Lucene search
+L

24755 matches found

vulnersOsv
vulnersOsv
•added 2025/11/17 6:49 a.m.•10 views

io.github.wwwlike:vlife-boot-starter-web (>=1.0.4, <=1.0.7), io.github.wwwlike:vlife-core (>=1.0.4, <=1.0.7) +2 more potentially affected by CVE-2025-13266 via io.github.wwwlike:vlife-base (>=1.0.4, <=1.0.7)

io.github.wwwlike:vlife-base MAVEN version =1.0.4, =1.0.4, =1.0.4, =1.0.4, =1.0.2, =1.0.7 Source cves: CVE-2025-13266 Source advisory: SNYK:JAVA-IOGITHUBWWWLIKE-14038399...

6.9CVSS5.8AI score0.00642EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/11/17 6:30 a.m.•2 views

io.github.wwwlike:vlife-boot-starter-web (1.0.5), io.github.wwwlike:vlife-core (1.0.5) +2 more potentially affected by CVE-2025-13266 via io.github.wwwlike:vlife-base (1.0.5)

io.github.wwwlike:vlife-base MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.github.wwwlike:vlife-base and may be impacted: - io.github.wwwlike:vlife-boot-starter-web 1.0.5 - io.github.wwwlike:vlife-core 1.0.5 -...

6.9CVSS5.8AI score0.00642EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/11/17 6:30 a.m.•2 views

io.github.wwwlike:vlife-boot-starter-web (1.0.6), io.github.wwwlike:vlife-core (1.0.6) +1 more potentially affected by CVE-2025-13266 via io.github.wwwlike:vlife-base (1.0.6)

io.github.wwwlike:vlife-base MAVEN version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.github.wwwlike:vlife-base and may be impacted: - io.github.wwwlike:vlife-boot-starter-web 1.0.6 - io.github.wwwlike:vlife-core 1.0.6 -...

6.9CVSS5.8AI score0.00642EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/11/17 6:30 a.m.•1 views

io.github.wwwlike:vlife-boot-starter-web (1.0.7), io.github.wwwlike:vlife-core (1.0.7) +2 more potentially affected by CVE-2025-13266 via io.github.wwwlike:vlife-base (1.0.7)

io.github.wwwlike:vlife-base MAVEN version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.github.wwwlike:vlife-base and may be impacted: - io.github.wwwlike:vlife-boot-starter-web 1.0.7 - io.github.wwwlike:vlife-core 1.0.7 -...

6.9CVSS5.8AI score0.00642EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2025/11/17 6:30 a.m.•24 views

vlife-base has Path Traversal vulnerability

A security vulnerability has been detected in wwwlike vlife up to 2.0.1. This issue affects the function create of the file vlife-base/src/main/java/cn/wwwlike/sys/api/SysFileApi.java of the component VLifeApi. Such manipulation of the argument fileName leads to path traversal. It is possible to...

6.9CVSS5.3AI score0.00642EPSS
SaveExploits0References6Affected Software1
vulnersOsv
vulnersOsv
•added 2025/11/17 6:30 a.m.•2 views

io.github.wwwlike:vlife-boot-starter-web (1.0.4), io.github.wwwlike:vlife-core (1.0.4) +2 more potentially affected by CVE-2025-13266 via io.github.wwwlike:vlife-base (1.0.4)

io.github.wwwlike:vlife-base MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.github.wwwlike:vlife-base and may be impacted: - io.github.wwwlike:vlife-boot-starter-web 1.0.4 - io.github.wwwlike:vlife-core 1.0.4 -...

6.9CVSS5.8AI score0.00642EPSS
SaveExploits0
osv_ghsa
osv_ghsa
•added 2025/11/17 6:30 a.m.•18 views

GHSA-CG6M-9276-QPJJ vlife-base has Path Traversal vulnerability

A security vulnerability has been detected in wwwlike vlife up to 2.0.1. This issue affects the function create of the file vlife-base/src/main/java/cn/wwwlike/sys/api/SysFileApi.java of the component VLifeApi. Such manipulation of the argument fileName leads to path traversal. It is possible to...

6.9CVSS5.3AI score0.00642EPSS
SaveExploits0References6
Packet Storm News
Packet Storm News
•added 2025/11/16 12:00 a.m.•28 views

An Evaluation Framework for Network IDS/IPS Datasets: Leveraging MITRE ATT&CK and Industry Relevance Metrics

The performance of Machine Learning ML and Deep Learning DL-based Intrusion Detection and Prevention Systems IDS/IPS is critically dependent on the relevance and quality of the datasets used for training and evaluation. However, current AI model evaluation practices for developing IDS/IPS focus...

