CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987436 advisory. Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an embed tag. This could have bypassed websi...

6.5CVSS7.1AI score0.00285EPSS

Exploits0References4

Tenable Nessus•added 2025/10/07 12:0 a.m.•3 views

Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987441)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987441 advisory. When a file download is specified via the Content-Disposition header, that directive would be ignored if the file was included via a or tag, potentially making a...

6.1CVSS6.6AI score0.00215EPSS

Exploits0References4

IBM Security Bulletins•added 2025/10/06 8:19 p.m.•5 views

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tomcat-embed-core-10.1.42.jar

Summary IBM Watson Discovery Cartridge contains a vulnerable version of tomcat-embed-core-10.1.42.jar Vulnerability Details CVEID:CVE-2025-48989 DESCRIPTION: Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack. This issue affect...

7.5CVSS6.4AI score0.02931EPSS

Exploits0Affected Software1

Veracode•added 2025/10/06 8:19 a.m.•4 views

Cross Site Scripting (XSS)

ckeditor5 is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of malicious content inserted into the editor when specific configurations are enabled such as the HTML embed plugin or custom plugins with editable RawElement views, which allows an attacker to...

2.3CVSS6.4AI score0.00393EPSS

Exploits0References3Affected Software2

OSV•added 2025/10/04 12:11 a.m.•6 views

RLSA-2025:10072 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Content-Disposition header ignored when a file is included in an embed or object tag CVE-2025-6430 firefox: Use-after-free in FontFaceSet CVE-2025-6424 firefox:...

7.5CVSS6.1AI score0.03057EPSS

Exploits0References5

EUVD•added 2025/10/03 8:7 p.m.•1 views

EUVD-2025-9842

Malicious code in bioql PyPI...

6.5CVSS7.3AI score0.00313EPSS

Exploits0References2

EUVD•added 2025/10/03 8:7 p.m.•2 views

EUVD-2025-9249

Malicious code in bioql PyPI...

4.3CVSS6.2AI score0.00174EPSS

Exploits0References2