Lucene search
+L

10640 matches found

CNNVD
CNNVD
•added 2025/02/18 12:00 a.m.•27 views

WordPress plugin FormCraft has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.2CVSS8.3AI score0.00351EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/02/18 12:00 a.m.•22 views

openSUSE Security Advisory (openSUSE-SU-2025:0003-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7AI score0.93547EPSS
SaveExploits4References11
BDU FSTEC
BDU FSTEC
•added 2025/02/18 12:00 a.m.•21 views

ethtool DoS

The vulnerability of the ethtool component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.7CVSS6.5AI score0.00246EPSS
SaveExploits0References42Affected Software7
OpenVAS
OpenVAS
•added 2025/02/18 12:00 a.m.•25 views

Debian: Security Advisory (DLA-4057-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.7AI score0.07723EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2025/02/18 12:00 a.m.•17 views

openSUSE Security Advisory (SUSE-SU-2025:0545-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.03995EPSS
SaveExploits3References15
OpenVAS
OpenVAS
•added 2025/02/18 12:00 a.m.•10 views

openSUSE Security Advisory (openSUSE-SU-2025:0037-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.1AI score0.00582EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/02/18 12:00 a.m.•18 views

openSUSE Security Advisory (SUSE-SU-2025:0420-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.91969EPSS
SaveExploits1References5
OpenVAS
OpenVAS
•added 2025/02/18 12:00 a.m.•13 views

openSUSE Security Advisory (openSUSE-SU-2025:0018-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.7AI score0.05956EPSS
SaveExploits11References3
OpenVAS
OpenVAS
•added 2025/02/18 12:00 a.m.•10 views

SUSE: Security Advisory (SUSE-SU-2025:0561-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.1AI score0.0087EPSS
SaveExploits0References4
NVD
NVD
•added 2025/02/17 12:15 p.m.•44 views

CVE-2025-0714

The vulnerability exists in the password storage of Mobateks MobaXterm in versions below 25.0. MobaXTerm uses an initialisation vector IV consisting only of zero bytes and a master key to encrypt each password individually. In the default configuration, on opening MobaXTerm, the user is prompted...

6.5CVSS0.00164EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/17 11:56 a.m.•190 views

CVE-2025-0714

The CVE-2025-0714 issue affects Mobatek MobaXterm versions prior to 25.0. It describes insecure password storage where an IV of zero bytes and a derivative master key are used for each stored password, causing AES-CTR (CFB) ciphertext to depend only on the plaintext and making data at rest easier...

6.5CVSS6.3AI score0.00164EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/17 11:56 a.m.•22 views

CVE-2025-0714 Insecure storage of sensitive information in MobaXTerm <25.0.

The vulnerability exists in the password storage of Mobateks MobaXterm in versions below 25.0. MobaXTerm uses an initialisation vector IV consisting only of zero bytes and a master key to encrypt each password individually. In the default configuration, on opening MobaXTerm, the user is prompted...

6.5CVSS6.3AI score0.00164EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/17 11:56 a.m.•45 views

CVE-2025-0714 Insecure storage of sensitive information in MobaXTerm <25.0.

The vulnerability exists in the password storage of Mobateks MobaXterm in versions below 25.0. MobaXTerm uses an initialisation vector IV consisting only of zero bytes and a master key to encrypt each password individually. In the default configuration, on opening MobaXTerm, the user is prompted...

6.5CVSS0.00164EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/17 12:00 a.m.•26 views

PT-2025-6799 · Mobaxterm · Mobaxterm

Name of the Vulnerable Software and Affected Versions: MobaXterm versions prior to 25.0 Description: The issue exists in the password storage of MobaXterm, where it uses an initialization vector IV consisting only of zero bytes and a master key to encrypt each password individually. In the defaul...

6.5CVSS6.7AI score0.00164EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2025/02/17 12:00 a.m.•26 views

SUSE: Security Advisory (SUSE-SU-2023:0768-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.6AI score0.02399EPSS
SaveExploits4References19
OpenVAS
OpenVAS
•added 2025/02/17 12:00 a.m.•19 views

SUSE: Security Advisory (SUSE-SU-2025:0548-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.8AI score0.0111EPSS
SaveExploits0References4
NVD
NVD
•added 2025/02/14 9:15 p.m.•20 views

CVE-2022-26083

Generation of weak initialization vector in an IntelR IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentially enable information disclosure via local access...

7.5CVSS0.00181EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/02/14 9:15 p.m.•19 views

CVE-2022-26083

Generation of weak initialization vector in an IntelR IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentially enable information disclosure via local access...

7.5CVSS6AI score0.00181EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/14 8:41 p.m.•8 views

CVE-2022-26083

Generation of weak initialization vector in an IntelR IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentially enable information disclosure via local access...

7.5CVSS6.7AI score0.00181EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/14 8:41 p.m.•77 views

CVE-2022-26083

Affected software: Intel® IPP Cryptography library (before version 2021.5). Issue (root cause): Generation of a weak initialization vector may allow an unauthenticated user to potentially cause information disclosure via local access. Impact: Information disclosure with high impact (confidentiali...

7.5CVSS7.2AI score0.00181EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder