Lucene search
+L

578 matches found

Positive Technologies
Positive Technologies
added 2025/09/18 12:00 a.m.17 views

PT-2025-38314

Name of the Vulnerable Software and Affected Versions Summar Software Portal del Empleado affected versions not specified Description A file upload issue exists in Summar Software’s Portal del Empleado, allowing the upload of dangerous file types. An attacker can exploit this by sending a POST...

5.3CVSS6.5AI score0.00287EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/09/17 1:52 a.m.22 views

CVE-2025-10419

A security vulnerability has been detected in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /delpromote.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit has been disclos...

8.8CVSS7.1AI score0.00381EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/09/17 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2023-53219

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: netupunidvb: fix use-after-free at deltimer When Universal DVB card is detaching, netupunidvbdmafini uses deltimer to stop dma-timeout timer. But when...

7.8CVSS6.1AI score0.0016EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/15 3:15 p.m.7 views

DEBIAN-CVE-2023-53219

In the Linux kernel, the following vulnerability has been resolved: media: netupunidvb: fix use-after-free at deltimer When Universal DVB card is detaching, netupunidvbdmafini uses deltimer to stop dma-timeout timer. But when timer handler netupunidvbdmatimeout is running, deltimer could not stop...

7.8CVSS5.6AI score0.0016EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/15 3:15 p.m.12 views

CVE-2023-53219

In the Linux kernel, the following vulnerability has been resolved: media: netupunidvb: fix use-after-free at deltimer When Universal DVB card is detaching, netupunidvbdmafini uses deltimer to stop dma-timeout timer. But when timer handler netupunidvbdmatimeout is running, deltimer could not stop...

7.8CVSS0.0016EPSS
SaveExploits0References8
OSV
OSV
added 2025/09/15 2:21 p.m.13 views

CVE-2023-53219 media: netup_unidvb: fix use-after-free at del_timer()

In the Linux kernel, the following vulnerability has been resolved: media: netupunidvb: fix use-after-free at deltimer When Universal DVB card is detaching, netupunidvbdmafini uses deltimer to stop dma-timeout timer. But when timer handler netupunidvbdmatimeout is running, deltimer could not stop...

7.8CVSS4.9AI score
SaveExploits0References11
Vulnrichment
Vulnrichment
added 2025/09/15 2:21 p.m.3 views

CVE-2023-53219 media: netup_unidvb: fix use-after-free at del_timer()

In the Linux kernel, the following vulnerability has been resolved: media: netupunidvb: fix use-after-free at deltimer When Universal DVB card is detaching, netupunidvbdmafini uses deltimer to stop dma-timeout timer. But when timer handler netupunidvbdmatimeout is running, deltimer could not stop...

7.8CVSS6.1AI score0.0016EPSS
SaveExploits0References8
CVE
CVE
added 2025/09/15 2:21 p.m.46 views

CVE-2023-53219

CVE-2023-53219 affects the Linux kernel media: netup_unidvb code, where detaching a Universal DVB card could lead to a use-after-free because del_timer() could not stop an active timer in netup_unidvb_dma_timeout() while the timer runs. The fix replaces del_timer() with del_timer_sync() to ensure...

7.8CVSS6.1AI score0.0016EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2025/09/15 2:15 p.m.10 views

UBUNTU-CVE-2022-50251

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, the memory that allocated in mmcallochost will be leaked and it will lead a kernel crash because of deleting not added...

5.5CVSS5.8AI score0.0016EPSS
SaveExploits0References12
NVD
NVD
added 2025/09/15 1:15 a.m.13 views

CVE-2025-10419

A security vulnerability has been detected in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /delpromote.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit has been disclos...

8.8CVSS0.00381EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/15 1:02 a.m.7 views

CVE-2025-10419 SourceCodester Student Grading System del_promote.php sql injection

A security vulnerability has been detected in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /delpromote.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit has been disclos...

6.5CVSS6.4AI score0.00381EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/09/15 12:00 a.m.15 views

PT-2025-37439

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Grading System version 1.0 Description: A security issue exists in SourceCodester Student Grading System 1.0. The vulnerability is due to SQL injection in the /del promote.php file through manipulation of the sy argumen...

8.8CVSS6.5AI score0.00381EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/09/15 12:00 a.m.12 views

SourceCodester Student Grading System SQL注入漏洞

SourceCodester Student Grading System is a SourceCodester open source student grading system. A SQL injection vulnerability exists in SourceCodester Student Grading System version 1.0, which stems from an incorrect manipulation of the parameter sy in the file /delpromote.php, which could lead to ...

8.8CVSS6.9AI score0.00381EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/09/11 12:16 a.m.23 views

CVE-2025-57062

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the delDhcpIndex parameter in the formDelDhcpRule function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS7.6AI score0.00489EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2021-40569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the ilocentrydel funciton in boxcodemeta.c, which allows attackers to cause a denial ...

5.5CVSS6.7AI score0.00863EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/08/23 12:00 a.m.16 views

PT-2025-34516 · WordPress · Wptobe-Memberships

Name of the Vulnerable Software and Affected Versions: Wptobe-memberships plugin for WordPress versions through 3.4.2 Description: The Wptobe-memberships plugin for WordPress is susceptible to arbitrary file deletion due to inadequate file path validation within the del img ajax call function...

8.1CVSS7.3AI score0.00645EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2025/08/22 4:00 p.m.17 views

CVE-2025-38619

In the Linux kernel, the following vulnerability has been resolved: media: ti: j721e-csi2rx: fix listdel corruption If ticsi2rxstartdma fails in ticsi2rxdmacallback, the buffer is marked done with VB2BUFSTATEERROR but is not removed from the DMA queue. This causes the same buffer to be retried in...

7.8CVSS5.7AI score0.00169EPSS
SaveExploits0
NVD
NVD
added 2025/08/19 5:15 p.m.12 views

CVE-2025-38577

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid panic in f2fsevictinode As syzbot 1 reported as below: R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe17473450 R13: 00007f28b1c10854 R14: 000000000000dae5 R15: 00007ffe17474520 --- end trace...

7.8CVSS0.00178EPSS
SaveExploits0References11
Debian CVE
Debian CVE
added 2025/08/19 5:03 p.m.23 views

CVE-2025-38577

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid panic in f2fsevictinode As syzbot 1 reported as below: R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe17473450 R13: 00007f28b1c10854 R14: 000000000000dae5 R15: 00007ffe17474520 --- end trace...

7.8CVSS5.5AI score0.00178EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/08/18 12:00 a.m.8 views

CVE-2025-55591

TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint...

8.1AI score0.076EPSS
SaveExploits1References1
Rows per page
Query Builder