Lucene search
K

25 matches found

EUVD
EUVD
added 2 days ago6 views

EUVD-2026-36952

Unauthenticated Broken Access Control in Easy Appointments = 3.12.21 versions...

7.5CVSS5.1AI score0.00287EPSS
Exploits0References2
EUVD
EUVD
added 6 days ago5 views

EUVD-2024-55619

IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileged user...

4.1CVSS5.4AI score0.00119EPSS
Exploits0References1
Snyk
Snyk
added 2026/05/27 7:33 p.m.9 views

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the BER data parsing process. An attacker can cause excessive resource consumption and service disruption by submitting specially crafted indefinite length encodings. Remediation Upgrade botan to...

7.5CVSS5.8AI score0.00324EPSS
Exploits0References2
NVD
NVD
added 2026/05/27 6:16 p.m.8 views

CVE-2026-44378

Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite length encodings in BER data could cause quadratic behavior in the parser, resulting in a denial of service. Such BER encodings were accepted even in structures which are required to be encoded as DER, which...

7.5CVSS0.00324EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/27 4:34 p.m.6 views

CVE-2026-44378 Botan: Quadratic complexity decoding BER indefinite length encodings

Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite length encodings in BER data could cause quadratic behavior in the parser, resulting in a denial of service. Such BER encodings were accepted even in structures which are required to be encoded as DER, which...

6.9CVSS5.8AI score0.00324EPSS
Exploits0References1
Chainguard
Chainguard
added 2026/03/20 1:17 a.m.4 views

GHSA-WGVC-GHV9-3PMM vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.12-sdk...

5.8AI score
Exploits0
OSV
OSV
added 2026/02/17 9:22 p.m.1 views

CVE-2025-36377

IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system...

8.8CVSS5.8AI score
Exploits0References1
Cvelist
Cvelist
added 2026/02/17 8:32 p.m.26 views

CVE-2025-36377 IBM Security QRadar EDR Software has multiple vulnerabilities

IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system...

6.3CVSS0.00185EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/17 12:0 a.m.4 views

IBM Security QRadar EDR 代码问题漏洞

IBM Security QRadar EDR is a terminal detection and response software developed by the American multinational company IBM. There are code-related vulnerabilities in versions 3.12 to 3.12.23 of IBM Security QRadar EDR. These vulnerabilities stem from the failure to invalidate sessions after they...

8.8CVSS5.8AI score0.00185EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/30 10:47 a.m.4 views

CVE-2025-69012 WordPress Event Organiser plugin <= 3.12.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Stephen Harris Event Organiser event-organiser allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Organiser: from n/a through = 3.12.8...

4.3CVSS6.6AI score0.00206EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/15 12:0 a.m.7 views

RHEL 10 : python3.12 (RHSA-2025:14984)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:14984 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic...

7.5CVSS6.9AI score0.00586EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.4 views

WordPress plugin WP Email Capture 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.5AI score0.00214EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/03 12:0 a.m.2 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python312 (SUSE-SU-2025:4258-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4258-1 advisory. Update to 3.12.12: - CVE-2025-6075: Fixed quadratic complexity vulnerabilities of...

5.5CVSS6.8AI score0.00345EPSS
Exploits0References7
Snyk
Snyk
added 2025/06/03 12:58 p.m.6 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the tarfile module's extraction process when using the extractall or extract functions with the filter parameter set to "data" or "tar". An attacker can cause files or symlinks to be created outside the intended...

8.7CVSS7.6AI score0.00728EPSS
Exploits2References2
CNNVD
CNNVD
added 2025/05/20 12:0 a.m.4 views

IBM Security ReaQta EDR 信任管理问题漏洞

IBM Security ReaQta EDR is an Endpoint Detection and Response EDR solution from International Business Machines IBM that detects, investigates and responds to endpoint threats in real time through behavioral analytics and AI technologies, providing automated threat hunting and incident response...

6.5CVSS6.5AI score0.00203EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/19 12:0 a.m.2 views

IBM Security ReaQta 代码问题漏洞

IBM Security ReaQta is an AI autonomous detection and response platform from International Business Machines IBM. IBM Security ReaQta version 3.12 suffers from a code issue vulnerability that stems from the application's lack of effective validation of uploaded files. An attacker can exploit the...

4.7CVSS7.5AI score0.00239EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/14 12:0 a.m.3 views

IBM Security QRadar 安全漏洞

IBM Security QRadar is a modernized threat detection and response solution from International Business Machines IBM, Inc. designed to unify and integrate the security analyst experience and improve their response speed throughout the incident lifecycle. An information disclosure vulnerability...

4.4CVSS8AI score0.00128EPSS
Exploits0References3
Amazon
Amazon
added 2025/01/24 12:0 a.m.5 views

Important: python3.12

Issue Overview: Starting in Python 3.12.0, the asyncio.SelectorSocketTransport.writelines method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain the...

8.7CVSS7.9AI score0.01844EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/01/07 12:0 a.m.4 views

PT-2025-1942 · WordPress · User Profile Builder

Name of the Vulnerable Software and Affected Versions: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress versions up to and including 3.12.9 Description: The issue is related to stored cross-site scripting, which occurs due to...

6.1CVSS7.2AI score0.00376EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/11/14 12:0 a.m.1 views

IBM Security ReaQta 安全漏洞

IBM Security ReaQta is an AI autonomous detection and response platform from International Business Machines IBM. A security vulnerability exists in IBM Security ReaQta version 3.12, which stems from the inclusion of a cross-site scripting vulnerability. An attacker exploiting the vulnerability...

5.3CVSS6.1AI score0.00475EPSS
Exploits0References1
Rows per page
Query Builder