Lucene search
+L

6383 matches found

Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•13 views

PT-2025-17041 · Unknown · Empty Tags Remover

Name of the Vulnerable Software and Affected Versions: Empty Tags Remover versions 1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inje...

7.1CVSS6.4AI score0.00293EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•18 views

WordPress plugin Empty Tags Remover 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

7.1CVSS5.8AI score0.00293EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•5 views

CVE-2025-24640: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan-Lucian Stefancu Empty Tags Remover empty-tags-remover allows Reflected XSS.This issue affects Empty Tags Remover: from n/a through = 1.0...

7.1CVSS5.8AI score0.00293EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/04/16 9:30 p.m.•21 views

Improper Check for Unusual or Exceptional Conditions

Overview torch is a Tensors and Dynamic neural networks in Python with strong GPU acceleration Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions in the ctcloss function in LossCTC.cpp, when running on a CUDA system. An attacker can cause the...

6.8CVSS7AI score0.00331EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•22 views

PT-2025-38560

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the i40e driver where an invalid memory access could occur when the MAC list is empty. The list first entry function does not return NULL, potential...

7.1CVSS6.3AI score0.00167EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/11 7:42 a.m.•14 views

Malicious code in empty-validator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1a8bb775434b7294e63fe4542d85b6382e1dd38f2eef5a4db17f73eb7a8154d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/04/11 7:42 a.m.•4 views

Malware in empty-validator-plugin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2025/04/11 7:42 a.m.•15 views

MAL-2025-3207 Malicious code in empty-validator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1a8bb775434b7294e63fe4542d85b6382e1dd38f2eef5a4db17f73eb7a8154d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/04/10 12:00 a.m.•19 views

PT-2025-18430

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a potential out-of-bounds access in the Linux kernel when processing short packets. Specifically, in the ppp sync txmung function, there is a risk of accessing data...

8.2CVSS7AI score0.00398EPSS
SaveExploits0
osv_bell
osv_bell
•added 2025/04/09 5:58 a.m.•20 views

BELL-CVE-2025-22012

Bulletin has no description...

5.5CVSS5.9AI score0.00141EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/04/08 7:15 p.m.•15 views

CVE-2025-3416

A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string...

3.7CVSS5.8AI score0.00516EPSS
SaveExploits0References7Affected Software10
osv_debian
osv_debian
•added 2025/04/08 7:15 p.m.•14 views

DEBIAN-CVE-2025-3416

A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string...

3.7CVSS4.8AI score0.00516EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/04/08 7:15 p.m.•13 views

UBUNTU-CVE-2025-3416

A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string...

3.7CVSS5.7AI score0.00516EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/04/08 12:00 a.m.•16 views

OpenSSL 资源管理错误漏洞

OpenSSL is an open source general-purpose cryptographic library capable of implementing the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols from the OpenSSL team. It supports a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, secure...

3.7CVSS4.8AI score0.00516EPSS
SaveExploits0References7
osv_cga
osv_cga
•added 2025/04/04 9:20 p.m.•12 views

CGA-CG8M-6986-25XP

Bulletin has no description...

4.3CVSS6.7AI score0.00331EPSS
SaveExploits0
osv_bell
osv_bell
•added 2025/04/04 5:57 a.m.•11 views

BELL-CVE-2025-22006

Bulletin has no description...

5.5CVSS6AI score0.00186EPSS
SaveExploits0References1
osv_bell
osv_bell
•added 2025/04/02 5:58 a.m.•9 views

BELL-CVE-2025-21973

Bulletin has no description...

7.1CVSS7.2AI score0.0019EPSS
SaveExploits0References1
osv_cga
osv_cga
•added 2025/03/31 4:04 p.m.•11 views

CGA-H472-WF8J-56Q2

Bulletin has no description...

4.4CVSS7.2AI score0.00425EPSS
SaveExploits2
osv_cga
osv_cga
•added 2025/03/31 4:04 p.m.•9 views

CGA-GCWR-24JV-8GQP

Bulletin has no description...

7.5CVSS7.2AI score0.00939EPSS
SaveExploits0
osv_cga
osv_cga
•added 2025/03/31 4:02 p.m.•17 views

CGA-XWPW-FPFR-35Q5

Bulletin has no description...

4.4CVSS7.2AI score0.00425EPSS
SaveExploits2
Rows per page
Query Builder