Lucene search
+L

832 matches found

Patchstack
Patchstack
•added 2026/01/30 2:27 a.m.•23 views

WordPress WP Logs Book plugin <= 1.0.1 - Log Clearing via CSRF vulnerability

Log Clearing via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WP Logs Book versions = 1.0.1...

4.3CVSS5.8AI score0.00183EPSS
SaveExploits2References1Affected Software1
osv_clsa
osv_clsa
•added 2026/01/27 10:24 a.m.•25 views

CLSA-2026-1769509482 python3.9: Fix of CVE-2025-12084

CVE-2025-12084: fix denial-of-service by removing quadratic behavior in xml.dom.minidom node ID cache clearing when building deeply nested documents...

6.3CVSS6.5AI score0.00799EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
•added 2026/01/26 4:39 p.m.•14 views

Security update for python311

This update for python311 fixes the following issues: CVE-2025-12084: prevent quadratic behavior in node ID cache clearing bsc1254997. CVE-2025-13836: prevent reading an HTTP response from a server, if no read amount is specified, with using Content-Length per default as the length bsc1254400...

6.5CVSS6.8AI score0.01631EPSS
SaveExploits0References12
osv_suse
osv_suse
•added 2026/01/26 4:39 p.m.•11 views

SUSE-SU-2026:0299-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2025-12084: prevent quadratic behavior in node ID cache clearing bsc1254997. - CVE-2025-13836: prevent reading an HTTP response from a server, if no read amount is specified, with using Content-Length per default as the length bsc1254400...

7.5CVSS6.7AI score0.01631EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/01/21 3:27 p.m.•28 views

CVE-2025-1722

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...

7.5CVSS5.5AI score0.00397EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/21 3:27 p.m.•26 views

CVE-2025-1719

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...

7.5CVSS6AI score0.00397EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/20 3:16 p.m.•22 views

CVE-2025-1722

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...

7.5CVSS0.00397EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/01/20 3:16 p.m.•22 views

CVE-2025-1722

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...

7.5CVSS5.9AI score
SaveExploits0References1
NVD
NVD
•added 2026/01/20 3:16 p.m.•23 views

CVE-2025-1719

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...

7.5CVSS0.00397EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/20 3:02 p.m.•61 views

CVE-2025-1722

CVE-2025-1722 affects IBM Concert Software 1.0.0–2.1.0. The root cause is an improper clearing of heap memory, which could allow a remote attacker to obtain sensitive information stored in allocated memory. Public descriptions across IBM/Red Hat/NVD entries corroborate the memory disclosure risk ...

7.5CVSS6.1AI score0.00397EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/20 3:02 p.m.•10 views

CVE-2025-1722 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...

5.9CVSS6.1AI score0.00397EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/20 3:02 p.m.•35 views

CVE-2025-1722 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...

5.9CVSS0.00397EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/20 3:02 p.m.•19 views

CVE-2025-1722

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...

7.5CVSS5.8AI score0.00397EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/01/20 3:01 p.m.•50 views

CVE-2025-1719

IBM Concert Software versions 1.0.0–2.1.0 are affected by CVE-2025-1719 due to improper clearing of heap memory, which could allow a remote attacker to read sensitive information from allocated memory. The issue is documented across multiple sources (NVD/Red Hat/IBM) with IBM explicitly noting a ...

7.5CVSS6.1AI score0.00397EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/01/20 3:01 p.m.•39 views

CVE-2025-1719 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...

5.9CVSS0.00397EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/20 3:01 p.m.•11 views

CVE-2025-1719

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...

7.5CVSS5.8AI score0.00397EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/20 12:00 a.m.•7 views

CVE-2025-1722: Improper Clearing of Heap Memory Before Release

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...

7.5CVSS6.1AI score0.00397EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/20 12:00 a.m.•50 views

PT-2026-3583

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...

5.9CVSS5.8AI score0.00397EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/20 12:00 a.m.•39 views

PT-2026-3582

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...

5.9CVSS5.8AI score0.00397EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/01/19 1:17 a.m.•22 views

lz4-java: lz4-java: Information Disclosure via Insufficient Output Buffer Clearing

A flaw was found in lz4-java. This vulnerability allows disclosure of sensitive data via crafted compressed input due to insufficient clearing of the output buffer in Java-based decompressor implementations...

8.2CVSS7AI score0.00605EPSS
SaveExploits0References6
Rows per page
Query Builder