Lucene search
+L

10429 matches found

CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•16 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the netsched module allowing the creation of the TCHROOT class, which could lead to incorrectly maintained...

5.5CVSS6.5AI score0.00222EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/03/29 3:21 p.m.•38 views

CVE-2025-30358

Mesop is a Python-based UI framework that allows users to build web applications. A class pollution vulnerability in Mesop prior to version 0.14.1 allows attackers to overwrite global variables and class attributes in certain Mesop modules during runtime. This vulnerability could directly lead to...

8.1CVSS8.1AI score0.0071EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2025/03/27 6:14 p.m.•98 views

GHSA-F3MF-HM6V-JFHH Mesop Class Pollution vulnerability leads to DoS and Jailbreak attacks

From @jackfromeast and @superboy-zjc: We have identified a class pollution vulnerability in Mesop = 0.14.0 application that allows attackers to overwrite global variables and class attributes in certain Mesop modules during runtime. This vulnerability could directly lead to a denial of service Do...

8.1CVSS7AI score0.0071EPSS
SaveExploits0References4
Snyk
Snyk
•added 2025/03/27 6:14 p.m.•59 views

Class Pollution

Overview mesop is a Build UIs in Python Affected versions of this package are vulnerable to Class Pollution in the recursiveupdatedataclassfromjsonobj function, which doesn't raise an exception for dunder properties. An attacker can cause denial of service by overwriting these elements, leading t...

8.1CVSS6.8AI score0.0071EPSS
SaveExploits0References2
NVD
NVD
•added 2025/03/27 3:16 p.m.•57 views

CVE-2025-30358

Mesop is a Python-based UI framework that allows users to build web applications. A class pollution vulnerability in Mesop prior to version 0.14.1 allows attackers to overwrite global variables and class attributes in certain Mesop modules during runtime. This vulnerability could directly lead to...

8.1CVSS0.0071EPSS
SaveExploits0References2
Mend
Mend
•added 2025/03/27 2:49 p.m.•10 views

CVE-2025-30358

Mesop is a Python-based UI framework that allows users to build web applications. A class pollution vulnerability in Mesop prior to version 0.14.1 allows attackers to overwrite global variables and class attributes in certain Mesop modules during runtime. This vulnerability could directly lead to...

8.1CVSS0.0071EPSS
SaveExploits0References7
CVE
CVE
•added 2025/03/27 2:49 p.m.•107 views

CVE-2025-30358

Mesop is a Python-based UI framework. A class pollution vulnerability in Mesop before 0.14.1 allows attackers to overwrite global variables and class attributes at runtime in certain modules, enabling DoS on the server and potential identity confusion (e.g., impersonating assistants or system rol...

8.1CVSS8AI score0.0071EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/27 2:49 p.m.•17 views

CVE-2025-30358 Mesop Class Pollution vulnerability leads to DoS and Jailbreak attacks

Mesop is a Python-based UI framework that allows users to build web applications. A class pollution vulnerability in Mesop prior to version 0.14.1 allows attackers to overwrite global variables and class attributes in certain Mesop modules during runtime. This vulnerability could directly lead to...

8.1CVSS8.3AI score0.0071EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/27 2:49 p.m.•54 views

CVE-2025-30358 Mesop Class Pollution vulnerability leads to DoS and Jailbreak attacks

Mesop is a Python-based UI framework that allows users to build web applications. A class pollution vulnerability in Mesop prior to version 0.14.1 allows attackers to overwrite global variables and class attributes in certain Mesop modules during runtime. This vulnerability could directly lead to...

8.1CVSS0.0071EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/03/27 2:49 p.m.•30 views

CVE-2025-30358 Mesop Class Pollution vulnerability leads to DoS and Jailbreak attacks

Mesop is a Python-based UI framework that allows users to build web applications. A class pollution vulnerability in Mesop prior to version 0.14.1 allows attackers to overwrite global variables and class attributes in certain Mesop modules during runtime. This vulnerability could directly lead to...

8.1CVSS7.5AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•5 views

CVE-2025-30358: Improperly Controlled Modification of Dynamically-Determined Object Attributes

Mesop is a Python-based UI framework that allows users to build web applications. A class pollution vulnerability in Mesop prior to version 0.14.1 allows attackers to overwrite global variables and class attributes in certain Mesop modules during runtime. This vulnerability could directly lead to...

8.1CVSS6.2AI score0.0071EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/27 12:00 a.m.•32 views

PT-2025-13257

Name of the Vulnerable Software and Affected Versions Mesop versions prior to 0.14.1 Description A class pollution vulnerability in Mesop allows attackers to overwrite global variables and class attributes in certain Mesop modules during runtime, potentially leading to a denial of service DoS...

8.1CVSS6.6AI score0.0071EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2025/03/27 12:00 a.m.•10 views

PT-2025-13405

Name of the Vulnerable Software and Affected Versions MainWP MainWP Dashboard version 5.3.4 Description A Cross-Site Scripting XSS issue exists in the MainWP MainWP Dashboard, specifically in the class/class-mainwp-post-handler.php file. The problem arises from unsanitized user input from $...

6.1CVSS
SaveExploits0References7
NVD
NVD
•added 2025/03/26 11:15 a.m.•26 views

CVE-2025-27552

DBIx::Class::EncodedColumn use the rand function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files Crypt/Eksblowfish/Bcrypt.pm. This issue affects DBIx::Class::EncodedColumn until 0.00032...

4CVSS0.00118EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/03/26 11:15 a.m.•20 views

CVE-2025-27552

DBIx::Class::EncodedColumn use the rand function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files Crypt/Eksblowfish/Bcrypt.pm. This issue affects DBIx::Class::EncodedColumn until 0.00032...

7AI score0.00118EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/03/26 11:15 a.m.•18 views

CVE-2025-27551

DBIx::Class::EncodedColumn use the rand function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files lib/DBIx/Class/EncodedColumn/Digest.pm. This issue affects DBIx::Class::EncodedColumn until 0.00032...

7AI score
SaveExploits0References2
NVD
NVD
•added 2025/03/26 11:15 a.m.•23 views

CVE-2025-27551

DBIx::Class::EncodedColumn use the rand function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files lib/DBIx/Class/EncodedColumn/Digest.pm. This issue affects DBIx::Class::EncodedColumn until 0.00032...

4CVSS0.00118EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2025/03/26 11:15 a.m.•11 views

DEBIAN-CVE-2025-27551

DBIx::Class::EncodedColumn use the rand function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files lib/DBIx/Class/EncodedColumn/Digest.pm. This issue affects DBIx::Class::EncodedColumn until 0.00032...

4CVSS4.9AI score0.00118EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/03/26 11:15 a.m.•18 views

UBUNTU-CVE-2025-27551

DBIx::Class::EncodedColumn use the rand function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files lib/DBIx/Class/EncodedColumn/Digest.pm. This issue affects DBIx::Class::EncodedColumn until 0.00032...

4CVSS5.8AI score0.00118EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/03/26 11:08 a.m.•12 views

CVE-2025-27552 DBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Crypt/Eksblowfish/Bcrypt.pm

DBIx::Class::EncodedColumn use the rand function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files Crypt/Eksblowfish/Bcrypt.pm. This issue affects DBIx::Class::EncodedColumn until 0.00032...

7.3AI score0.00118EPSS
SaveExploits0References2
Rows per page
Query Builder