Lucene search
+L

9109 matches found

NVD
NVD
added 2025/01/10 9:15 p.m.14 views

CVE-2024-54997

MonicaHQ v4.1.1 was discovered to contain an authenticated Client-Side Injection vulnerability via the entry text field at /journal/entries/ID/edit...

5.4CVSS0.00277EPSS
SaveExploits2References1
CVE
CVE
added 2025/01/10 12:00 a.m.60 views

CVE-2024-54997

MonicaHQ v4.1.1 is affected by an authenticated Client-Side Injection vulnerability via the entry text field at /journal/entries/ID/edit. Root cause: injection in the entry text field that an authenticated user can trigger. Impact: low to moderate confidentiality/integrity risk, with no documente...

5.4CVSS7.7AI score0.00277EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/10 12:00 a.m.8 views

PT-2025-3087

Name of the Vulnerable Software and Affected Versions MonicaHQ version 4.1.1 Description The issue is related to an authenticated Client-Side Injection vulnerability. This vulnerability can be triggered by an authenticated user through the entry text field at the "/journal/entries/ID/edit" API...

5.4CVSS5.9AI score0.00277EPSS
SaveExploits2References8
Vulnrichment
Vulnrichment
added 2025/01/10 12:00 a.m.11 views

CVE-2024-54997

MonicaHQ v4.1.1 was discovered to contain an authenticated Client-Side Injection vulnerability via the entry text field at /journal/entries/ID/edit...

7.5AI score0.00277EPSS
SaveExploits2References2
Circl
Circl
added 2025/01/09 8:16 a.m.15 views

CVE-2024-43657

creationtimestamp| type| source ---|---|--- 2025-01-09 08:16:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/912 2025-01-09 08:16:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcagnja4m2d 2025-01-09 08:32:54+00:00| seen|...

9.3CVSS5.8AI score0.01466EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/01/09 12:33 a.m.9 views

CVE-2023-27531

There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code...

7.4AI score0.00527EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/01/08 12:20 a.m.12 views

SUSE CVE-2024-56619

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential out-of-bounds memory access in nilfsfindentry Syzbot reported that when searching for records in a directory where the inode's isize is corrupted and has a large value, memory access outside the folio/page...

7.8CVSS7.5AI score0.00213EPSS
SaveExploits0References20
OSV
OSV
added 2025/01/07 9:08 p.m.11 views

CLSA-2025-1736284126 haproxy: Fix of CVE-2023-0836

CVE-2023-0836: Fix information leak vulnerability in connection buffer by initializing 5 bytes in FCGIBEGINREQUEST record encoding...

7.5CVSS7.2AI score0.01201EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/04 12:00 a.m.9 views

PT-2025-6760

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The current directory offset allocator stores the next offset value to return in octx-next offset. This mechanism typically returns values that increase monotonically over time...

5.5CVSS6.5AI score0.00214EPSS
SaveExploits0
Circl
Circl
added 2025/01/03 4:52 p.m.36 views

CVE-2024-56409

creationtimestamp| type| source ---|---|--- 2025-01-03 16:52:48+00:00| published-proof-of-concept| https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-j2xg-cjcx-4677 2025-01-03 17:09:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113765525095900326 2025-01-03...

8.3CVSS5.7AI score0.00331EPSS
SaveExploits1References3
OSV
OSV
added 2025/01/03 3:15 p.m.7 views

CVE-2024-41780

IBM Jazz Foundation 7.0.2, 7.0.3, and 7.1.0 could could allow a physical user to obtain sensitive information due to not masking passwords during entry...

4.6CVSS5.3AI score0.00188EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/03 12:00 a.m.17 views

PT-2025-8813

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, related to the wifi driver rtw89. The issue occurs when WoWLAN Wake-on-Wireless-LAN fails during the resume flow, causing the mgn...

5.5CVSS6.4AI score0.00184EPSS
SaveExploits0References22
Circl
Circl
added 2025/01/02 12:19 p.m.12 views

CVE-2024-38753

creationtimestamp| type| source ---|---|--- 2025-01-02 12:19:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2r2intb2l 2025-01-02 18:38:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113760213893345582...

4.3CVSS6.9AI score0.00195EPSS
SaveExploits0References2
Circl
Circl
added 2025/01/02 12:16 p.m.11 views

CVE-2023-46073

creationtimestamp| type| source ---|---|--- 2025-01-02 12:16:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2khydzn2i 2025-01-02 13:08:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113758914788883417...

5.3CVSS7.3AI score0.0035EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/01/02 9:09 a.m.19 views

CVE-2024-13062

An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution. Refer to the ' 01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information...

7.2CVSS0.00983EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.6 views

PT-2025-36411

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the NFS functionality of the Linux kernel related to insufficient bounds checking within the nfs fh to dentry function. This function requires verification of the minima...

7.8CVSS7.1AI score0.00194EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.6 views

PT-2025-36262

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's netfilter module, specifically within the nf reject functionality. The issue involves a potential information leak of the destination reference count...

5.5CVSS6.3AI score0.0017EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.8 views

PT-2025-2339 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.8 views

PT-2025-30777

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the rose rt device down function related to dangling neighbour pointers. Two bugs exist: modification of the loop bound t-count within a loop,...

7.8CVSS6.7AI score0.00235EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.6 views

PT-2026-2875

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the VIA watchdog driver where an unnamed resource allocation can lead to a critical boot hang. The driver uses allocate resource to reserve a memory region for the...

5.5CVSS5.4AI score0.00128EPSS
SaveExploits0
Rows per page
Query Builder