Lucene search
K

2321 matches found

OSV
OSV
added 2025/01/27 7:21 a.m.9 views

BIT-RUBY-MIN-2020-10933

An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocketreadnonblockrequestedsize, buffer, exception: false, the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous valu...

5.3CVSS6.3AI score0.00415EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/01/27 12:0 a.m.3 views

Anubis 安全漏洞

Anubis is a tool by Xe Iaso Individual Developers. Anubis has a security vulnerability that stems from allowing administrators to protect bots from AI crawling tools by bot-checking heuristic algorithms and proof-of-work challenges to block crawling from multiple IP addresses...

2.3CVSS6.8AI score0.00176EPSS
Exploits0References4
NVD
NVD
added 2025/01/21 2:15 p.m.14 views

CVE-2025-22732

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Admiral Ad Blocking Detector ad-blocking-detector allows Stored XSS.This issue affects Ad Blocking Detector: from n/a through = 3.6.0...

6.5CVSS0.0015EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/21 1:57 p.m.16 views

CVE-2025-22732 WordPress Ad Blocking Detector plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Admiral Ad Blocking Detector ad-blocking-detector allows Stored XSS.This issue affects Ad Blocking Detector: from n/a through = 3.6.0...

6.5CVSS0.0015EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/21 1:57 p.m.6 views

CVE-2025-22732 WordPress Ad Blocking Detector plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Admiral Ad Blocking Detector ad-blocking-detector allows Stored XSS.This issue affects Ad Blocking Detector: from n/a through = 3.6.0...

6.5CVSS8.6AI score0.0015EPSS
Exploits0References1
CVE
CVE
added 2025/01/21 1:57 p.m.61 views

CVE-2025-22732

CVE-2025-22732 affects Ad Blocking Detector (WordPress plugin) with a Stored XSS vulnerability in input handling during web page generation. Affected range: from n/a through version 3.6.0. CVSSv3.1 base score 6.5 (Medium) with Network attack vector, Privileges Required: Low, User Interaction: Req...

6.5CVSS7.2AI score0.0015EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/21 12:0 a.m.2 views

WordPress plugin Ad Blocking Detector 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS7.8AI score0.0015EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/17 12:0 a.m.1 views

The vulnerability of the Security Account Manager (SAM) on Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Security Account Manager SAM on Windows operating systems is related to mutual blocking of execution threads. Exploiting this vulnerability can allow a malicious actor to cause service failures...

6.8CVSS7.9AI score0.0094EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/01/15 12:18 p.m.4 views

WordPress Ad Blocking Detector plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Ad Blocking Detector versions = 3.6.0...

6.5CVSS6.1AI score0.0015EPSS
Exploits0Affected Software1
OSV
OSV
added 2025/01/14 5:15 p.m.0 views

CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality...

7CVSS5.8AI score0.00075EPSS
Exploits0References1
CVE
CVE
added 2025/01/14 4:49 p.m.50 views

CVE-2024-10630

CVE-2024-10630 affects Ivanti Application Control Engine. A race condition in versions prior to 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality. The issue is documented across multiple sources (Ivanti security advisory, Red Hat/CISA entries, PT-sec...

7.8CVSS7.4AI score0.00075EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2025/01/14 4:49 p.m.12 views

CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality...

7.8CVSS0.00075EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/14 4:49 p.m.4 views

CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality...

7.8CVSS6.5AI score0.00075EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.1 views

Ivanti Application Control 安全漏洞

Ivanti Application Control is an application control software from Ivanti Corporation, USA. A security vulnerability previously existed in Ivanti Application Control version 10.14.4.0, which stemmed from the inclusion of a race condition issue. Allowing a locally authenticated attacker to exploit...

7.8CVSS6.3AI score0.00075EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/14 12:0 a.m.3 views

PT-2025-1601 · Ivanti · Ivanti Application Control Engine

Name of the Vulnerable Software and Affected Versions: Ivanti Application Control Engine versions prior to 10.14.4.0 Description: A race condition in the software allows a local authenticated attacker to bypass the application blocking functionality. Recommendations: For versions prior to...

7.8CVSS7.3AI score0.00075EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.3 views

Fortinet FortiOS 安全漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. Fortinet FortiOS has a security...

5.3CVSS6.8AI score0.00933EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2024/12/29 2:35 p.m.9 views

CVE-2024-53232

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Implement blocking domain This fixes a crash when surprise hot-unplugging a PCI device. This crash happens because during hot-unplug iommugroupsetdomainnofail attaching the default domain fails when the platform no...

5.5CVSS6.7AI score0.00016EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2024/12/28 3:49 a.m.1 views

SUSE CVE-2024-53232

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Implement blocking domain This fixes a crash when surprise hot-unplugging a PCI device. This crash happens because during hot-unplug iommugroupsetdomainnofail attaching the default domain fails when the platform no...

5.5CVSS7.5AI score0.00016EPSS
Exploits0References13
OSV
OSV
added 2024/12/27 2:15 p.m.1 views

DEBIAN-CVE-2024-53232

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Implement blocking domain This fixes a crash when surprise hot-unplugging a PCI device. This crash happens because during hot-unplug iommugroupsetdomainnofail attaching the default domain fails when the platform no...

7.8CVSS5.7AI score0.00016EPSS
Exploits0References1
NVD
NVD
added 2024/12/27 2:15 p.m.9 views

CVE-2024-53232

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Implement blocking domain This fixes a crash when surprise hot-unplugging a PCI device. This crash happens because during hot-unplug iommugroupsetdomainnofail attaching the default domain fails when the platform no...

7.8CVSS0.00016EPSS
Exploits0References3
Rows per page
Query Builder