Lucene search
+L

2341 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•4 views

CVE-2025-23557: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Kathleen Malone Find Your Reps find-your-reps allows Stored XSS.This issue affects Find Your Reps: from n/a through = 1.2...

7.1CVSS5.8AI score0.00203EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/01/08 12:20 a.m.•9 views

SUSE CVE-2024-56611

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix migratetonode assuming there is at least one VMA in a MM We currently assume that there is at least one VMA in a MM, which isn't true. So we might end up having findvma return NULL, to then de-reference NULL. So...

5.5CVSS7.6AI score0.00206EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•23 views

PT-2026-4942

Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.3 through 3.6 Description A flaw exists in OpenSSL where the SSL CIPHER find function, when used in a QUIC protocol client or server, can experience a NULL pointer dereference if it receives an unknown cipher suite from its...

9.8CVSS5.8AI score0.00831EPSS
SaveExploits1References282
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•12 views

PT-2026-26043

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the ntfs3 file system that can lead to a Denial-of-Service DoS condition. A specially crafted dentry within the ntfs3 filesystem can cause the kernel to hang during look...

5.5CVSS5.8AI score0.00121EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/12/27 2:51 p.m.•2 views

CVE-2024-56611 mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix migratetonode assuming there is at least one VMA in a MM We currently assume that there is at least one VMA in a MM, which isn't true. So we might end up having findvma return NULL, to then de-reference NULL. So...

7.6AI score0.00206EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/12/23 12:00 a.m.•3 views

PT-2025-9949

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where a driver calling dev pm opp find bw ceil or dev pm opp find bw floor to retrieve bandwidth from the OPP table can cause a kernel cra...

7.8CVSS0.00184EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/12/17 12:00 a.m.•4 views

PT-2025-8986

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel has been resolved, specifically in the tegra20-emc module. The issue arises from the tegra emc find node by ram code function releasing device nodes while they...

7.8CVSS0.00236EPSS
SaveExploits0
OSV
OSV
•added 2024/12/12 1:40 a.m.•15 views

CVE-2024-12481

A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been declared as critical. Affected by this vulnerability is the function findUser of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\UserDao.java. The manipulation of the argument searchValue/gId/rId leads ...

8.8CVSS5.7AI score0.00602EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/12/11 12:00 a.m.•12 views

PT-2025-3040 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.7.2 macOS versions prior to 15.2 Description: The issue is related to insufficient protection of service data in the Find My component of MacOs, which may allow an attacker to disclose protected information. An app...

5.5CVSS6.2AI score0.002EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/12/05 12:00 a.m.•15 views

JSFinder 安全漏洞

JSFinder is a tool used by Threezh1 to quickly extract URLs and subdomains from js files on websites. A security vulnerability exists in JSFinder due to a directory traversal vulnerability in the findbyfile function...

7.5CVSS6.7AI score0.00764EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/12/05 12:00 a.m.•3 views

PT-2024-36927

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A potential out-of-bounds memory access issue in the nilfs find entry function has been resolved. This issue occurs when searching for records in a directory with a corrupted inode size,...

8CVSS0.00213EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/12/05 12:00 a.m.•18 views

PT-2024-35770 · Jsfinder · Jsfinder

Name of the Vulnerable Software and Affected Versions: JSFinder version d70ab9bc5221e016c08cffaf0d9ac79646c90645 Description: The issue concerns a Directory Traversal vulnerability in the find by file function. This allows for potential unauthorized access to files outside the intended directory...

7.5CVSS7.1AI score0.00764EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2024/12/03 12:00 a.m.•19 views

The vulnerability of the xt_find_table_lock() function in the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xtfindtablelock function in the net/netfilter/xtables.c module of the netfilter component of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

7.8CVSS7.2AI score0.00256EPSS
SaveExploits0References18Affected Software4
NVD
NVD
•added 2024/11/30 10:15 p.m.•29 views

CVE-2024-53757

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SocialEvolution WP Find Your Nearest wp-find-your-nearest allows Stored XSS.This issue affects WP Find Your Nearest: from n/a through = 0.3.1...

6.5CVSS0.00288EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/30 9:53 p.m.•31 views

CVE-2024-53757 WordPress WP Find Your Nearest plugin <= 0.3.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SocialEvolution WP Find Your Nearest wp-find-your-nearest allows Stored XSS.This issue affects WP Find Your Nearest: from n/a through = 0.3.1...

6.5CVSS0.00288EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/30 9:53 p.m.•7 views

CVE-2024-53757 WordPress WP Find Your Nearest plugin <= 0.3.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SocialEvolution WP Find Your Nearest allows Stored XSS.This issue affects WP Find Your Nearest: from n/a through 0.3.1...

6.5CVSS6.8AI score0.00288EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/30 9:53 p.m.•62 views

CVE-2024-53757

CVE-2024-53757 refers to a stored Cross-Site Scripting vulnerability in the WordPress plugin “WP Find Your Nearest” (SocialEvolution). Affected versions are WP Find Your Nearest 0.3.1 and earlier. Root cause per sources: improper neutralization of input during web page generation, enabling stored...

6.5CVSS7.2AI score0.00288EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/30 12:00 a.m.•10 views

WordPress plugin WP Find Your Nearest 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00288EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/30 12:00 a.m.•3 views

CVE-2024-53757: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SocialEvolution WP Find Your Nearest wp-find-your-nearest allows Stored XSS.This issue affects WP Find Your Nearest: from n/a through = 0.3.1...

6.5CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/11/28 12:53 p.m.•11 views

WordPress WP Find Your Nearest plugin <= 0.3.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin WP Find Your Nearest versions = 0.3.1...

6.5CVSS6.1AI score0.00288EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder