Lucene search
K

3635 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:38 a.m.8 views

CVE-2019-25103

A vulnerability has been found in simple-markdown 0.5.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file simple-markdown.js. The manipulation leads to inefficient regular expression complexity. The attack can be launched remotely. Upgrading to...

7.5CVSS6.9AI score0.0094EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:5 a.m.22 views

CVE-2014-125036

A vulnerability, which was classified as problematic, has been found in drybjed ansible-ntp. Affected by this issue is some unknown functionality of the file meta/main.yml. The manipulation leads to insufficient control of network message volume. The attack can only be done within the local...

4.3CVSS6.8AI score0.00399EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:25 a.m.6 views

CVE-2019-19093

eSOMS versions 4.0 to 6.0.3 do not enforce password complexity settings, potentially resulting in lower access security due to insecure user passwords...

6.5CVSS7.1AI score0.00832EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:26 a.m.4 views

CVE-2018-25074

A vulnerability was found in Prestaul skeemas and classified as problematic. This issue affects some unknown processing of the file validators/base.js. The manipulation of the argument uri leads to inefficient regular expression complexity. The patch is named...

7.5CVSS6.9AI score0.0091EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:56 a.m.7 views

CVE-2017-20162

A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the file index.js. The manipulation of the argument str leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has...

5.3CVSS6.8AI score0.00981EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:38 a.m.7 views

CVE-2015-10005

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

7.5CVSS6.9AI score0.00946EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:37 a.m.5 views

CVE-2015-10088

A vulnerability, which was classified as critical, was found in ayttm up to 0.5.0.89. This affects the function httpconnect in the library libproxy/proxy.c. The manipulation leads to format string. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The...

8.1CVSS6.9AI score0.00721EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2025/05/21 6:33 p.m.13 views

Ackites KillWxapkg Zip Bomb Resource Exhaustion

A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been rated as problematic. This issue affects some unknown processing of the component wxapkg File Decompression Handler. The manipulation leads to resource consumption. The attack may be initiated remotely. The complexity of an...

3.1CVSS6.8AI score0.0036EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2025/05/21 5:15 p.m.15 views

CVE-2025-5031

A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been rated as problematic. This issue affects some unknown processing of the component wxapkg File Decompression Handler. The manipulation leads to resource consumption. The attack may be initiated remotely. The complexity of an...

3.1CVSS0.0036EPSS
Exploits0References5
CVE
CVE
added 2025/05/21 5:0 p.m.52 views

CVE-2025-5031

CVE-2025-5031 affects Ackites KillWxapkg 2.4.1 and earlier, tied to wxapkg File Decompression Handler. The issue arises from improper handling of wxapkg decompression, leading to resource consumption (resource exhaustion) with a remote attack vector. Attack complexity is high, conditions require ...

3.1CVSS6.9AI score0.0036EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/05/21 12:0 a.m.1 views

PT-2025-22405 · Unknown · Ackites Killwxapkg

Name of the Vulnerable Software and Affected Versions: Ackites KillWxapkg versions up to 2.4.1 Description: A vulnerability was found in the wxapkg File Decompression Handler component, affecting some unknown processing. This issue leads to resource consumption and can be initiated remotely. The...

3.1CVSS3.5AI score0.0036EPSS
Exploits0References11
GitLab Advisory Database
GitLab Advisory Database
added 2025/05/21 12:0 a.m.12 views

Ackites KillWxapkg Zip Bomb Resource Exhaustion

A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been rated as problematic. This issue affects some unknown processing of the component wxapkg File Decompression Handler. The manipulation leads to resource consumption. The attack may be initiated remotely. The complexity of an...

3.1CVSS6.7AI score0.0036EPSS
Exploits0References7Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/20 11:19 p.m.19 views

CVE-2025-4839

A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java. The manipulation leads to permissiv...

8.1CVSS6.9AI score0.00252EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/20 11:18 p.m.6 views

CVE-2025-4894

A vulnerability classified as problematic was found in calmkart Django-sso-server up to 057247929a94ffc358788a37ab99e391379a4d15. This vulnerability affects the function genrsakeys of the file common/crypto.py. The manipulation leads to inadequate encryption strength. The attack can be initiated...

6.3CVSS6.9AI score0.00216EPSS
Exploits1
Packet Storm News
Packet Storm News
added 2025/05/19 12:0 a.m.2 views

Outsourced Privacy-Preserving Feature Selection Based on Fully Homomorphic Encryption

Feature selection is a technique that extracts a meaningful subset from a set of features in training data. When the training data is large-scale, appropriate feature selection enables the removal of redundant features, which can improve generalization performance, accelerate the training process...

6.6AI score
Exploits0
CVE
CVE
added 2025/05/18 8:0 p.m.42 views

CVE-2025-4894

CVE-2025-4894 affects calmkart Django-sso-server. The vulnerability is in common/crypto.py, function gen_rsa_keys, leading to inadequate encryption strength. Attacker could potentially exploit remotely; the CVE notes the attack complexity as high and exploitation as difficult, with no version det...

6.3CVSS4.6AI score0.00216EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2025/05/18 8:0 p.m.19 views

CVE-2025-4894 calmkart Django-sso-server crypto.py gen_rsa_keys inadequate encryption

A vulnerability classified as problematic was found in calmkart Django-sso-server up to 057247929a94ffc358788a37ab99e391379a4d15. This vulnerability affects the function genrsakeys of the file common/crypto.py. The manipulation leads to inadequate encryption strength. The attack can be initiated...

6.3CVSS0.00216EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/05/18 8:0 p.m.7 views

CVE-2025-4894 calmkart Django-sso-server crypto.py gen_rsa_keys inadequate encryption

A vulnerability classified as problematic was found in calmkart Django-sso-server up to 057247929a94ffc358788a37ab99e391379a4d15. This vulnerability affects the function genrsakeys of the file common/crypto.py. The manipulation leads to inadequate encryption strength. The attack can be initiated...

6.3CVSS4.3AI score0.00216EPSS
Exploits1References3
NVD
NVD
added 2025/05/17 10:15 p.m.46 views

CVE-2025-4839

A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java. The manipulation leads to permissiv...

8.1CVSS0.00252EPSS
Exploits1References4
NVD
NVD
added 2025/05/17 6:15 a.m.32 views

CVE-2025-4819

A vulnerability classified as problematic has been found in yproject RuoYi 4.8.0. Affected is an unknown function of the file /monitor/online/batchForceLogout of the component Offline Logout. The manipulation of the argument ids leads to improper authorization. It is possible to launch the attack...

3.1CVSS0.00369EPSS
Exploits1References4
Rows per page
Query Builder