CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2543 matches found

Positive Technologies•added 2025/10/07 12:0 a.m.•12 views

PT-2025-41001

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Several stack-based buffer overflow issues are present in the formPingCmd functionality. An attacker can exploit these by sending specially crafted HTTP requests. The buffer overflow is related ...

8.8CVSS7AI score0.00678EPSS

SaveExploits1References6

Positive Technologies•added 2025/10/07 12:0 a.m.•7 views

PT-2025-41003

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Several stack-based buffer overflow issues are present in the formPingCmd functionality. An attacker can send a series of crafted HTTP requests to trigger these issues. The buffer overflow is...

8.8CVSS7AI score0.00708EPSS

SaveExploits1References5

Positive Technologies•added 2025/10/07 12:0 a.m.•9 views

PT-2025-41000

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Multiple stack-based buffer overflow issues exist in the formPingCmd functionality. An attacker can send a series of crafted HTTP requests to trigger these issues. The buffer overflow is related...

8.8CVSS7AI score0.00708EPSS

SaveExploits1References6

BDU FSTEC•added 2025/10/07 12:0 a.m.•10 views

The vulnerability of the User Interface Tag and Backend Tag components of the IBM Instana Observability monitoring tool allows a attacker to execute arbitrary GET requests.

The vulnerability of the User Interface Tag and Backend Tag components of the IBM Instana Observability monitoring tool is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to execute arbitrary GET requests remotely...

4.3CVSS5.9AI score

SaveExploits0References2Affected Software1

CNNVD•added 2025/10/06 12:0 a.m.•11 views

langchain-text-splitters 代码问题漏洞

langchain-text-splitters is a Python package open-sourced by LangChain. A code issue vulnerability exists in langchain-text-splitters version 0.3.8, which stems from the HTMLSectionSplitter class allowing the use of arbitrary XSLT stylesheets, which could lead to an XML External Entity Attack,...

7.5CVSS7.4AI score0.00604EPSS

SaveExploits0References2

VulnCheck KEV•added 2025/10/06 12:0 a.m.•4 views

VulnCheck KEV: CVE-2025-20363

A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance ASA Software, Cisco Secure Firewall Threat Defense FTD Software, Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, remote attacker Cisco ASA and FTD Software...

9CVSS6.3AI score0.0752EPSS

SaveIn wildExploits0References7

VulnCheck KEV•added 2025/10/06 12:0 a.m.•3 views

VulnCheck KEV: CVE-2025-64446

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTT...

9.8CVSS5.9AI score0.91838EPSS

SaveIn wildExploits18References220

Cvelist•added 2025/10/05 1:32 p.m.•15 views

CVE-2025-11291 ixmaps website2017 HTTP GET Request map.php cross site scripting

A security flaw has been discovered in ixmaps website2017 up to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0. This impacts an unknown function of the file /map.php of the component HTTP GET Request Handler. Performing manipulation of the argument trid results in cross site scripting. The attack can b...

5.3CVSS0.00317EPSS

SaveExploits0References5