Lucene search
+L

415 matches found

Cvelist
Cvelist
added 2025/06/06 12:53 p.m.15 views

CVE-2025-49283 WordPress Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant plugin <= 4.1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Matthias Nordwig Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant gdpr-compliant-recaptcha-for-all-forms allows Cross Site Request Forgery.This issue affects Anti-spam, Spam protection, ReCaptcha for all forms and...

4.3CVSS0.0014EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.4 views

WordPress plugin Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. Cross-site request forgery vulnerability...

4.3CVSS4.8AI score0.0014EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:7 a.m.10 views

CVE-2023-5823

Cross-Site Request Forgery CSRF vulnerability in ThemeKraft TK Google Fonts GDPR Compliant plugin = 2.2.11 versions...

8.8CVSS7.1AI score0.00214EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 9:56 p.m.8 views

CVE-2022-34831

An issue was discovered in Keyfactor PrimeKey EJBCA before 7.9.0, related to possible inconsistencies in DNS identifiers submitted in an ACME order and the corresponding CSR submitted during finalization. During the ACME enrollment process, an order is submitted containing an identifier for one o...

9.8CVSS7AI score0.00447EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:45 p.m.8 views

CVE-2022-47445

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Web-X Be POPIA Compliant be-popia-compliant allows SQL Injection.This issue affects Be POPIA Compliant: from n/a through 1.2.0...

9.8CVSS8.8AI score0.00633EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2025/02/28 2:20 a.m.10 views

SUSE CVE-2025-21776

In the Linux kernel, the following vulnerability has been resolved: USB: hub: Ignore non-compliant devices with too many configs or interfaces Robert Morris created a test program which can cause usbhubtostructhub to dereference a NULL or inappropriate pointer: Oops: general protection fault,...

5.5CVSS6.7AI score0.00229EPSS
Exploits0References14
NVD
NVD
added 2025/02/27 3:15 a.m.8 views

CVE-2025-21776

In the Linux kernel, the following vulnerability has been resolved: USB: hub: Ignore non-compliant devices with too many configs or interfaces Robert Morris created a test program which can cause usbhubtostructhub to dereference a NULL or inappropriate pointer: Oops: general protection fault,...

5.5CVSS0.00229EPSS
Exploits0References12
OSV
OSV
added 2025/02/27 3:15 a.m.1 views

DEBIAN-CVE-2025-21776

In the Linux kernel, the following vulnerability has been resolved: USB: hub: Ignore non-compliant devices with too many configs or interfaces Robert Morris created a test program which can cause usbhubtostructhub to dereference a NULL or inappropriate pointer: Oops: general protection fault,...

5.5CVSS5.5AI score0.00229EPSS
Exploits0References1
OSV
OSV
added 2025/02/27 3:15 a.m.5 views

UBUNTU-CVE-2025-21776

In the Linux kernel, the following vulnerability has been resolved: USB: hub: Ignore non-compliant devices with too many configs or interfaces Robert Morris created a test program which can cause usbhubtostructhub to dereference a NULL or inappropriate pointer: Oops: general protection fault,...

5.5CVSS6.1AI score0.00229EPSS
Exploits0References47
Cvelist
Cvelist
added 2025/02/27 2:18 a.m.15 views

CVE-2025-21776 USB: hub: Ignore non-compliant devices with too many configs or interfaces

In the Linux kernel, the following vulnerability has been resolved: USB: hub: Ignore non-compliant devices with too many configs or interfaces Robert Morris created a test program which can cause usbhubtostructhub to dereference a NULL or inappropriate pointer: Oops: general protection fault,...

0.00229EPSS
Exploits0References8
Debian CVE
Debian CVE
added 2025/02/27 2:18 a.m.8 views

CVE-2025-21776

In the Linux kernel, the following vulnerability has been resolved: USB: hub: Ignore non-compliant devices with too many configs or interfaces Robert Morris created a test program which can cause usbhubtostructhub to dereference a NULL or inappropriate pointer: Oops: general protection fault,...

5.5CVSS5.5AI score0.00229EPSS
Exploits0
OSV
OSV
added 2025/02/27 2:18 a.m.11 views

CVE-2025-21776 USB: hub: Ignore non-compliant devices with too many configs or interfaces

In the Linux kernel, the following vulnerability has been resolved: USB: hub: Ignore non-compliant devices with too many configs or interfaces Robert Morris created a test program which can cause usbhubtostructhub to dereference a NULL or inappropriate pointer: Oops: general protection fault,...

5.5CVSS5.9AI score0.00229EPSS
Exploits0References15
CNNVD
CNNVD
added 2025/02/27 12:0 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the USB hub not properly handling non-compliant devices, which could result in a null pointer dereference...

5.5CVSS6.3AI score0.00229EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2025/01/30 5:52 p.m.39 views

KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources

Impact By design, AdmissionPolicy and AdmissionPolicyGroup can evaluate only namespaced resources. The resources to be evaluated are determined by the rules provided by the user when defining the policy. There might be Kubernetes namespaced resources that should not be validated by AdmissionPolic...

6.5CVSS6.5AI score0.00335EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2025/01/30 4:15 p.m.33 views

CVE-2025-24376

kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies. By design, AdmissionPolicy and AdmissionPolicyGroup can evaluate only namespaced resources. The resources to be evaluated are determined by the rules provided by the user when...

6.5CVSS0.00335EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/01/30 3:51 p.m.19 views

CVE-2025-24376 The kubewarden-controller AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources

kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies. By design, AdmissionPolicy and AdmissionPolicyGroup can evaluate only namespaced resources. The resources to be evaluated are determined by the rules provided by the user when...

6.5CVSS6.5AI score0.00335EPSS
Exploits0References2
Fedora
Fedora
added 2025/01/24 1:26 a.m.11 views

[SECURITY] Fedora 41 Update: pam-u2f-1.3.2-1.fc41

The PAM U2F module provides an easy way to integrate the Yubikey or other U2F-compliant authenticators into your existing user authentication infrastructure...

7.3CVSS7.1AI score0.00397EPSS
Exploits0
NVD
NVD
added 2025/01/15 4:15 a.m.11 views

CVE-2025-23013

In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module PAM that can be deployed to support authentication using a YubiKey or other FIDO compliant authenticators on macOS or Linux. This software package has an issue...

7.3CVSS0.00397EPSS
Exploits0References7
AlpineLinux
AlpineLinux
added 2025/01/15 12:0 a.m.10 views

CVE-2025-23013

In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module PAM that can be deployed to support authentication using a YubiKey or other FIDO compliant authenticators on macOS or Linux. This software package has an issue...

7.3CVSS7.1AI score0.00397EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2024/12/31 2:20 p.m.7 views

CVE-2023-6602

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists...

5.3CVSS5.2AI score0.00419EPSS
Exploits1
Rows per page
Query Builder