Lucene search
+L

4702 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2024-40278

Malicious code in bioql PyPI...

6.1CVSS5.9AI score0.00352EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2024-3282

Malicious code in bioql PyPI...

4.3CVSS5.4AI score0.00371EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2022-0466

Malicious code in bioql PyPI...

5.3CVSS5.9AI score0.01001EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2022-55134

Malicious code in bioql PyPI...

5.5CVSS6.2AI score0.00261EPSS
SaveExploits0References5
NVD
NVD
•added 2025/09/29 12:15 a.m.•20 views

CVE-2025-11125

A vulnerability was found in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. Affected by this vulnerability is an unknown functionality of the file /connectionerror.php of the component Error Message Handler. Performing manipulation of the argument Error results i...

5.3CVSS0.00348EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/29 12:00 a.m.•7 views

CVE-2025-11125: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. Affected by this vulnerability is an unknown functionality of the file /connectionerror.php of the component Error Message Handler. Performing manipulation of the argument Error results i...

5.3CVSS3.5AI score0.00348EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/09/28 11:32 p.m.•9 views

CVE-2025-11125 langleyfcu Online Banking System Error Message connection_error.php cross site scripting

A vulnerability was found in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. Affected by this vulnerability is an unknown functionality of the file /connectionerror.php of the component Error Message Handler. Performing manipulation of the argument Error results i...

5.3CVSS3.5AI score0.00348EPSS
SaveExploits0References6
CVE
CVE
•added 2025/09/28 11:32 p.m.•46 views

CVE-2025-11125

Langleyfcu Online Banking System is affected by CVE-2025-11125. A cross-site scripting vulnerability exists in the Error Message Handler’s /connection_error.php where manipulation of the Error parameter can be exploited remotely. The issue affects versions prior to 57437e6400ce0ae240e692c24e6346b...

5.3CVSS3.5AI score0.00348EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/09/28 11:32 p.m.•9 views

CVE-2025-11125 langleyfcu Online Banking System Error Message connection_error.php cross site scripting

A vulnerability was found in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. Affected by this vulnerability is an unknown functionality of the file /connectionerror.php of the component Error Message Handler. Performing manipulation of the argument Error results i...

5.3CVSS3.5AI score0.00348EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/09/28 12:00 a.m.•27 views

PT-2025-39796

Name of the Vulnerable Software and Affected Versions langleyfcu Online Banking System versions prior to 57437e6400ce0ae240e692c24e6346b8d0c17d7a Description A cross site scripting issue exists in the Error Message Handler component of langleyfcu Online Banking System. The issue is related to...

5.3CVSS4.2AI score0.00348EPSS
SaveExploits0References11
NVD
NVD
•added 2025/09/26 8:15 a.m.•24 views

CVE-2025-1396

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...

5.3CVSS0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/26 7:52 a.m.•43 views

CVE-2025-1396 Username Enumeration in Multiple WSO2 Products with Multi-Attribute Login Enabled

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...

3.7CVSS0.00251EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/26 12:00 a.m.•21 views

PT-2025-39521

Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description A username enumeration issue exists when Multi-Attribute Login is enabled. The system provides a different response for existing and non-existing usernames, regardless of the validate...

9.8CVSS6.1AI score0.00944EPSS
SaveExploits2References43
osv_cve
osv_cve
•added 2025/09/25 4:15 p.m.•7 views

CVE-2025-26333

Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data. A remote attacker could potentially exploit this vulnerability, leading to information exposure...

7.5CVSS7AI score0.00325EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/25 3:16 p.m.•27 views

CVE-2025-26333

Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data. A remote attacker could potentially exploit this vulnerability, leading to information exposure...

5.9CVSS0.00325EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/25 3:16 p.m.•63 views

CVE-2025-26333

Dell BSAFE Crypto-J contains an information disclosure flaw: error messages may reveal sensitive environment details and associated data to remote attackers (CVE-2025-26333). Affected product is Dell BSAFE Crypto-J; impact is information exposure with HIGH confidentiality impact per NVD. Dell has...

7.5CVSS7AI score0.00325EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/09/25 12:00 a.m.•16 views

PT-2025-39408

Name of the Vulnerable Software and Affected Versions Dell Crypto-J affected versions not specified Description The software generates an error message containing sensitive information about its environment and associated data. A remote attacker could potentially exploit this issue, leading to...

7.5CVSS6.9AI score0.00325EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/09/23 4:37 p.m.•9 views

CVE-2024-6429 Content Spoofing in Multiple WSO2 Products via Error Message Injection

A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Under certain conditions, error messages are passed through URL parameters without validation, allowing malicious actors to inject arbitrary content into the UI. By exploiting this...

4.3CVSS6.1AI score0.00215EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/23 4:37 p.m.•48 views

CVE-2024-6429

The CVE-2024-6429 entry describes a content spoofing vulnerability in WSO2 products caused by improper handling/validation of error messages passed through URL parameters, enabling attackers to inject arbitrary UI content and facilitate social-engineering attacks. Affected components include WSO2...

4.3CVSS6.1AI score0.00215EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/23 12:00 a.m.•13 views

CVE-2024-6429: User Interface (UI) Misrepresentation of Critical Information

A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Under certain conditions, error messages are passed through URL parameters without validation, allowing malicious actors to inject arbitrary content into the UI. By exploiting this...

4.3CVSS6.1AI score0.00215EPSS
SaveExploits0References1
Rows per page
Query Builder