Lucene search
+L

24519 matches found

Cvelist
Cvelist
added 2025/10/23 9:17 p.m.21 views

CVE-2025-59273 Azure Event Grid System Elevation of Privilege Vulnerability

...

7.3CVSS0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/23 9:17 p.m.7 views

CVE-2025-59273 Azure Event Grid System Elevation of Privilege Vulnerability

...

7.3CVSS6.6AI score0.00354EPSS
SaveExploits0References1
Circl
Circl
added 2025/10/23 9:12 p.m.7 views

CVE-2017-100000

creationtimestamp| type| source ---|---|--- 2025-10-23 21:12:58+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...

5.8AI score
SaveExploits0
Circl
Circl
added 2025/10/23 6:44 p.m.12 views

CVE-2025-23352

creationtimestamp| type| source ---|---|--- 2025-10-23 18:44:05+00:00| seen| Telegram/4hrPiHdpb0KsAZYKVp-P3nw2fmO-uc2Nfmw7yoHcIQEHls...

7.8CVSS4.8AI score0.00173EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/10/23 3:13 p.m.9 views

CVE-2025-62042

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through = 5.10.3...

6.5CVSS6.4AI score0.00164EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/23 3:13 p.m.12 views

CVE-2025-62027

Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Event Tickets: from n/a through = 5.26.3...

5.4CVSS7AI score0.00202EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/23 3:13 p.m.9 views

CVE-2025-62526

OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, ubusd contains a heap buffer overflow in the event registration parsing code. This allows an attacker to modify the head and potentially execute arbitrary code in the context of the ubus daemon. The...

7.9CVSS8AI score0.00242EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/10/23 2:00 p.m.13 views

Azure Event Grid System Elevation of Privilege Vulnerability

Improper access control in Azure Event Grid allows an unauthorized attacker to elevate privileges over a network...

9.8CVSS6.8AI score0.00354EPSS
SaveExploits0
OSV
OSV
added 2025/10/23 12:31 p.m.8 views

GHSA-422V-W6C5-VQ42 Moodle exposed the names of hidden groups to users

Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information...

4.3CVSS6.7AI score0.00251EPSS
SaveExploits0References6
Snyk
Snyk
added 2025/10/23 11:46 a.m.8 views

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere due to the missing capability check in the calendar event creation flow. An attacker can access private or restricted group...

6.5CVSS6.6AI score0.00251EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/23 11:28 a.m.11 views

EUVD-2025-35667

Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information...

4.3CVSS6.2AI score0.00251EPSS
SaveExploits0References3
Circl
Circl
added 2025/10/23 6:45 a.m.14 views

CVE-2025-62809

creationtimestamp| type| source ---|---|--- 2025-10-23 06:45:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3tr65kvk22o...

5.8AI score
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/23 12:00 a.m.10 views

Microsoft Azure Event Grid System 访问控制错误漏洞

Microsoft Azure Event Grid System is a fully managed event routing service system from Microsoft Corporation, USA. The Microsoft Azure Event Grid System is vulnerable to an access control error vulnerability that stems from improper access control and could lead to elevation of privilege. An...

9.8CVSS6.4AI score0.00354EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2025/10/23 12:00 a.m.15 views

KLA89723 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Compute Resource Provider can be exploited...

10CVSS7.3AI score0.00716EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2025/10/22 11:59 p.m.11 views

SUSE CVE-2023-53693

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix the memory leak in rawgadget driver Currently, increasing rawdev-count happens before invoke the rawqueueevent, if the rawqueueevent return error, invoke rawrelease will not trigger the devfree to be called...

5.5CVSS6.5AI score0.00199EPSS
SaveExploits0References19
Circl
Circl
added 2025/10/22 7:43 p.m.7 views

CVE-2025-53054

creationtimestamp| type| source ---|---|--- 2025-10-22 19:43:46+00:00| seen| Telegram/tCefwUSgtssEQzdY6Ti5Mqqjktddm8i99wnar9vOcz3N0A...

5.5CVSS7.2AI score0.00444EPSS
SaveExploits0
EUVD
EUVD
added 2025/10/22 6:30 p.m.19 views

EUVD-2022-54793

In the Linux kernel, the following vulnerability has been resolved: powerpc/paprscm: Fix leaking nvdimmeventsmap elements Right now 'char ' elements allocated for individual 'statid' in 'paprscmpriv.nvdimmeventsmap' during paprscmpmucheckevents, get leaked in paprscmremove and paprscmpmuregister,...

5.5CVSS5.2AI score0.00218EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/22 4:34 p.m.9 views

DRUPAL-CONTRIB-2025-112

CivicTheme is a design system and theme framework used to build content-rich Drupal websites. It includes editorial workflows, structured content types, and flexible theming components. The theme doesn't sufficiently check access to entities when they are displayed as reference cards used in manu...

7.5CVSS6AI score0.00286EPSS
SaveExploits0References1
Circl
Circl
added 2025/10/22 4:10 p.m.11 views

CVE-2025-41721

creationtimestamp| type| source ---|---|--- 2025-10-22 16:10:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418687746464898...

2.7CVSS4.8AI score0.00187EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/22 3:31 p.m.10 views

EUVD-2025-35379

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through = 5.10.3...

5.9AI score0.00164EPSS
SaveExploits0References2
Rows per page
Query Builder