Lucene search
K

2321 matches found

Positive Technologies
Positive Technologies
added 2025/02/15 12:0 a.m.3 views

PT-2025-6816 · WordPress · Media Library Folders

Name of the Vulnerable Software and Affected Versions: Media Library Folders plugin for WordPress versions up to, and including, 8.3.0 Description: The issue is related to a missing capability check on several AJAX actions, allowing authenticated attackers with Author-level access and above to...

4.3CVSS9.3AI score0.00106EPSS
Exploits0References13
SUSE CVE
SUSE CVE
added 2025/02/14 5:44 a.m.1 views

SUSE CVE-2024-6284

In https://github.com/google/nftables IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended might block or not block the desired addresses. This issue affects: https://pkg.go.dev/github.com/google/[email protected] The bug was fixe...

7.3CVSS6.7AI score0.00069EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/02/13 6:3 p.m.12 views

CVE-2022-23513

Pi-Hole is a network-wide ad blocking via your own Linux hardware, AdminLTE is a Pi-hole Dashboard for stats and more. In case of an attack, the threat actor will obtain the ability to perform an unauthorized query for blocked domains on queryads endpoint. In the case of application, this...

5.3CVSS6.7AI score0.13916EPSS
Exploits4References1
BDU FSTEC
BDU FSTEC
added 2025/02/12 12:0 a.m.2 views

The vulnerability of the block component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the block component in the Linux operating system’s kernel is related to improper blocking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00007EPSS
Exploits0References18Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/02/12 12:0 a.m.2 views

The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to improper blocking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.1CVSS6.5AI score0.00007EPSS
Exploits0References29Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/02/12 12:0 a.m.3 views

The vulnerability of the amdtp-stream component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the amdtp-stream component in the Linux operating system’s kernel is related to improper blocking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.1CVSS6.2AI score0.00007EPSS
Exploits0References33Affected Software6
RedhatCVE
RedhatCVE
added 2025/02/05 1:15 p.m.11 views

CVE-2020-8479

For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to...

9.8CVSS7AI score0.00707EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 4:59 a.m.2 views

CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality...

7.8CVSS6.4AI score0.00075EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 11:44 p.m.4 views

CVE-2024-22163

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shield Security Shield Security – Smart Bot Blocking & Intrusion Prevention Security allows Stored XSS.This issue affects Shield Security – Smart Bot Blocking & Intrusion Prevention Security: from...

7.1CVSS7.1AI score0.00083EPSS
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/03 9:1 a.m.2 views

Malicious code in navigation-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62a538f0b4692318ebf66b044328d39a0f011a80e355def5c4bd12f506bfc3cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2025/02/03 9:1 a.m.2 views

MAL-2025-1152 Malicious code in navigation-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62a538f0b4692318ebf66b044328d39a0f011a80e355def5c4bd12f506bfc3cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/02/03 12:0 a.m.2 views

The vulnerability of the vsock component in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the vsock component in the Linux operating system’s kernel is related to improper blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.4CVSS6.1AI score0.00014EPSS
Exploits0References24Affected Software10
BDU FSTEC
BDU FSTEC
added 2025/02/03 12:0 a.m.1 views

The vulnerability of Linux kernel components such as IPMR and IP6MR allows a hacker to induce a service failure.

The vulnerability of IPMR and IP6MR components in Linux operating systems is related to improper blocking mechanisms. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6.3AI score0.00019EPSS
Exploits0References23Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/02/03 12:0 a.m.1 views

The vulnerability of the Linux operating system’s kernel Wi-Fi component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel Wi-Fi component is related to improper blocking mechanisms. Exploiting this vulnerability can allow attackers to cause service failures...

4.4CVSS6.4AI score0.00009EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/02/03 12:0 a.m.1 views

The vulnerability of Xen hypervisors, related to improper blocking mechanisms, allows attackers to trigger a service failure.

The vulnerability of Xen hypervisors is related to improper blocking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.5CVSS6.5AI score0.00275EPSS
Exploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/02/03 12:0 a.m.2 views

The vulnerability of the riscv component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the riscv component in the Linux operating system’s kernel is related to improper blocking in the function. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00014EPSS
Exploits0References13Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/02/03 12:0 a.m.2 views

The vulnerability of the Linux operating system’s kernel tracing component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel tracing component is related to improper blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00018EPSS
Exploits0References15Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/01/28 12:0 a.m.1 views

The vulnerability of the Linux operating system’s kernel, related to errors in thread locking, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00016EPSS
Exploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/01/28 12:0 a.m.3 views

The vulnerability of the subflow_error_report() component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the subflowerrorreport component in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to trigger a service failure...

7.8CVSS5.5AI score0.00016EPSS
Exploits0References9Affected Software3
NVD
NVD
added 2025/01/27 6:15 p.m.17 views

CVE-2025-24354

imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXYALLOWLOOPBACKSOURCEADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2...

5.3CVSS0.02218EPSS
Exploits0References2
Rows per page
Query Builder