Lucene search
+L

16041 matches found

Cvelist
Cvelist
•added 2025/08/13 8:33 p.m.•22 views

CVE-2012-10059 Dolibarr ERP/CRM Post-Auth OS Command Injection

Dolibarr ERP/CRM versions = 3.1.1 and = 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sqlcompat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code...

9.4CVSS0.03102EPSS
SaveExploits1References6
NVD
NVD
•added 2025/08/13 6:15 p.m.•11 views

CVE-2025-2937

An issue has been discovered in GitLab CE/EE affecting all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to create a denial of service condition by sending specially crafted markdown payloads to the Wiki feature...

6.5CVSS0.00387EPSS
SaveExploits0References2
OSV
OSV
•added 2025/08/13 5:26 p.m.•8 views

CVE-2025-2937 Inefficient Regular Expression Complexity in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to create a denial of service condition by sending specially crafted markdown payloads to the Wiki feature...

6.5CVSS6.2AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2025/08/13 5:26 p.m.•20 views

CVE-2025-2937 Inefficient Regular Expression Complexity in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to create a denial of service condition by sending specially crafted markdown payloads to the Wiki feature...

6.5CVSS0.00387EPSS
SaveExploits0References2
NVD
NVD
•added 2025/08/12 6:15 p.m.•15 views

CVE-2025-49556

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain...

7.5CVSS0.00595EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/12 5:55 p.m.•9 views

CVE-2025-49556 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain...

7.5CVSS7.1AI score0.00595EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/12 5:55 p.m.•5 views

CVE-2025-49559 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a security feature bypass. An attacker could leverage this...

5.3CVSS6.9AI score0.00656EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/12 5:55 p.m.•22 views

CVE-2025-49559 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a security feature bypass. An attacker could leverage this...

5.3CVSS0.00656EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/12 5:15 p.m.•13 views

UBUNTU-CVE-2025-22889

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

7.9CVSS5.8AI score0.0015EPSS
SaveExploits0References5
Microsoft KB
Microsoft KB
•added 2025/08/12 7:00 a.m.•22 views

KB5063761 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: August 12, 2025

None None...

8.8CVSS7.1AI score0.01722EPSS
SaveExploits2
Microsoft KB
Microsoft KB
•added 2025/08/12 7:00 a.m.•23 views

Description of the security update for SharePoint Server 2016 Language Pack: August 12, 2025 (KB5002772)

None None...

8.4CVSS6.8AI score0.00546EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2025/08/12 7:00 a.m.•24 views

Description of the security update for SharePoint Server 2016: August 12, 2025 (KB5002771)

None None...

8.8CVSS6.8AI score0.19201EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/08/12 12:00 a.m.•11 views

PT-2025-32867 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.9-alpha1 through 2.4.4-p14 Description: Adobe Commerce is affected by a Time-of-check Time-of-use TOCTOU race condition. This issue could allow a security feature to be bypassed, potentially leading to unauthorized...

5.9CVSS6.3AI score0.00401EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2025/08/12 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2022-49783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/fpu: Drop fpregs lock before inheriting FPU permissions Mike Galbraith reported the following against an old fork of preempt-rt but the same issue also...

5.5CVSS6.5AI score0.0017EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•0 views

CVE-2025-49556: Incorrect Authorization

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain...

7.5CVSS5.8AI score0.00595EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•1 views

CVE-2025-49558: Time-of-check Time-of-use (TOCTOU) Race Condition

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability by manipulating the...

5.9CVSS5.8AI score0.00401EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/08/12 12:00 a.m.•10 views

Enhance the Machine Learning Algorithm Performance in Phishing Detection with Keyword Features

Recently, we can observe a significant increase of the phishing attacks in the Internet. In a typical phishing attack, the attacker sets up a malicious website that looks similar to the legitimate website in order to obtain the end-users' information. This may cause the leakage of the sensitive...

6.6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/08/12 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2023-0130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to spoof the contents of the...

6.5CVSS6.8AI score0.00565EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/12 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2022-49984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: HID: steam: Prevent NULL pointer dereference in steamrecv,sendreport It is possible for a...

5.5CVSS5.2AI score0.00247EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•0 views

CVE-2025-49559: Improper Limitation of a Pathname to a Restricted Directory

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a security feature bypass. An attacker could leverage this...

5.3CVSS5.8AI score0.00656EPSS
SaveExploits0References1
Rows per page
Query Builder