Lucene search
+L

755 matches found

AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.4 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: A rare race condition in genradixptralloc has been fixed. If we need to increase the tree depth, we will allocate a new node. If another thread increases the tree depth before us, we will still have a...

4.7CVSS6.2AI score0.00169EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/02/05 11:52 a.m.23 views

CVE-2024-7886

A vulnerability has been found in Scooter Software Beyond Compare up to 3.3.5.15075 and classified as critical. Affected by this vulnerability is an unknown functionality in the library 7zxa.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The real...

8.5CVSS6.8AI score0.00193EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/16 9:15 p.m.13 views

CVE-2025-23909

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Common Ninja Compare Ninja compare-ninja-comparison-tables allows Stored XSS.This issue affects Compare Ninja: from n/a through = 2.1.0...

6.5CVSS0.00363EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/16 8:7 p.m.6 views

CVE-2025-23909 WordPress Compare Ninja plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Common Ninja Compare Ninja compare-ninja-comparison-tables allows Stored XSS.This issue affects Compare Ninja: from n/a through = 2.1.0...

6.5CVSS7.2AI score0.00363EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/16 8:7 p.m.49 views

CVE-2025-23909

Technical details (affected product/version, root cause, impact, and fix) are not provided in the supplied documents. Please monitor for updates from vendors or CVE entries that reveal concrete details.

6.5CVSS7.2AI score0.00363EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/16 8:7 p.m.26 views

CVE-2025-23909 WordPress Compare Ninja plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Common Ninja Compare Ninja compare-ninja-comparison-tables allows Stored XSS.This issue affects Compare Ninja: from n/a through = 2.1.0...

6.5CVSS0.00363EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.7 views

WordPress Compare Ninja plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Compare Ninja versions = 2.1.0...

6.5CVSS6.1AI score0.00363EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/01/16 12:0 a.m.4 views

WordPress plugin Compare Ninja 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00363EPSS
SaveExploits0References2
OSV
OSV
added 2025/01/14 1:15 a.m.1 views

DEBIAN-CVE-2024-57644

An issue in the itchashcompare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.5AI score0.00561EPSS
SaveExploits1References1
OSV
OSV
added 2025/01/14 1:15 a.m.9 views

UBUNTU-CVE-2024-57644

An issue in the itchashcompare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS5.9AI score0.00561EPSS
SaveExploits1References3
OSV
OSV
added 2025/01/14 12:0 a.m.14 views

CVE-2024-57644

An issue in the itchashcompare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.3AI score
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.9 views

Virtuoso Open-Source Edition 安全漏洞

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform open-sourced by OpenLink Software. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which...

7.5CVSS7.5AI score0.00561EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2025/01/07 7:39 a.m.7 views

WordPress Compare Products for WooCommerce plugin <= 3.2.1 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Brian Sans-Souci liardom in WordPress Plugin Compare Products for WooCommerce versions = 3.2.1...

8.1CVSS7.3AI score0.00791EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/07 4:22 a.m.6 views

CVE-2024-12435 Compare Products for WooCommerce <= 3.2.1 - Reflected Cross-Site Scripting

The Compare Products for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘sfeature’ parameter in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

6.1CVSS6.4AI score0.00368EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/01/07 4:22 a.m.19 views

CVE-2024-12435 Compare Products for WooCommerce <= 3.2.1 - Reflected Cross-Site Scripting

The Compare Products for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘sfeature’ parameter in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

6.1CVSS0.00368EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.8 views

WordPress plugin Compare Products for WooCommerce 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in the...

8.1CVSS8.5AI score0.00791EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/01/07 12:0 a.m.6 views

PT-2025-1811 · WordPress · Compare Products For Woocommerce

Name of the Vulnerable Software and Affected Versions: Compare Products for WooCommerce plugin for WordPress versions up to, and including, 3.2.1 Description: The issue concerns a PHP Object Injection vulnerability in the Compare Products for WooCommerce plugin for WordPress. This vulnerability...

8.1CVSS8AI score0.00791EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.5 views

WordPress plugin Compare Products for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.1CVSS7.7AI score0.00368EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.3 views

PT-2025-36309

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where user code could potentially execute a Load Word and Swap LWS compare and swap operation at a memory address protected against read access at...

5.5CVSS6.3AI score0.00136EPSS
SaveExploits0
OSV
OSV
added 2024/12/29 7:15 a.m.1 views

DEBIAN-CVE-2024-56738

GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks...

5.3CVSS7AI score0.00413EPSS
SaveExploits0References1
Rows per page
Query Builder