.7AI score0.00409EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/23 12:00 a.m.12 views

PT-2025-34604 · Undefined · Undefined

CVE-2025-58035 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-58035 Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/23 12:00 a.m.7 views

PT-2025-34594 · Undefined · Undefined

CVE-2025-24469 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-24469 Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/23 12:00 a.m.9 views

PT-2025-34584 · Undefined · Undefined

CVE-2025-22860 - Norton Antivirus Unvalidated Redirect to Arbitrary URL CVE ID : CVE-2025-22860 Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timelin...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/23 12:00 a.m.7 views

PT-2025-34696 · Undefined · Undefined

CVE-2025-58043 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-58043 Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/23 12:00 a.m.8 views

PT-2025-34649 · Undefined · Undefined

CVE-2025-58036 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-58036 Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.2AI score
SaveExploits0References1
NVD
NVD
added 2025/08/22 7:15 p.m.8 views

CVE-2025-51092

The LogIn-SignUp project by VishnuSivadasVS is vulnerable to SQL Injection due to unsafe construction of SQL queries in DataBase.php. The functions logIn and signUp build queries by directly concatenating user input and unvalidated table names without using prepared statements. While a prepareDat...

9.8CVSS0.00409EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/22 3:18 p.m.5 views

CVE-2025-53363 Dpanel has an arbitrary file read vulnerability

dpanel is an open source server management panel written in Go. In versions 1.2.0 through 1.7.2, dpanel allows authenticated users to read arbitrary files from the server via the /api/app/compose/get-from-uri API endpoint. The vulnerability exists in the GetFromUri function in...

6.1CVSS6.4AI score0.00465EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/22 12:00 a.m.4 views

CVE-2025-51092

The LogIn-SignUp project by VishnuSivadasVS is vulnerable to SQL Injection due to unsafe construction of SQL queries in DataBase.php. The functions logIn and signUp build queries by directly concatenating user input and unvalidated table names without using prepared statements. While a prepareDat...

8.6AI score0.00409EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/22 12:00 a.m.8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unvalidated file type that could result in a file system error...

5.5CVSS8AI score0.0017EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2025/08/22 12:00 a.m.22 views

CVE-2025-51092

The LogIn-SignUp project by VishnuSivadasVS is vulnerable to SQL Injection due to unsafe construction of SQL queries in DataBase.php. The functions logIn and signUp build queries by directly concatenating user input and unvalidated table names without using prepared statements. While a prepareDat...

0.00409EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/22 12:00 a.m.39 views

CVE-2025-51092

The CVE-2025-51092 entry concerns the LogIn-SignUp project by VishnuSivadasVS. The underlying issue is SQL Injection due to unsafe SQL query construction in DataBase.php: logIn() and signUp() concatenate user input and unvalidated table names instead of using prepared statements. Although a prepa...

9.8CVSS8.3AI score0.00409EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder