Lucene search
+L

726 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 5:11 a.m.9 views

CVE-2023-32098

Compiler removal of buffer clearing in slisesignmessage in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

7.5CVSS7AI score0.0053EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:11 a.m.11 views

CVE-2023-32100

Compiler removal of buffer clearing in slisedrivermaccompute in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

7.5CVSS7AI score0.00484EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:10 a.m.9 views

CVE-2023-32099

Compiler removal of buffer clearing in slisesignhash in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

7.5CVSS7AI score0.0053EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:10 a.m.9 views

CVE-2023-32097

Compiler removal of buffer clearing in slicryptotransparentaeaddecrypttag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

7.5CVSS7AI score0.00481EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:40 a.m.11 views

CVE-2023-0965

Compiler removal of buffer clearing in slicryptoacctransparentkeyagreement in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

7.5CVSS7AI score0.00481EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:2 a.m.9 views

CVE-2023-1868

The YourChannel plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check when clearing the plugin cache via the yrcclearcache GET parameter in versions up to, and including, 1.2.3. This makes it possible for unauthenticated attackers to clear the plugin's...

6.5CVSS5.4AI score0.00615EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:33 a.m.10 views

CVE-2023-1346

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the clearpagecache function. This makes it possible for unauthenticated attackers to clear the...

4.3CVSS6.4AI score0.00315EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:31 a.m.5 views

CVE-2023-1925

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcclearcacheofallsitescallback function. This makes it possible for unauthenticated attackers to clear cache...

4.3CVSS5.2AI score0.00227EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:50 a.m.9 views

CVE-2023-2481

Compiler removal of buffer clearing in sliseopaqueimportkey in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

7.5CVSS7AI score0.00484EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:34 p.m.23 views

CVE-2021-24966

The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high privilege users to clear arbitrary files on the web server, including those outside of the blog folder...

4.9CVSS6.8AI score0.05188EPSS
SaveExploits5References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:31 a.m.8 views

CVE-2019-14115

u'Information disclosure issue occurs as in current logic as secure touch is released without clearing the display session which can result in user reading the secure input while touch is in non-secure domain as secure display is active' in Snapdragon Auto, Snapdragon Compute, Snapdragon...

5.5CVSS7.2AI score0.00211EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:2 a.m.9 views

CVE-2019-17512

There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can clear the router's log file via act=clear=sysact to logclear.php, which could be used to erase attack traces...

9.1CVSS7.1AI score0.01524EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2025/05/13 8:28 a.m.5 views

kernel: fsnotify: clear PARENT_WATCHED flags lazily

In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENTWATCHED flags lazily In some setups directories can have many usually negative dentries. Hence fsnotifyupdatechilddentryflags function can take a significant amount of time. Since the bulk of this function...

4.7CVSS6.5AI score0.0016EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/05/09 6:8 p.m.8 views

CVE-2025-20195

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a CSRF attack and execute commands on the CLI of an affected device. This vulnerability is due to insufficient CSRF protections for the web-based management...

4.3CVSS7.2AI score0.00195EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/07 6:15 p.m.4 views

CVE-2025-20195

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a CSRF attack and execute commands on the CLI of an affected device. This vulnerability is due to insufficient CSRF protections for the web-based management...

4.3CVSS5.9AI score0.00195EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/07 6:15 p.m.15 views

CVE-2025-20195

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a CSRF attack and execute commands on the CLI of an affected device. This vulnerability is due to insufficient CSRF protections for the web-based management...

4.3CVSS0.00195EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/07 5:48 p.m.112 views

CVE-2025-20194

Cisco IOS XE Software Web-Based Management Interface vulnerability (CVE-2025-20194) affects Cisco IOS XE: an authenticated, low-privileged, remote attacker can exploit insufficient input validation in the web UI to perform an injection attack. Consequences described include reading limited files ...

5.4CVSS5.5AI score0.00261EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/07 12:0 a.m.6 views

PT-2025-20266 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is due to insufficient input validation in the web-based management interface, allowing an authenticated, low-privileged, remote attacker to perform an injection...

5.4CVSS6.2AI score0.00261EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/05/04 4:31 p.m.8 views

CVE-2023-53085

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buffer before fetching the EDID to avoid leaking slab data to the logs on errors that leave the buffer unchanged...

5.5CVSS7.1AI score0.00162EPSS
SaveExploits0References4
OSV
OSV
added 2025/05/02 4:15 p.m.2 views

DEBIAN-CVE-2023-53073

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Always clear status for idx The variable 'status' which contains the unhandled overflow bits is not being properly masked in some cases, displaying the following warning: WARNING: CPU: 156 PID: 475601 at...

5.5CVSS5.5AI score0.00174EPSS
SaveExploits0References1
Rows per page
Query Builder