Lucene search
K

683 matches found

AlpineLinux
AlpineLinux
added 2026/05/20 9:19 a.m.10 views

CVE-2026-41292

NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options. An adversary sending queries with too many EDNS options can hold Unbound threads hostage while they are parsing and creating internal data...

8.7CVSS5.8AI score0.00075EPSS
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/12 12:24 a.m.5 views

Malicious code in ts-dna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ca06cbc068262aa930c182a5904cba8d5748f32663b648a0b78a183f4fe219 The package ts-dna was found to contain malicious code. Source: ghsa-malware a5660e49e1a2b3661bdf6ce230d7f75889675d5690086f7da2a2a04391dd13a5 Any...

5.8AI score
Exploits0References6
OSV
OSV
added 2026/05/12 12:24 a.m.1 views

MAL-2026-3505 Malicious code in ts-dna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ca06cbc068262aa930c182a5904cba8d5748f32663b648a0b78a183f4fe219 The package ts-dna was found to contain malicious code. Source: ghsa-malware a5660e49e1a2b3661bdf6ce230d7f75889675d5690086f7da2a2a04391dd13a5 Any...

5.8AI score
Exploits0References6
Packet Storm News
Packet Storm News
added 2026/03/17 12:0 a.m.0 views

Synchronized DNA Sources for Unconditionally Secure Cryptography

Secure communication is the cornerstone of modern infrastructures, yet achieving unconditional security -resistant to any computational attack- remains a fundamental challenge. The One-Time Pad OTP, proven by Shannon to offer perfect secrecy, requires a shared random key as long as the message,...

5.7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2026/02/13 7:21 a.m.8 views

CVE-2025-15577

An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read access.This issue affects Valmet DNA Web Tools: C2022 and older...

9.2CVSS5.7AI score0.00049EPSS
Exploits0References1
OSV
OSV
added 2026/02/12 7:15 a.m.3 views

CVE-2025-15577

An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read access.This issue affects Valmet DNA Web Tools: C2022 and older...

7.5CVSS5.9AI score0.00049EPSS
Exploits0References1
NVD
NVD
added 2026/02/12 7:15 a.m.4 views

CVE-2025-15577

An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read access.This issue affects Valmet DNA Web Tools: C2022 and older...

9.2CVSS0.00049EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/12 6:4 a.m.3 views

CVE-2025-15577

An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read access.This issue affects Valmet DNA Web Tools: C2022 and older...

9.2CVSS5.7AI score0.00049EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/12 6:4 a.m.3 views

CVE-2025-15577 Valmet DNA Web server arbitrary file read access

An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read access.This issue affects Valmet DNA Web Tools: C2022 and older...

9.2CVSS5.7AI score0.00049EPSS
Exploits0References1
CVE
CVE
added 2026/02/12 6:4 a.m.10 views

CVE-2025-15577

CVE-2025-15577 : An unauthenticated attacker can exploit a URL manipulation vulnerability to achieve arbitrary file read on Valmet DNA Web Tools: C2022 and older. The CVE is rated CRITICAL (CVSSv4.0: AV:N/AC:L/PR:N/UI:N/S:U/VI:N/VC:H/VS:N/VA:N/AT:N/AC:H/E:P) with network access, low complexity, a...

9.2CVSS5.7AI score0.00049EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/02/12 6:4 a.m.31 views

CVE-2025-15577 Valmet DNA Web server arbitrary file read access

An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read access.This issue affects Valmet DNA Web Tools: C2022 and older...

9.2CVSS0.00049EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/12 12:0 a.m.1 views

Valmet DNA Web Tools 安全漏洞

Valmet DNA Web Tools is a set of management and engineering tools for the decentralized control system of the Finnish company Valmet. Versions of Valmet DNA Web Tools prior to C2022 contained security vulnerabilities; these vulnerabilities allowed unverified attackers to access arbitrary files by...

9.2CVSS5.9AI score0.00049EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/12 12:0 a.m.3 views

PT-2026-7829

An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read access.This issue affects Valmet DNA Web Tools: C2022 and older...

9.2CVSS5.7AI score0.00049EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/02/06 1:30 p.m.5 views

CVE-2025-10258

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

6.3CVSS5.6AI score0.00018EPSS
Exploits0References1
NVD
NVD
added 2026/02/05 8:16 a.m.4 views

CVE-2025-10258

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

6.3CVSS0.00018EPSS
Exploits0References1
OSV
OSV
added 2026/02/05 8:16 a.m.2 views

CVE-2025-10258

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

6.3CVSS5.8AI score0.00018EPSS
Exploits0References1
CVE
CVE
added 2026/02/05 7:13 a.m.8 views

CVE-2025-10258

Infinera DNA is affected by a time-based SQL injection vulnerability caused by insufficient input validation, potentially leaking sensitive information. The issue is described consistently across multiple feeds (NVD, Red Hat CVE, CIRCL sighting, CVE list, EUVD) as affecting Infinera DNA with time...

6.3CVSS5.6AI score0.00018EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/05 7:13 a.m.3 views

CVE-2025-10258

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

6.3CVSS5.6AI score0.00018EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/05 7:13 a.m.1 views

CVE-2025-10258 A time-based SQL Injection vulnerability in Infinera DNA

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

5.6AI score0.00018EPSS
Exploits0References1
EUVD
EUVD
added 2026/02/05 7:13 a.m.1 views

EUVD-2025-206874

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

6.3CVSS5.6AI score0.00018EPSS
Exploits0References1
Rows per page
Query Builder