Lucene search
K

8222 matches found

OSV
OSV
added 2025/07/16 2:21 p.m.4 views

CVE-2025-53925 Emlog has Stored Cross-site Scripting vulnerability in file upload functionality

Emlog is an open source website building system. A cross-site scripting XSS vulnerability in emlog up to and including pro-2.5.17 allows authenticated remote attackers to inject arbitrary web script or HTML via the file upload functionality. As an authenticated user it is possible to upload an .s...

5.4CVSS5.8AI score0.0025EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/07/16 12:0 a.m.2 views

emlog 安全漏洞

emlog is emlog open source a PHP and MySQL based CMS website building system. A security vulnerability exists in emlog pro-2.5.17 and earlier versions, which stems from insufficient cleanup of the file upload feature and could lead to an authenticated user uploading a malicious svg file to execut...

5.4CVSS6.7AI score0.0025EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2025/07/15 7:20 a.m.3 views

glibc: Vector register overwrite bug in glibc

A flaw was found in the optimized strcmp glibc function for the Power10 CPU architecture. GNU C library versions from 2.39 onward overwrite two vector registers in a way that can disrupt the control flow of a program...

5.6CVSS7.3AI score0.00248EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/07/15 7:20 a.m.8 views

Moderate: Red Hat Security Advisory: glibc security update

An update for glibc is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

5.6CVSS6.7AI score0.00248EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2025/07/15 12:0 a.m.5 views

openSUSE Security Advisory (SUSE-SU-2025:02275-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS6.8AI score0.01437EPSS
Exploits1References7
OSV
OSV
added 2025/07/15 12:0 a.m.3 views

ALSA-2025:11066 Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

5.6CVSS5.4AI score0.00248EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2025/07/14 12:0 a.m.3 views

Fedora: Security Advisory (FEDORA-2025-16a24364ce)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS6.6AI score0.01185EPSS
Exploits0References4
CNVD
CNVD
added 2025/07/11 12:0 a.m.2 views

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15511)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a stack overflow risk when parsing vector images, and can be...

4CVSS7.5AI score0.00086EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2025/07/10 12:0 a.m.2 views

SUSE: Security Advisory (SUSE-SU-2025:02244-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS5.2AI score0.00641EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/07/09 2:29 a.m.12 views

CVE-2025-53176

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

3.3CVSS7.5AI score0.00085EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/09 2:29 a.m.4 views

CVE-2025-53174

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

4CVSS7.5AI score0.00086EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/09 2:29 a.m.13 views

CVE-2025-53172

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

4CVSS7.5AI score0.00086EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/09 2:29 a.m.5 views

CVE-2025-53175

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

4CVSS7.5AI score0.00086EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/09 2:29 a.m.4 views

CVE-2025-53173

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

5.3CVSS7.5AI score0.00189EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/09 2:29 a.m.5 views

CVE-2025-53171

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

4CVSS7.5AI score0.00086EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/09 2:29 a.m.4 views

CVE-2024-58117

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

4CVSS7.5AI score0.00086EPSS
Exploits0References1
Packet Storm News
Packet Storm News
added 2025/07/09 12:0 a.m.2 views

Semi-Fragile Watermarking of Remote Sensing Images Using DWT, Vector Quantization and Automatic Tiling

A semi-fragile watermarking scheme for multiple band images is presented in this article. We propose to embed a mark into remote sensing images applying a tree-structured vector quantization approach to the pixel signatures instead of processing each band separately. The signature of the...

7.1AI score
Exploits0
Positive Technologies
Positive Technologies
added 2025/07/09 12:0 a.m.3 views

PT-2025-28868

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the megaraid sas module. Specifically, an out-of-bounds access can occur on systems with DRAM interleave enabled, potentially leading to system...

7.8CVSS6.6AI score0.00146EPSS
Exploits0
OSV
OSV
added 2025/07/08 7:15 p.m.1 views

CVE-2024-49784

IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data with AES encryption and CBC mode. If an authenticated remote attacker with access to the database or a local attacker with access to server files could extract the encrypted data values...

6.5CVSS5.9AI score0.00112EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/07/08 12:48 p.m.1 views

CVE-2025-21422

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses...

7.8CVSS5.8AI score0.00088EPSS
Exploits0References2
Rows per page
Query Builder