Lucene search
+L

9971 matches found

Positive Technologies
Positive Technologies
added 2025/01/18 12:00 a.m.19 views

PT-2025-9007

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel's hrtimers infrastructure allows wakeups to be performed by an outgoing CPU after the CPUHP AP HRTIMERS DYING stage, potentially resulting in bandwidt...

5.5CVSS7.2AI score0.00202EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/01/17 12:00 a.m.8 views

Newtec/iDirect NTC2218、Newtec/iDirect NTC2250和Newtec/iDirect NTC2299 安全漏洞

The Newtec/iDirect NTC2218 and others are a modem from Newtec/iDirect. A security vulnerability exists in the Newtec/iDirect NTC2218, Newtec/iDirect NTC2250, and Newtec/iDirect NTC2299, which stems from a buffer copy that does not check the size of the input, resulting in remote code inclusion...

9.5CVSS7.7AI score0.00519EPSS
SaveExploits0References3
NVD
NVD
added 2025/01/16 9:15 p.m.9 views

CVE-2025-23817

Cross-Site Request Forgery CSRF vulnerability in mahadirz MHR-Custom-Anti-Copy mhr-custom-anti-copy allows Stored XSS.This issue affects MHR-Custom-Anti-Copy: from n/a through = 2.0...

7.1CVSS0.00204EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/16 9:15 p.m.13 views

CVE-2025-23764

Missing Authorization vulnerability in ujjavaljani Copy Move Posts copy-move-posts.This issue affects Copy Move Posts: from n/a through = 1.6...

5.3CVSS0.00455EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/16 8:08 p.m.31 views

CVE-2025-23764 WordPress Copy Move Posts plugin <= 1.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in ujjavaljani Copy Move Posts copy-move-posts.This issue affects Copy Move Posts: from n/a through = 1.6...

5.3CVSS0.00455EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/16 8:07 p.m.51 views

CVE-2025-23817

CVE-2025-23817 (CWE- CSRF to Stored XSS) affects the MHR-Custom-Anti-Copy product up to version 2.0, per the connected Red Hat entry. The Red Hat description states a Cross-Site Request Forgery (CSRF) vulnerability that allows Stored XSS in Mahadir Ahmad MHR-Custom-Anti-Copy. No additional techni...

7.1CVSS7.2AI score0.00204EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/16 8:07 p.m.26 views

CVE-2025-23817 WordPress MHR-Custom-Anti-Copy plugin <= 2.0 - CSRF to Stored Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in mahadirz MHR-Custom-Anti-Copy mhr-custom-anti-copy allows Stored XSS.This issue affects MHR-Custom-Anti-Copy: from n/a through = 2.0...

7.1CVSS0.00204EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.6 views

WordPress MHR-Custom-Anti-Copy plugin <= 2.0 - CSRF to Stored Cross Site Request Forgery (CSRF) vulnerability

CSRF to Stored Cross Site Request Forgery CSRF vulnerability discovered by SOPROBRO in WordPress Plugin MHR-Custom-Anti-Copy versions = 2.0...

7.1CVSS6.7AI score0.00204EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.6 views

WordPress Copy Move Posts plugin <= 1.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Copy Move Posts versions = 1.6...

5.3CVSS7AI score0.00455EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/16 12:00 a.m.10 views

PT-2025-5073 · Unknown · Copy Move Posts

Name of the Vulnerable Software and Affected Versions: Copy Move Posts versions n/a through 1.6 Description: The issue is related to a lack of authorization in Copy Move Posts, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For versions n/a...

5.3CVSS9.3AI score0.00455EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/16 12:00 a.m.8 views

WordPress plugin Copy Move Posts 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

5.3CVSS8.2AI score0.00455EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/16 12:00 a.m.20 views

PT-2025-5115 · Unknown · Mhr-Custom-Anti-Copy

Name of the Vulnerable Software and Affected Versions: MHR-Custom-Anti-Copy versions n/a through 2.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, a...

7.1CVSS9.4AI score0.00204EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/16 12:00 a.m.8 views

WordPress plugin MHR-Custom-Anti-Copy 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS8.2AI score0.00204EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/01/15 3:25 p.m.7 views

CVE-2024-57895

In the Linux kernel, the following vulnerability has been resolved: ksmbd: set ATTRCTIME flags when setting mtime David reported that the new warning from setattrcopymgtime is coming like the following. 113.215316 ------------ cut here ------------ 113.215974 WARNING: CPU: 1 PID: 31 at...

5.5CVSS6.6AI score0.00413EPSS
SaveExploits0References4
OSV
OSV
added 2025/01/15 1:05 p.m.15 views

CVE-2024-57895 ksmbd: set ATTR_CTIME flags when setting mtime

In the Linux kernel, the following vulnerability has been resolved: ksmbd: set ATTRCTIME flags when setting mtime David reported that the new warning from setattrcopymgtime is coming like the following. 113.215316 ------------ cut here ------------ 113.215974 WARNING: CPU: 1 PID: 31 at...

7.1CVSS5.9AI score
SaveExploits0References7
CNNVD
CNNVD
added 2025/01/15 12:00 a.m.13 views

Aginode GigaSwitch 安全漏洞

Aginode GigaSwitch is a LANactive support portal from Aginode. A security vulnerability exists in Aginode GigaSwitch version v5 that stems from the use of SCP commands to access sensitive information...

6.5CVSS6.5AI score0.00313EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/01/14 6:43 p.m.6 views

Detection of Error Condition Without Action

Overview Affected versions of this package are vulnerable to Detection of Error Condition Without Action when files are being copied from a client to a server. This allows a server to leak the contents of an arbitrary file from the client's machine. Remediation A fix was pushed into the master...

6.9CVSS6.8AI score0.01827EPSS
SaveExploits1References2
SUSE Linux
SUSE Linux
added 2025/01/14 6:33 p.m.8 views

Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024108 fixes several issues. The following security issues were fixed: CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. CVE-2022-48956: ipv6: avoid use-after-free in ip6fragment bsc1232637...

7.8CVSS8.5AI score0.0094EPSS
SaveExploits2References134
OSV
OSV
added 2025/01/14 1:15 a.m.5 views

DEBIAN-CVE-2024-57653

An issue in the qstvecsetcopy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.5AI score0.00749EPSS
SaveExploits1References1
OSV
OSV
added 2025/01/14 1:15 a.m.11 views

UBUNTU-CVE-2024-57638

An issue in the dfebodycopy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS5.9AI score0.00729EPSS
SaveExploits1References3
Rows per page
Query Builder