Lucene search
+L

16844 matches found

CNNVD
CNNVD
added 2025/05/09 12:00 a.m.7 views

Patch My PC Home Updater 代码问题漏洞

Patch My PC Home Updater is a lightweight third-party software updater tool from Patch My PC, Inc. A code issue vulnerability exists in Patch My PC Home Updater version 5.1.3.0 and prior versions, which stems from improperly controlled search paths for multiple DLL files, which could lead to a...

7.3CVSS6.8AI score0.00263EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:00 a.m.11 views

The vulnerability of Ubiquiti UniFi Protect video cameras, related to buffer overflow in dynamic memory, allows a intruder to execute arbitrary code.

The vulnerability of Ubiquiti UniFi Protect video cameras relates to the overflow of buffers in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.4AI score0.01124EPSS
SaveExploits0References2Affected Software1
Packet Storm News
Packet Storm News
added 2025/05/08 12:00 a.m.6 views

Large Language Model-Driven Security Assistant for Internet of Things Via Chain-Of-Thought

The rapid development of Internet of Things IoT technology has transformed people's way of life and has a profound impact on both production and daily activities. However, with the rapid advancement of IoT technology, the security of IoT devices has become an unavoidable issue in both research an...

7.2AI score
SaveExploits0
Rockylinux
Rockylinux
added 2025/05/07 7:11 p.m.7 views

glibc bug fix update

An update is available for glibc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The glibc packages provide the standard C libraries libc, POSIX thread librarie...

7.3AI score
SaveExploits0
OSV
OSV
added 2025/05/07 6:15 p.m.10 views

CVE-2025-20162

A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could result in a denial of service DoS condition. This vulnerability is due to improper handling of DHCP request packets. An...

8.6CVSS6.7AI score0.00514EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/07 6:15 p.m.10 views

CVE-2025-20137

A vulnerability in the access control list ACL programming of Cisco IOS Software that is running on Cisco Catalyst 1000 Switches and Cisco Catalyst 2960L Switches could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the use of both an IPv4 ACL a...

4.7CVSS6.6AI score0.00273EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/07 3:16 p.m.18 views

CVE-2025-47544

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Blind SQL Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a throu...

7.6CVSS0.00459EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/07 3:16 p.m.14 views

CVE-2025-47544

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce allows Blind SQL Injection. This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a through 4.5.8...

7.2CVSS5.8AI score0.00459EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/07 2:20 p.m.12 views

CVE-2025-47544 WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.8 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Blind SQL Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a throu...

7.6CVSS8.9AI score0.00459EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/07 2:20 p.m.33 views

CVE-2025-47544 WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.8 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Blind SQL Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a throu...

7.6CVSS0.00459EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/07 2:20 p.m.62 views

CVE-2025-47544

CVE-2025-47544 refers to the WordPress plugin Dynamic Pricing With Discount Rules for WooCommerce (aco-woo-dynamic-pricing) with versions up to 4.5.8 affected by an SQL Injection due to improper neutralization of input. The vulnerability enables blind SQL injection. Remediation per PT security gu...

7.6CVSS7.3AI score0.00459EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/05/07 12:40 p.m.15 views

WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.8 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by tratt in WordPress Plugin Dynamic Pricing With Discount Rules for WooCommerce versions = 4.5.8...

7.6CVSS8.8AI score0.00459EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
added 2025/05/07 2:19 a.m.6 views

SUSE CVE-2022-49892

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix use-after-free for dynamic ftraceops KASAN reported a use-after-free with ftrace ops 1. It was found from vmcore that perf had registered two ops with the same content successively, both dynamic. After unregistering t...

5.5CVSS6.5AI score0.00209EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2025/05/07 12:00 a.m.12 views

PT-2025-20157 · Woocommerce · Acowebs Dynamic Pricing With Discount Rules For Woocommerce

Name of the Vulnerable Software and Affected Versions: acowebs Dynamic Pricing With Discount Rules for WooCommerce versions prior to 4.5.9 Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This...

7.6CVSS8.4AI score0.00459EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.8 views

Cisco IOS XE 资源管理错误漏洞

Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A resource management error vulnerability exists in Cisco IOS XE that stems from...

8.6CVSS6.3AI score0.00514EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.10 views

WordPress plugin Dynamic Pricing With Discount Rules for WooCommerce SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A SQL injection vulnerability exists in the WordPress...

7.6CVSS8.2AI score0.00459EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2025/05/07 12:00 a.m.3 views

Ensure That the LD_LIBRARY_PATH Environment Variable Is Correctly Defined

LDLIBRARYPATH is an environmental variable in Linux. When loading a dynamic link library, the program preferentially obtains the library from the path specified by LDLIBRARYPATH. Generally, LDLIBRARYPATH should not be set, because a maliciously set value will make the program link to an incorrect...

6.9AI score
SaveExploits0References4
OSV
OSV
added 2025/05/06 4:15 p.m.8 views

CVE-2025-45490

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the password parameter...

9.8CVSS5.8AI score0.01676EPSS
SaveExploits1References2
OSV
OSV
added 2025/05/06 4:15 p.m.6 views

CVE-2025-45488

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter...

9.8CVSS5.8AI score0.11087EPSS
SaveExploits1References2
OSV
OSV
added 2025/05/06 4:15 p.m.5 views

CVE-2025-45489

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter...

9.8CVSS5.8AI score0.01849EPSS
SaveExploits1References2
Rows per page
Query Builder