Lucene search
+L

5394 matches found

CNVD
CNVD
added 2025/08/28 12:0 a.m.14 views

libbiosig input validation error vulnerability (CNVD-2025-20232)

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has an input validation error vulnerability , the vulnerability stems from the ABF parsing function fails to correctly validate the user...

9.8CVSS8AI score0.0068EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/08/27 12:0 a.m.4 views

WordPress plugin Podlove Podcast Publisher 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. An input validation error...

4.7CVSS6.5AI score0.0021EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/27 12:0 a.m.12 views

Basecamp 输入验证错误漏洞

Basecamp is a project management software from Basecamp, Inc. An input validation error vulnerability exists in Basecamp versions prior to 1.3.0 that stems from improper URL validation and could lead to redirection attacks...

4.2CVSS6.3AI score0.0024EPSS
SaveExploits0References5
CNVD
CNVD
added 2025/08/26 12:0 a.m.5 views

D-Link DIR-619L formSysCmd Function Buffer Overflow Vulnerability

D-Link DIR-619L is a home wireless router from AUO D-Link, designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the submit-ur...

9.8CVSS7.3AI score0.00511EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/08/25 12:0 a.m.5 views

The Scratch Channel 输入验证错误漏洞

The Scratch Channel is a project site of The Scratch Channel open source. An input validation error vulnerability exists in version 1 of The Scratch Channel, which stems from the fact that local storage can be edited, potentially leading to account information tampering...

6.7CVSS6.1AI score0.0017EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/08/25 12:0 a.m.6 views

libbiosig 输入验证错误漏洞

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has an input validation error vulnerability , the vulnerability stems from the ABF parsing function fails to correctly validate the user...

9.8CVSS7.9AI score0.0068EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/08/25 12:0 a.m.9 views

The Scratch Channel 输入验证错误漏洞

The Scratch Channel is a project site of The Scratch Channel open source. An input validation error vulnerability exists in The Scratch Channel versions 1 and 1.1, which stems from insufficient validation of article publishing endpoint permissions, and could lead to unauthorized publishing of...

8.7CVSS6.5AI score0.00322EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/25 12:0 a.m.12 views

libbiosig 输入验证错误漏洞

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig there is an input validation error vulnerability , the vulnerability stems from the GDF parsing function fails to correctly validate the...

9.8CVSS7.8AI score0.0068EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2025/08/20 3:31 p.m.15 views

elysia-cors Origin Validation Error

An Origin Validation Error in the elysia-cors library thru 1.3.0 allows attackers to bypass Cross-Origin Resource Sharing CORS restrictions. The library incorrectly validates the supplied origin by checking if it is a substring of any domain in the site's CORS policy, rather than performing an...

6.5CVSS7.1AI score0.00474EPSS
SaveExploits0References7Affected Software1
CNNVD
CNNVD
added 2025/08/20 12:0 a.m.5 views

IBM QRadar SOAR Plugin App 输入验证错误漏洞

IBM QRadar SOAR Plugin App is an application for messaging from International Business Machines IBM. An input validation error vulnerability exists in IBM QRadar SOAR Plugin App version 5.6.0 and earlier, which stems from a directory traversal issue that could lead to viewing arbitrary files...

7.5CVSS6.6AI score0.00488EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/20 12:0 a.m.7 views

TOTVS Portal Meu RH 输入验证错误漏洞

TOTVS Portal Meu RH is an enterprise management application from TOTVS Brazil. An input validation error vulnerability exists in TOTVS Portal Meu RH version 12.1.17 and earlier, which stems from mishandling of password reset and could lead to open redirection...

5.1CVSS6.8AI score0.00246EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/08/20 12:0 a.m.18 views

CVE-2025-50864

An Origin Validation Error in the elysia-cors library thru 1.3.0 allows attackers to bypass Cross-Origin Resource Sharing CORS restrictions. The library incorrectly validates the supplied origin by checking if it is a substring of any domain in the site's CORS policy, rather than performing an...

0.00474EPSS
SaveExploits0References4
CNVD
CNVD
added 2025/08/20 12:0 a.m.7 views

ImageMagick Input Validation Error Vulnerability (CNVD-2025-19250)

ImageMagick is ImageMagick open source suite of open source image processing software that can read, convert or write images in a variety of formats. ImageMagick suffers from an input validation error vulnerability that stems from an insecure magnification size calculation in ReadOneMNGIMage, whi...

8.8CVSS6.8AI score0.00967EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/08/20 12:0 a.m.9 views

Adobe Commerce Input Validation Error Vulnerability (CNVD-2025-24434)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. An input validation error vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6.7AI score0.0058EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/20 12:0 a.m.10 views

Movable Type 输入验证错误漏洞

Movable Type is a content management system from Movable Type, Inc. A security vulnerability exists in Movable Type that stems from the possibility that invalid parameters may be inserted into the password reset page, resulting in a redirection to an arbitrary URL...

5.1CVSS5AI score0.00199EPSS
SaveExploits0References3
OSV
OSV
added 2025/08/20 12:0 a.m.9 views

CVE-2025-50864

An Origin Validation Error in the elysia-cors library thru 1.3.0 allows attackers to bypass Cross-Origin Resource Sharing CORS restrictions. The library incorrectly validates the supplied origin by checking if it is a substring of any domain in the site's CORS policy, rather than performing an...

6.5CVSS5.9AI score
SaveExploits0References6
CNNVD
CNNVD
added 2025/08/15 12:0 a.m.7 views

Astro 输入验证错误漏洞

Astro is an Astro open source web framework for content-driven websites. An input validation error vulnerability exists in Astro versions prior to 9.4.1, which stems from a flaw in the redirection feature that could lead to an open redirection attack...

6.9CVSS6.6AI score0.00572EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/08/13 12:0 a.m.3 views

ImageMagick 输入验证错误漏洞

ImageMagick is ImageMagick open source suite of open source image processing software that can read, convert or write images in a variety of formats. ImageMagick suffers from an input validation error vulnerability that stems from an insecure magnification size calculation in ReadOneMNGIMage, whi...

8.8CVSS6.8AI score0.00967EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.7 views

Adobe Commerce 输入验证错误漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. An input validation error vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6.6AI score0.0058EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.7 views

svg-sanitizer 输入验证错误漏洞

svg-sanitizer is a SVG format file cleaning tool by the individual developer Daryll Doyle. An input validation error vulnerability exists in versions of svg-sanitizer prior to 0.22.0, which stems from the cleanXlinkHrefs method searching only for lowercase attribute names, which could lead to...

5.1CVSS5.8AI score0.0045EPSS
SaveExploits0References2
Rows per page
Query Builder