6.8AI score
SaveExploits0
NVD
NVD
•added 2025/11/14 7:16 p.m.•21 views

CVE-2025-63680

Nero BackItUp in the Nero Productline is vulnerable to a path parsing/UI rendering flaw CWE-22 that, in combination with Windows ShellExecuteW fallback extension resolution, leads to arbitrary code execution when a user clicks a crafted entry. By creating a trailing-dot folder and placing a...

8.6CVSS0.0031EPSS
SaveExploits1References1
Debian
Debian
•added 2025/11/14 5:35 p.m.•29 views

[SECURITY] [DLA 4371-1] gst-plugins-base1.0 security update

Debian LTS Advisory DLA-4371-1 [email protected] https://www.debian.org/lts/security/ Jeremy Bícha November 14, 2025 https://wiki.debian.org/LTS Package : gst-plugins-base1.0 Version : 1.18.4-2+deb11u4 CVE ID : CVE-2025-47806 CVE-2025-47807 CVE-2025-47808 Multiple vulnerabilities were...

5.6CVSS6.9AI score0.00478EPSS
SaveExploits3
osv_clsa
osv_clsa
•added 2025/11/14 4:53 p.m.•40 views

CLSA-2025-1763139214 gstreamer1-plugins-base: Fix of CVE-2024-47615

CVE-2024-47615: fix OOB-Write in gstparsevorbissetuppacket by validating integer size input to prevent memory corruption...

9.8CVSS7.8AI score0.01134EPSS
SaveExploits0References1
osv_dla
osv_dla
•added 2025/11/14 12:00 a.m.•23 views

DLA-4371-1 gst-plugins-base1.0 - security update

Bulletin has no description...

5.6CVSS6.7AI score0.00478EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2025/11/14 12:00 a.m.•20 views

Debian dla-4371 : gir1.2-gst-plugins-base-1.0 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4371 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4371-1 [email protected]...

5.6CVSS7.1AI score0.00478EPSS
SaveExploits3References8
Vulnrichment
Vulnrichment
•added 2025/11/14 12:00 a.m.•12 views

CVE-2025-63680

Nero BackItUp in the Nero Productline is vulnerable to a path parsing/UI rendering flaw CWE-22 that, in combination with Windows ShellExecuteW fallback extension resolution, leads to arbitrary code execution when a user clicks a crafted entry. By creating a trailing-dot folder and placing a...

6.3AI score0.0031EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/11/13 12:00 a.m.•16 views

CVE-2025-47221

An arbitrary file write was found in Keyfactor SignServer versions prior to 7.3.2. The properties ARCHIVETODISKFILENAME-PATTERN, ARCHIVETODISKPATHBASE, ARCHIVETODISKPATHPATTERN can be set to any path, even ones that will point to files that already exist. This vulnerability gives a user with admi...

5.3CVSS5.8AI score
SaveExploits0References5
CNNVD
CNNVD
•added 2025/11/13 12:00 a.m.•25 views

MaxKB information leakage vulnerability

MaxKB is a 1Panel-dev open source open source knowledge base question and answer system based on a large language model and RAG. An information disclosure vulnerability exists in MaxKB versions prior to 2.3.1, which stems from the fact that users can obtain sensitive information via Python code i...

6.5CVSS5.9AI score0.00211EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2025/11/13 12:00 a.m.•5 views

Fedora: Security Advisory (FEDORA-2025-b6e0f437b6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.4AI score0.0093EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2025/11/12 9:27 p.m.•15 views

Important: Red Hat Security Advisory: Red Hat Ceph Storage

A new version of Red Hat build of Ceph Storage has been released The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 8.1. This release updates to the latest version...

7.5CVSS6.3AI score0.01122EPSS
SaveExploits1References4
NVD
NVD
•added 2025/11/12 7:15 p.m.•31 views

CVE-2025-63679

free5gc v4.1.0 and before is vulnerable to Buffer Overflow. When AMF receives an UplinkRANConfigurationTransfer NGAP message from a gNB, the AMF process crashes...

9.8CVSS0.00428EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/11/12 12:00 a.m.•17 views

CVE-2025-63679

free5gc v4.1.0 and before is vulnerable to Buffer Overflow. When AMF receives an UplinkRANConfigurationTransfer NGAP message from a gNB, the AMF process crashes...

9.8CVSS5.9AI score0.00428EPSS
SaveExploits1References4
Rows per page
Query Builder