Lucene search
+L

129 matches found

AstraLinux
AstraLinux
•added 2025/10/31 4:38 p.m.•6 views

Astra Linux - уязвимость в vim

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

7.8CVSS6.8AI score0.01629EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/22 3:31 p.m.•16 views

EUVD-2025-35447

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Basix NEX-Forms LITE nex-forms-lite allows Reflected XSS.This issue affects NEX-Forms LITE: from n/a through 8.2...

5.9AI score0.00243EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/22 2:32 p.m.•27 views

CVE-2025-58966 WordPress NEX-Forms LITE plugin < 8.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Basix NEX-Forms LITE nex-forms-lite allows Reflected XSS.This issue affects NEX-Forms LITE: from n/a through 8.2...

7.1CVSS0.00243EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•16 views

WordPress plugin NEX-Forms LITE 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6AI score0.00243EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/16 9:19 a.m.•11 views

BIT-VALKEY-2025-49844 Redis Lua Use-After-Free may lead to remote code execution

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all...

9.9CVSS7.8AI score0.82294EPSS
SaveExploits14References6
OSV
OSV
•added 2025/10/11 11:09 a.m.•12 views

OESA-2025-2390 redis security update

Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets. Security Fixes: Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a...

9.9CVSS7.7AI score0.82294EPSS
SaveExploits15References5
GithubExploit
GithubExploit
•added 2025/10/07 4:56 a.m.•369 views

Exploit for CVE-2025-46817

CVE-2025-46817 – Redis Lua unpack Integer Overflow Potentia...

7CVSS6.7AI score0.03828EPSS
SaveExploits1
SUSE CVE
SUSE CVE
•added 2025/10/05 2:52 a.m.•9 views

SUSE CVE-2025-46819

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua...

8.1CVSS6.4AI score0.01061EPSS
SaveExploits0References18
Github Security Blog
Github Security Blog
•added 2025/09/04 8:01 p.m.•19 views

Presta Shop vulnerable to email enumeration

Impact An unauthenticated attacker with access to the back-office URL can manipulate the idemployee and resettoken parameters to enumerate valid back-office employee email addresses. Impacted parties: Store administrators and employees: their email addresses are exposed. Merchants: risk of...

7AI score0.00816EPSS
SaveExploits1References9Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2021-32773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket...

7.5CVSS7.2AI score0.00869EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/21 12:00 a.m.•11 views

Digital Music Pad 安全漏洞

Digital Music Pad is a music creation and performance software from Digital Music Pad, Inc. A security vulnerability exists in Digital Music Pad version v8.2.3.3.4, which originates from parsing a .pls file without validating the length of the File1 field, which could lead to a stack buffer...

8.4CVSS7.3AI score0.00416EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
•added 2025/08/19 12:00 a.m.•2 views

Linux Distros Unpatched Vulnerability : CVE-2024-11236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause a...

9.8CVSS6.3AI score0.02065EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/08/04 12:00 a.m.•13 views

Kingdee Cloud-Starry-Sky Enterprise Edition 路径遍历漏洞

Kingdee Cloud-Starry-Sky Enterprise Edition is a digital transformation solution for growing enterprises from China's Kingdee. A path traversal vulnerability exists in Kingdee Cloud-Starry-Sky Enterprise Edition 8.2 and earlier versions, which stems from path traversal due to incorrect operation ...

6.9CVSS5.4AI score0.008EPSS
SaveExploits0References7
AstraLinux
AstraLinux
•added 2025/06/16 11:28 a.m.•8 views

Astra Linux – Vulnerability in PHP 8.2

In PHP versions starting from 8.1. up to 8.1.32, from 8.2. up to 8.2.28, from 8.3. up to 8.3.19, and from 8.4. up to 8.4.5, when user-supplied headers are sent, insufficient validation of line-end characters may prevent certain headers from being sent or may lead to misinterpretation of certain...

7.3CVSS6.2AI score0.00534EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/23 9:23 a.m.•17 views

CVE-2024-3334

A security bypass vulnerability exists in the Removable Media Encryption RMEcomponent of Digital Guardian Windows Agents prior to version 8.2.0. This allows a user to circumvent encryption controls by modifying metadata on the USB device thereby compromising the confidentiality of the stored data...

4.3CVSS6.6AI score0.00141EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/10 12:00 a.m.•10 views

WordPress plugin Massive Dynamic 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

9CVSS8.8AI score0.00631EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/11/12 12:00 a.m.•30 views

PT-2024-8712 · Siemens · Scalance Mum856-1 +13

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RM1224 LTE4G EU versions V8.2 RUGGEDCOM RM1224 LTE4G NAM versions V8.2 SCALANCE M804PB versions V8.2 SCALANCE M812-1 ADSL-Router versions V8.2 SCALANCE M816-1 ADSL-Router versions V8.2 SCALANCE M826-2 SHDSL-Router versions V8.2...

5.1CVSS6.7AI score0.00273EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/10/23 12:00 a.m.•18 views

PT-2024-32880 · Intermesh · Intermesh 7177 Hybrid 2.0 Subscriber +1

Name of the Vulnerable Software and Affected Versions: InterMesh 7177 Hybrid 2.0 Subscriber versions prior to 8.2.12 InterMesh 7707 Fire Subscriber versions prior to 7.2.12 Description: A vulnerability has been identified that could allow an authenticated local attacker to execute arbitrary...

8.5CVSS7.5AI score0.00196EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/05/14 12:00 a.m.•11 views

IBM TXSeries for Multiplatforms 安全漏洞

IBM TXSeries for Multiplatforms is a transaction monitoring and management software product from International Business Machines IBM designed to support distributed transaction processing on multiple platforms. A security vulnerability exists in IBM TXSeries for Multiplatforms version 8.2 that...

7.5CVSS6.8AI score0.00521EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/05/10 12:00 a.m.•68 views

PT-2024-19351 · Ibm · Ibm Txseries For Multiplatforms

Name of the Vulnerable Software and Affected Versions: IBM TXSeries for Multiplatforms version 8.2 Description: The issue allows web pages to be stored locally, which can then be read by another user on the system. Recommendations: For IBM TXSeries for Multiplatforms version 8.2, consider...

4CVSS6.3AI score0.00217EPSS
SaveExploits0References4
Rows per page
Query Builder