Lucene search
+L

18573 matches found

OSV
OSV
added 2025/08/25 2:15 p.m.15 views

AZL-66698 CVE-2025-26467 affecting package cassandra 5.0.0-2

Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on...

8.8CVSS5.7AI score0.00503EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/25 12:00 a.m.4 views

CVE-2025-45968

An issue in System PDV v1.0 allows a remote attacker to obtain sensitive information via the hash parameter in a URL. The application contains an Insecure Direct Object Reference IDOR vulnerability, which occurs due to a lack of proper authorization checks when accessing objects referenced by thi...

6.7AI score0.00626EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2018-3055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.16. Easi...

7.1CVSS7.1AI score0.00457EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/08/25 12:00 a.m.6 views

DASAN H660WM 安全漏洞

DASAN H660WM is an optical network terminal from DASAN, Korea. A security vulnerability exists in the DASAN H660WM H660WMR210825, which stems from improper access control under default settings, and could lead to unauthorized access to sensitive information and configuration modifications...

6.5CVSS6.4AI score0.00283EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/25 12:00 a.m.19 views

CVE-2025-55575

Summary: CVE-2025-55575 is a SQL Injection vulnerability in SMM Panel 3.1 that allows remote attackers to disclose sensitive information via a crafted HTTP request with the parameter action=service_detail. The CVSS v3.1 base score is 9.8 (CRITICAL) with network access, low attack complexity, no p...

9.8CVSS8.2AI score0.00446EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2019-3031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.34 and prior t...

6CVSS6.9AI score0.00898EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2006-4976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive information via a direct request for 1 server.php, 2...

5CVSS5.8AI score0.01403EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2019-2525

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and...

5.6CVSS6.8AI score0.01218EPSS
SaveExploits2References2
NVD
NVD
added 2025/08/23 3:15 a.m.15 views

CVE-2025-43768

Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows authenticated users without any permissions to access sensitive information of admin...

7.7CVSS0.00317EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/22 2:31 p.m.8 views

CVE-2025-54925

CWE-918: Server-Side Request Forgery SSRF vulnerability exists that could cause unauthorized access to sensitive data when an attacker configures the application to access a malicious url...

7.5CVSS7AI score0.00451EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/22 12:15 p.m.9 views

CVE-2025-9255

WebITR developed by Uniong has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

8.7CVSS6AI score0.00522EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/22 11:59 a.m.17 views

CVE-2025-57888 WordPress Jobmonster Theme <= 4.8.0 - Sensitive Data Exposure Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NooTheme Jobmonster noo-jobmonster allows Retrieve Embedded Sensitive Data.This issue affects Jobmonster: from n/a through = 4.8.0...

5.3CVSS0.00251EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/22 8:30 a.m.9 views

CVE-2025-53993

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetPopup jet-popup allows Retrieve Embedded Sensitive Data.This issue affects JetPopup: from n/a through = 2.0.15...

6.5CVSS5.9AI score0.00344EPSS
SaveExploits0References1
Redos
Redos
added 2025/08/22 12:00 a.m.8 views

ROS-20250822-06

Vulnerability in Moodle virtual learning environment related to user session hijacking via the sesskey. Exploitation of the vulnerability could allow an attacker acting remotely to obtain sensitive data...

4.2CVSS6.1AI score0.00295EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/22 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-0652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab EE/CE affecting all versions starting from 16.9 before 17.7.7, all versions starting from 17.8 before 17.8.5, all version...

6.5CVSS5.8AI score0.00403EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/22 12:00 a.m.13 views

PT-2025-34373 · Shopizer · Shopizer

Name of the Vulnerable Software and Affected Versions: Shopizer version 3.2.7 Description: The server’s Cross-Origin Resource Sharing CORS implementation reflects the client-supplied Origin header verbatim into Access-Control-Allow-Origin without any whitelist validation, while also enabling...

8.1CVSS6.6AI score0.00216EPSS
SaveExploits1References4
NVD
NVD
added 2025/08/21 4:15 a.m.9 views

CVE-2025-48355

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ProveSource LTD ProveSource Social Proof provesource allows Retrieve Embedded Sensitive Data.This issue affects ProveSource Social Proof: from n/a through = 3.1.2...

5.3CVSS0.00306EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2023-22100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.12. Easily...

7.9CVSS7AI score0.00394EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2023-22094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Installer product of Oracle MySQL component: Installer: General. Supported versions that are affected are Prior to 1.6.8. Easily...

7.9CVSS7AI score0.00337EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-21999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.44 and Prior t...

3.6CVSS6.6AI score0.00271EPSS
SaveExploits0References2
Rows per page
Query Builder