Lucene search
+L

5769 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/22 12:00 a.m.•9 views

CVE-2025-0625: Improper Control of Resource Identifiers

A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. This affects an unknown part of the component Attachment Handler. The manipulation leads to improper control of resource identifiers. It is possible to initiate the attack remotely. The...

3.1CVSS4.8AI score0.0049EPSS
SaveExploits1References1
NVD
NVD
•added 2025/01/20 3:15 a.m.•16 views

CVE-2024-13524

A vulnerability has been found in obsproject OBS Studio up to 30.0.2 on Windows and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to untrusted search path. The attack needs to be approached locally. The complexity of an attack is...

4.5CVSS0.00202EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/01/20 2:00 a.m.•5 views

CVE-2024-13524 obsproject OBS Studio untrusted search path

A vulnerability has been found in obsproject OBS Studio up to 30.0.2 on Windows and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to untrusted search path. The attack needs to be approached locally. The complexity of an attack is...

4.5CVSS4.6AI score0.00202EPSS
SaveExploits0References4
CVE
CVE
•added 2025/01/20 2:00 a.m.•61 views

CVE-2024-13524

OBS Studio (obsproject) versions up to 30.0.2 on Windows are affected by a vulnerability that creates an untrusted search path. The issue affects an unknown functionality and requires local access to exploit; attack complexity is rated high and exploitation is considered difficult. A patch is rec...

4.5CVSS4.6AI score0.00202EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/01/20 2:00 a.m.•32 views

CVE-2024-13524 obsproject OBS Studio untrusted search path

A vulnerability has been found in obsproject OBS Studio up to 30.0.2 on Windows and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to untrusted search path. The attack needs to be approached locally. The complexity of an attack is...

4.5CVSS0.00202EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2025/01/20 2:00 a.m.•14 views

CVE-2024-13524

A vulnerability has been found in obsproject OBS Studio up to 30.0.2 on Windows and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to untrusted search path. The attack needs to be approached locally. The complexity of an attack is...

4.5CVSS3.5AI score0.00202EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/20 12:00 a.m.•15 views

PT-2025-2206 · Obsproject · Obs Studio

Name of the Vulnerable Software and Affected Versions: obsproject OBS Studio versions up to 30.0.2 Description: A vulnerability has been found in obsproject OBS Studio, affecting an unknown functionality. The manipulation leads to an untrusted search path. The attack needs to be approached locall...

4.5CVSS4.8AI score0.00202EPSS
SaveExploits0References9
NVD
NVD
•added 2025/01/19 11:15 p.m.•27 views

CVE-2025-0575

A vulnerability has been found in Union Bank of India Vyom 8.0.34 on Android and classified as problematic. This vulnerability affects unknown code of the component Rooting Detection. The manipulation leads to protection mechanism failure. The attack needs to be approached locally. The complexity...

3.9CVSS0.00167EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/01/19 11:00 p.m.•38 views

CVE-2025-0575 Union Bank of India Vyom Rooting Detection protection mechanism

A vulnerability has been found in Union Bank of India Vyom 8.0.34 on Android and classified as problematic. This vulnerability affects unknown code of the component Rooting Detection. The manipulation leads to protection mechanism failure. The attack needs to be approached locally. The complexity...

3.9CVSS0.00167EPSS
SaveExploits0References4
CVE
CVE
•added 2025/01/19 11:00 p.m.•61 views

CVE-2025-0575

Union Bank of India Vyom Android app (version 8.0.34) contains a vulnerability in the Rooting Detection component. Local manipulation can cause protection mechanism failure; attack complexity is high, and exploitation is deemed difficult, but a public exploit has been disclosed. Affected product:...

3.9CVSS6.8AI score0.00167EPSS
SaveExploits0References4
NVD
NVD
•added 2025/01/19 8:15 a.m.•19 views

CVE-2025-0567

A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the library profapi.dll of the component Installer. The manipulation leads to untrusted search path. Attacking locally is a requirement. The complexity of an attack ...

4.5CVSS0.00196EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/01/19 7:31 a.m.•36 views

CVE-2025-0567 Epic Games Launcher Installer profapi.dll untrusted search path

A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the library profapi.dll of the component Installer. The manipulation leads to untrusted search path. Attacking locally is a requirement. The complexity of an attack ...

4.5CVSS0.00196EPSS
SaveExploits0References3
CVE
CVE
•added 2025/01/19 7:31 a.m.•80 views

CVE-2025-0567

CVE-2025-0567 affects Epic Games Launcher (versions up to 17.2.1). The issue is in the profapi.dll library in the Installer component, causing an untrusted search path. Local attack is required, with high attack complexity and low overall impact (confidentiality/integrity/availability). The CVSS ...

4.5CVSS4.8AI score0.00196EPSS
SaveExploits0References3
osv_bit
osv_bit
•added 2025/01/16 7:24 a.m.•54 views

BIT-PYTHON-MIN-2020-10735

A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int"text", a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits float, decimal, int.frombytes, and int for binary bases 2, 4, 8, 16, and 32 are no...

7.5CVSS6.8AI score0.04486EPSS
SaveExploits0References30
BDU FSTEC
BDU FSTEC
•added 2025/01/16 12:00 a.m.•22 views

GitLab Algorithmic Complexity DoS

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to algorithmic complexity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions...

4.3CVSS5.5AI score0.00714EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2025/01/09 6:02 a.m.•36 views

CVE-2024-6324 Inefficient Algorithmic Complexity in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. It was possible to trigger a DoS by creating cyclic references between epics...

4.3CVSS0.00714EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/01/09 6:02 a.m.•17 views

CVE-2024-6324 Inefficient Algorithmic Complexity in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. It was possible to trigger a DoS by creating cyclic references between epics...

4.3CVSS6.5AI score0.00714EPSS
SaveExploits1References3
CVE
CVE
•added 2025/01/09 12:31 a.m.•63 views

CVE-2024-13198

CVE-2024-13198 affects langhsu Mblog Blog System 3.5.0. The vulnerability is in an unknown function of the file /login , causing an observable response discrepancy. It can be exploited remotely, with attack complexity described as high. Exploit has been disclosed publicly. Vendor response to disc...

6.3CVSS4.5AI score0.007EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/09 12:31 a.m.•12 views

CVE-2024-13198 langhsu Mblog Blog System login observable response discrepancy

A vulnerability classified as problematic has been found in langhsu Mblog Blog System 3.5.0. Affected is an unknown function of the file /login. The manipulation leads to observable response discrepancy. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

6.3CVSS4.5AI score0.007EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/01/09 12:31 a.m.•35 views

CVE-2024-13198 langhsu Mblog Blog System login observable response discrepancy

A vulnerability classified as problematic has been found in langhsu Mblog Blog System 3.5.0. Affected is an unknown function of the file /login. The manipulation leads to observable response discrepancy. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

6.3CVSS0.007EPSS
SaveExploits1References4
Rows per page
Query Builder