Lucene search
+L

31605 matches found

Vulnrichment
Vulnrichment
added 2025/10/09 3:18 a.m.8 views

CVE-2025-27053 Incorrect Calculation of Buffer Size in HLOS

Memory corruption during PlayReady APP usecase while processing TA commands...

7.8CVSS6.8AI score0.00081EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/09 3:18 a.m.13 views

EUVD-2025-33244

Memory corruption during PlayReady APP usecase while processing TA commands...

7.8CVSS6.6AI score0.00081EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/09 12:00 a.m.13 views

PT-2025-41379

Name of the Vulnerable Software and Affected Versions Progress Flowmon versions prior to 12.5.5 Description A flaw exists in the Progress Flowmon web application that allows an attacker to manipulate authenticated users through malicious links. Clicking a crafted link can trigger unintended actio...

8.8CVSS6.3AI score0.003EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/10/08 3:31 p.m.4 views

CVE-2025-5009 Information Disclosure in Gemini iOS App

In Gemini iOS, when a user shared a snippet of a conversation, it would share the entire conversation via a sharable public link that contained the entire conversation history and not just the snippet...

1CVSS6.5AI score0.00119EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/08 3:31 p.m.35 views

CVE-2025-5009

In Gemini iOS, the sharing flow for a conversation snippet inadvertently exposes the entire conversation history via a publicly accessible link. Affected software: Gemini iOS. Root cause: the share mechanism does not limit content to the selected snippet, leading to information disclosure of prev...

1CVSS6.5AI score0.00119EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/08 3:31 p.m.20 views

CVE-2025-5009 Information Disclosure in Gemini iOS App

In Gemini iOS, when a user shared a snippet of a conversation, it would share the entire conversation via a sharable public link that contained the entire conversation history and not just the snippet...

1CVSS0.00119EPSS
SaveExploits0References1
Circl
Circl
added 2025/10/08 8:39 a.m.18 views

CVE-2025-37728

creationtimestamp| type| source ---|---|--- 2025-10-08 08:39:07+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3m2oaintohc2g...

5.4CVSS5.7AI score0.00232EPSS
SaveExploits0References1
Circl
Circl
added 2025/10/08 1:34 a.m.35 views

CVE-2025-11418

creationtimestamp| type| source ---|---|--- 2025-10-08 01:34:17+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m2nireytn62a 2025-10-08 13:24:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115338765143493178...

10CVSS9.5AI score0.06192EPSS
SaveExploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/07 11:56 a.m.10 views

Malicious code in simple-app-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12841bf7b69cb4d4bbfe8fe7d87b976164b92187dae534f07331b5025779b542 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2025/10/07 11:56 a.m.6 views

MAL-2025-48347 Malicious code in simple-app-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12841bf7b69cb4d4bbfe8fe7d87b976164b92187dae534f07331b5025779b542 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2025/10/07 9:02 a.m.8 views

CVE-2025-11360 jakowenko double-take API app.js app.use cross site scripting

A vulnerability was detected in jakowenko double-take up to 1.13.1. The impacted element is the function app.use of the file api/src/app.js of the component API. The manipulation of the argument X-Ingress-Path results in cross site scripting. The attack can be executed remotely. Upgrading to...

5.3CVSS4.4AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2025/10/07 9:02 a.m.6 views

CVE-2025-11360 jakowenko double-take API app.js app.use cross site scripting

A vulnerability was detected in jakowenko double-take up to 1.13.1. The impacted element is the function app.use of the file api/src/app.js of the component API. The manipulation of the argument X-Ingress-Path results in cross site scripting. The attack can be executed remotely. Upgrading to...

5.3CVSS5.7AI score0.00321EPSS
SaveExploits0References5
CVE
CVE
added 2025/10/07 5:00 a.m.35 views

CVE-2025-11362

CVE-2025-11362 affects the pdfmake package prior to 0.3.0-beta.17, where an attacker can trigger repeated URL redirects in file embedding, potentially causing the application to crash or become unresponsive. The issue is categorized as Allocation of Resources Without Limits or Throttling and has ...

8.7CVSS5.3AI score0.00398EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-6589

Malware in sbrugna...

7.5CVSS7.5AI score0.0112EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2014-5649

Malware in sbrugna...

5.4CVSS6.4AI score0.00271EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2014-6813

Malware in sbrugna...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2014-6655

Malware in sbrugna...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2014-5488

Malware in sbrugna...

5.4CVSS6.4AI score0.00271EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2019-6435

Malware in sbrugna...

7.8CVSS7.6AI score0.0031EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2011-3522

Malware in sbrugna...

7.8CVSS6.1AI score0.0314EPSS
SaveExploits0References8
Rows per page
Query Builder