Lucene search
+L

11872 matches found

BDU FSTEC
BDU FSTEC
added 2025/12/10 12:00 a.m.5 views

The vulnerability of the add_missing_indices() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the addmissingindices function in the Linux operating system’s kernel is related to the reading of data beyond the specified buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

7CVSS6.7AI score0.00159EPSS
SaveExploits0References9Affected Software2
Tenable Nessus
Tenable Nessus
added 2025/12/10 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-53828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisync: Avoid use-after-free in dbg for hciaddadvmonitor KSAN reports use-after-free in hciaddadvmonitor. While adding an adv monitor,...

7.8CVSS7.1AI score0.00191EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/10 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2022-50670

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: omaphsmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, it will lead two issues: 1. The memory that...

5.6AI score0.00241EPSS
SaveExploits0References3
NVD
NVD
added 2025/12/09 10:16 p.m.8 views

CVE-2025-66645

NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to directory traversal through the App.addmediafiles function, which allows a remote attacker to read arbitrary files on the server filesystem. This issue is fixed in version 3.4.0...

7.5CVSS0.01095EPSS
SaveExploits1References2
CVE
CVE
added 2025/12/09 9:41 p.m.34 views

CVE-2025-66645

CVE-2025-66645 - NiceGUI Directory Traversal : Plenty of connected sources confirm a vulnerability in NiceGUI (

7.5CVSS6.5AI score0.01095EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
added 2025/12/09 9:41 p.m.8 views

EUVD-2025-201931

NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to directory traversal through the App.addmediafiles function, which allows a remote attacker to read arbitrary files on the server filesystem. This issue is fixed in version 3.4.0...

7.5CVSS6.3AI score0.01095EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/12/09 9:41 p.m.5 views

CVE-2025-66645 NiceGUI Path Traversal Vulnerability in app.add_media_files() Allows Arbitrary File Reading

NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to directory traversal through the App.addmediafiles function, which allows a remote attacker to read arbitrary files on the server filesystem. This issue is fixed in version 3.4.0...

7.5CVSS6.5AI score0.01095EPSS
SaveExploits1References2
OSV
OSV
added 2025/12/09 9:41 p.m.8 views

CVE-2025-66645 NiceGUI Path Traversal Vulnerability in app.add_media_files() Allows Arbitrary File Reading

NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to directory traversal through the App.addmediafiles function, which allows a remote attacker to read arbitrary files on the server filesystem. This issue is fixed in version 3.4.0...

7.5CVSS6.8AI score
SaveExploits0References4
EUVD
EUVD
added 2025/12/09 6:30 p.m.8 views

EUVD-2025-202021

Cross-Site Request Forgery CSRF vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Cross Site Request Forgery.This issue affects Add Custom Codes: from n/a through = 4.80...

6.3AI score0.00146EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/09 6:30 p.m.9 views

EUVD-2022-55735

In the Linux kernel, the following vulnerability has been resolved: mmc: omaphsmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmcallochost is leaked. 2. In the remove path, mmcremovehos...

6AI score0.00241EPSS
SaveExploits0References7
OSV
OSV
added 2025/12/09 6:15 p.m.7 views

CVE-2025-34408

MailEnable versions prior to 10.54 contain a reflected cross-site scripting XSS vulnerability in the Added parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx. The Added value is not properly sanitized when processed via a GET request and is reflected in the response, allowing an...

6.1CVSS6AI score0.0048EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/09 6:10 p.m.5 views

CVE-2025-34408 MailEnable < 10.54 Reflected XSS in Added Parameter of MAI/AddRecipientsResult.aspx

MailEnable versions prior to 10.54 contain a reflected cross-site scripting XSS vulnerability in the Added parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx. The Added value is not properly sanitized when processed via a GET request and is reflected in the response, allowing an...

5.3CVSS5.4AI score0.0048EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/09 6:10 p.m.19 views

CVE-2025-34408

MailEnable prior to 10.54 is affected by a reflected XSS in the Added parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx. The Added value is not properly sanitized for GET requests and is reflected in the response, allowing an attacker to break out of markup and inject script, potent...

6.1CVSS5.4AI score0.0048EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/09 6:09 p.m.4 views

CVE-2025-34409 MailEnable < 10.54 Reflected XSS in Failed Parameter of MAI/AddRecipientsResult.aspx

MailEnable versions prior to 10.54 contain a reflected cross-site scripting XSS vulnerability in the Failed parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx. The Failed value is not properly sanitized when processed via a GET request and is reflected in the response, allowing an...

5.3CVSS5.4AI score0.0048EPSS
SaveExploits0References3
NVD
NVD
added 2025/12/09 4:18 p.m.7 views

CVE-2025-63069

Missing Authorization vulnerability in Vinod Dalvi Ivory Search add-search-to-menu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ivory Search: from n/a through = 5.5.12...

5.3CVSS0.00325EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/09 4:17 p.m.3 views

DEBIAN-CVE-2023-53828

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Avoid use-after-free in dbg for hciaddadvmonitor KSAN reports use-after-free in hciaddadvmonitor. While adding an adv monitor, hciaddadvmonitor calls - msftaddmonitorpattern calls - msftaddmonitorsync calls -...

7.8CVSS5.2AI score0.00191EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/09 4:17 p.m.12 views

CVE-2022-50670

In the Linux kernel, the following vulnerability has been resolved: mmc: omaphsmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmcallochost is leaked. 2. In the remove path, mmcremovehos...

0.00241EPSS
SaveExploits0References6
OSV
OSV
added 2025/12/09 4:17 p.m.4 views

DEBIAN-CVE-2022-50670

In the Linux kernel, the following vulnerability has been resolved: mmc: omaphsmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmcallochost is leaked. 2. In the remove path, mmcremovehos...

5.3AI score0.00241EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/09 4:17 p.m.6 views

UBUNTU-CVE-2022-50670

In the Linux kernel, the following vulnerability has been resolved: mmc: omaphsmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmcallochost is leaked. 2. In the remove path, mmcremovehos...

5.7AI score0.00241EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2025/12/09 2:52 p.m.4 views

CVE-2025-63069 WordPress Ivory Search plugin <= 5.5.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in Vinod Dalvi Ivory Search add-search-to-menu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ivory Search: from n/a through = 5.5.12...

5.3CVSS6.6AI score0.00325EPSS
SaveExploits0References1
Rows per page
Query Builder