Lucene search
+L

742 matches found

CNNVD
CNNVD
added 2025/10/25 12:0 a.m.11 views

Emlog Pro 安全漏洞

Emlog Pro is an Emlog open source blogging system. A security vulnerability exists in Emlog Pro version 2.5.23, which stems from an error in the session CAPTCHA clearing logic that could lead to CAPTCHAs being reused...

9.1CVSS6.5AI score0.00371EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/24 8:13 p.m.10 views

EUVD-2025-35889

Emlog is an open source website building system. In version 2.5.23, Emlog Pro is vulnerable to a session verification code error due to a clearing logic error. This means the verification code could be reused anywhere an email verification code is required. This issue has been fixed in commit...

6.9CVSS6.5AI score0.00371EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/24 8:13 p.m.11 views

CVE-2025-62717 Emlog Pro session verification code error due to clearing logic error

Emlog is an open source website building system. In version 2.5.23, Emlog Pro is vulnerable to a session verification code error due to a clearing logic error. This means the verification code could be reused anywhere an email verification code is required. This issue has been fixed in commit...

6.9CVSS7.1AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/10/24 8:13 p.m.9 views

CVE-2025-62717 Emlog Pro session verification code error due to clearing logic error

Emlog is an open source website building system. In version 2.5.23, Emlog Pro is vulnerable to a session verification code error due to a clearing logic error. This means the verification code could be reused anywhere an email verification code is required. This issue has been fixed in commit...

6.9CVSS6.7AI score0.00371EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/24 8:13 p.m.43 views

CVE-2025-62717

CVE-2025-62717 affects Emlog Pro 2.5.23, where a clearing-logic error in session verification code allows reuse of verification codes. The issue has a fix in commit 1f726df. Remediation: upgrade to a version including the fix (per the cited advisories). If upgrading is not possible, apply the pat...

9.1CVSS6.7AI score0.00371EPSS
SaveExploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2025/10/24 12:57 a.m.5 views

SUSE CVE-2023-53713

In the Linux kernel, the following vulnerability has been resolved: arm64: sme: Use STR P to clear FFR context field in streaming SVE mode The FFR is a predicate register which can vary between 16 and 256 bits in size depending upon the configured vector length. When saving the SVE state in...

7.8CVSS6.5AI score0.00142EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
added 2025/10/24 12:0 a.m.7 views

PT-2025-43672

Name of the Vulnerable Software and Affected Versions Emlog versions prior to the commit 1f726df Emlog Pro version 2.5.23 Description Emlog Pro version 2.5.23 contains a flaw related to session verification codes. A clearing logic error allows the reuse of email verification codes in any context...

6.9CVSS6.6AI score0.00371EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/10/22 12:11 a.m.19 views

CVE-2025-56799

Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a crafted folder name. NOTE: this is disputed by the Supplier because a crafted folder name would arise only if the local user were attacking himself...

6.5CVSS7.3AI score0.01219EPSS
SaveExploits2References1
OSV
OSV
added 2025/10/21 7:21 p.m.11 views

CVE-2025-56799

Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a crafted folder name. NOTE: this is disputed by the Supplier because a crafted folder name would arise only if the local user were attacking himself...

6.5CVSS5.8AI score0.01219EPSS
SaveExploits2References2
NVD
NVD
added 2025/10/21 7:21 p.m.13 views

CVE-2025-56799

Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a crafted folder name. NOTE: this is disputed by the Supplier because a crafted folder name would arise only if the local user were attacking himself...

6.5CVSS0.01219EPSS
SaveExploits2References2
EUVD
EUVD
added 2025/10/21 12:0 a.m.13 views

EUVD-2025-35237

Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a crafted folder name...

6.5CVSS7AI score0.01219EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
added 2025/10/21 12:0 a.m.7 views

CVE-2025-56799

Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a crafted folder name. NOTE: this is disputed by the Supplier because a crafted folder name would arise only if the local user were attacking himself...

6.9AI score0.01219EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2025/10/21 12:0 a.m.26 views

CVE-2025-56799

Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a crafted folder name. NOTE: this is disputed by the Supplier because a crafted folder name would arise only if the local user were attacking himself...

0.01219EPSS
SaveExploits2References2
CVE
CVE
added 2025/10/21 12:0 a.m.23 views

CVE-2025-56799

CVE-2025-56799 affects the Reolink Desktop Application (v8.18.12). The issue is an OS command injection in the cache-clearing scheduler, where a shell command is assembled using a folder path read from a config file without proper sanitization. This can allow an attacker to inject arbitrary comma...

6.5CVSS6.9AI score0.01219EPSS
SaveExploits2References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/10/14 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2023-53642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86: fix clearuserrepgood exception handling annotation This code no longer exists in mainline, because it was removed in commit d2c95f9d6802 x86: don't use...

5.5CVSS5.7AI score0.00146EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2025/10/08 11:39 p.m.8 views

SUSE CVE-2022-50533

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mlme: fix null-ptr deref on failed assoc If association to an AP without a link 0 fails, then we crash in tracing because it assumes that either apmldaddr or link 0 BSS is valid, since we clear sdata-vif.validlink...

5.5CVSS6.2AI score0.00145EPSS
SaveExploits0References3
NVD
NVD
added 2025/10/07 4:15 p.m.8 views

CVE-2023-53642

In the Linux kernel, the following vulnerability has been resolved: x86: fix clearuserrepgood exception handling annotation This code no longer exists in mainline, because it was removed in commit d2c95f9d6802 "x86: don't use REPGOOD or ERMS for user memory clearing" upstream. However, rather tha...

5.5CVSS0.00146EPSS
SaveExploits0References4
OSV
OSV
added 2025/10/07 4:15 p.m.7 views

UBUNTU-CVE-2023-53642

In the Linux kernel, the following vulnerability has been resolved: x86: fix clearuserrepgood exception handling annotation This code no longer exists in mainline, because it was removed in commit d2c95f9d6802 "x86: don't use REPGOOD or ERMS for user memory clearing" upstream. However, rather tha...

5.5CVSS5.8AI score0.00146EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 3:19 p.m.9 views

EUVD-2025-32754

In the Linux kernel, the following vulnerability has been resolved: x86: fix clearuserrepgood exception handling annotation This code no longer exists in mainline, because it was removed in commit d2c95f9d6802 "x86: don't use REPGOOD or ERMS for user memory clearing" upstream. However, rather tha...

6AI score0.00146EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/07 3:19 p.m.7 views

CVE-2023-53642 x86: fix clear_user_rep_good() exception handling annotation

In the Linux kernel, the following vulnerability has been resolved: x86: fix clearuserrepgood exception handling annotation This code no longer exists in mainline, because it was removed in commit d2c95f9d6802 "x86: don't use REPGOOD or ERMS for user memory clearing" upstream. However, rather tha...

6.6AI score
SaveExploits0References7
Rows per page
Query Builder