Lucene search
+L

20735 matches found

BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.8 views

The vulnerability of the irq-qcom-mpm.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the irq-qcom-mpm.c component in the Linux operating system’s kernel is related to incorrect calculation of the buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00198EPSS
SaveExploits0References16Affected Software4
Vulnrichment
Vulnrichment
added 2025/09/27 9:32 p.m.5 views

CVE-2025-11080 zhuimengshaonian wisdom-education ExamInfoController.java selectStudentExamInfoList improper authorization

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. This vulnerability affects the function selectStudentExamInfoList of the file src/main/java/com/education/api/controller/student/ExamInfoController.java. Such manipulation of the argument subjectId leads ...

5.3CVSS6.5AI score0.00262EPSS
SaveExploits0References5
CVE
CVE
added 2025/09/27 9:32 p.m.23 views

CVE-2025-11080

CVE-2025-11080 affects zhuimengshaonian wisdom-education up to 1.0.4. The vulnerability lies in ExamInfoController.java, in the selectStudentExamInfoList function, where manipulation of the subjectId parameter leads to improper authorization. Itمكن be exploited remotely and the exploit has been p...

5.3CVSS6.5AI score0.00262EPSS
SaveExploits0References5
NVD
NVD
added 2025/09/27 9:15 p.m.12 views

CVE-2025-11078

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/controller.php?action=photos. The manipulation of the argument photo leads to unrestricted upload. The attack is possible to be carried out...

8.8CVSS0.00327EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/27 8:32 p.m.29 views

CVE-2025-11078

The CVE-2025-11078 pertains to itsourcecode Open Source Job Portal 1.0. Affected component is the file /admin/user/controller.php?action=photos, where manipulating the photo parameter enables unrestricted file uploads. This vulnerability is remotely exploitable and a public exploit exists. Connec...

8.8CVSS6.5AI score0.00327EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/09/27 8:32 p.m.25 views

CVE-2025-11078 itsourcecode Open Source Job Portal controller.php unrestricted upload

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/controller.php?action=photos. The manipulation of the argument photo leads to unrestricted upload. The attack is possible to be carried out...

6.5CVSS0.00327EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/27 8:32 p.m.5 views

CVE-2025-11078 itsourcecode Open Source Job Portal controller.php unrestricted upload

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/controller.php?action=photos. The manipulation of the argument photo leads to unrestricted upload. The attack is possible to be carried out...

6.5CVSS6.5AI score0.00327EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/09/27 2:50 p.m.12 views

CVE-2025-36326

IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to obtain sensitive information due to the use of hardcoded cryptographic keys for signing session cookies...

3.7CVSS6.4AI score0.00228EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/27 12:00 a.m.13 views

wisdom-education 授权问题漏洞

wisdom-education is a cloud intelligence education platform by zhuimengshaonian individual developer. There is an authorization issue vulnerability in wisdom-education 1.0.4 and earlier versions, which originates from the function in the file...

5.3CVSS4.8AI score0.00262EPSS
SaveExploits0References6
OSV
OSV
added 2025/09/26 3:16 p.m.9 views

CVE-2025-36326

IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to obtain sensitive information due to the use of hardcoded cryptographic keys for signing session cookies...

7.5CVSS5.8AI score0.00228EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/26 3:16 p.m.13 views

CVE-2025-36326

IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to obtain sensitive information due to the use of hardcoded cryptographic keys for signing session cookies...

7.5CVSS0.00228EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/26 2:20 p.m.8 views

CVE-2025-36326 IBM Controller information disclosure

IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to obtain sensitive information due to the use of hardcoded cryptographic keys for signing session cookies...

3.7CVSS6AI score0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/26 2:20 p.m.17 views

CVE-2025-36326 IBM Controller information disclosure

IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to obtain sensitive information due to the use of hardcoded cryptographic keys for signing session cookies...

3.7CVSS0.00228EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/26 2:20 p.m.44 views

CVE-2025-36326

CVE-2025-36326 affects IBM Cognos Controller 11.0.0–11.0.1 FP6 and IBM Controller 11.1.0–11.1.1. The issue arises from hardcoded cryptographic keys used to sign session cookies, enabling potential disclosure of sensitive information. The IBM security bulletin lists remediation: upgrade to IBM Cog...

7.5CVSS6AI score0.00228EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
added 2025/09/26 12:00 a.m.15 views

IBM Cognos Controller和IBM Controller 安全漏洞

IBM Cognos Controller is an enterprise financial consolidation and reporting software from IBM. A security vulnerability exists in IBM Cognos Controller versions 11.0.0 through 11.0.1 and IBM Controller versions 11.1.0 through 11.1.1, which stems from the use of a hard-coded encryption key to sig...

7.5CVSS6.4AI score0.00228EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/26 12:00 a.m.9 views

Ubuntu 22.04 LTS : Linux kernel (Azure FIPS) vulnerabilities (USN-7775-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7775-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

9.8CVSS7.1AI score0.01254EPSS
SaveExploits9References144
Positive Technologies
Positive Technologies
added 2025/09/26 12:00 a.m.15 views

PT-2025-39647

Name of the Vulnerable Software and Affected Versions IBM Cognos Controller versions 11.0.0 through 11.0.1 IBM Controller versions 11.1.0 through 11.1.1 Description The software uses hardcoded cryptographic keys for signing session cookies, potentially allowing an attacker to obtain sensitive...

3.7CVSS6.3AI score0.00228EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/09/25 9:46 p.m.23 views

CVE-2024-21935

Improper input validation in Satellite Management Controller SMC may allow an attacker with privileges to manipulate Redfish® API commands to remove files from the local root directory, potentially resulting in data corruption...

5CVSS6.8AI score0.00215EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/25 9:15 p.m.17 views

CVE-2025-26482

Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure...

4.9CVSS0.00306EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/25 4:15 p.m.11 views

CVE-2025-57446

An issue in O-RAN Near Realtime RIC ric-plt-submgr in the J-Release environment, allows remote attackers to cause a denial of service DoS via a crafted request to the Subscription Manager API component...

7.5CVSS0.00423EPSS
SaveExploits0References2
Rows per page
Query Builder