Lucene search
K

6653 matches found

CVE
CVE
added 2025/08/15 1:5 a.m.13 views

CVE-2025-8992

Summary: CVE-2025-8992 affects mtons mblog up to version 3.5.0, with a cross-site request forgery (CSRF) flaw arising in an unknown functionality. The vulnerability can be exploited remotely and exploit details have been publicly disclosed. Multiple connected sources corroborate this issue (Red H...

6.5CVSS7AI score0.00054EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2025/08/14 12:15 p.m.0 views

CVE-2025-8960

A vulnerability has been found in Campcodes Online Flight Booking Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/saveairlines.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS0.00088EPSS
Exploits0References6
NVD
NVD
added 2025/08/13 8:15 p.m.3 views

CVE-2025-8926

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS0.00072EPSS
Exploits1References5
NVD
NVD
added 2025/08/13 1:15 p.m.2 views

CVE-2025-8907

A vulnerability was found in H3C M2 NAS V100R006. Affected by this vulnerability is an unknown functionality of the component Webserver Configuration. The manipulation leads to execution with unnecessary privileges. An attack has to be approached locally. The complexity of an attack is rather hig...

7.3CVSS0.00026EPSS
Exploits0References4
CVE
CVE
added 2025/08/13 1:2 p.m.12 views

CVE-2025-8907

The CVE-2025-8907 entry concerns H3C M2 NAS V100R006, where the Webserver Configuration component is implicated. The vulnerability is described as allowing execution with unnecessary privileges via local manipulation, with attack complexity rated high and requiring local access. Vendor notes indi...

7.3CVSS7.3AI score0.00026EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/08/11 12:0 a.m.2 views

PT-2025-32525 · Broadcom · Symantec Pgp Encryption

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: Privilege escalation occurs when a user gains access to more resources or functionality than they are normally permitted. Recommendations: At the moment, ther...

5.6CVSS7.2AI score0.00066EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/08/11 12:0 a.m.2 views

PT-2025-32568

Name of the Vulnerable Software and Affected Versions: ABB Aspect affected versions not specified Description: A missing authentication issue exists for a critical function in ABB Aspect. This allows unauthorized access to sensitive functionality. Recommendations: At the moment, there is no...

8.2CVSS6.2AI score0.00076EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/08/10 10:6 p.m.5 views

CVE-2025-8741

A vulnerability was found in macrozheng mall up to 1.0.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/login. The manipulation leads to cleartext transmission of sensitive information. The attack can be launched remotely. The...

6.3CVSS6.9AI score0.00131EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/08/10 4:2 a.m.5 views

CVE-2025-8793 LitmusChaos Litmus resource injection

A vulnerability classified as problematic was found in LitmusChaos Litmus up to 3.19.0. Affected by this vulnerability is an unknown functionality. The manipulation of the argument projectID leads to improper control of resource identifiers. The attack can be launched remotely. The exploit has be...

5.3CVSS7.1AI score0.00076EPSS
Exploits1References4
OSV
OSV
added 2025/08/08 10:16 p.m.1 views

CVE-2025-8741

A vulnerability was found in macrozheng mall up to 1.0.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/login. The manipulation leads to cleartext transmission of sensitive information. The attack can be launched remotely. The...

5.9CVSS4.2AI score
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/08/08 10:2 p.m.4 views

CVE-2025-8742 macrozheng mall Admin Login excessive authentication

A vulnerability was found in macrozheng mall 1.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation leads to improper restriction of excessive authentication attempts. The attack may be launched remotely. The...

6.3CVSS7.1AI score0.00364EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/08/08 12:0 a.m.3 views

PT-2025-32413 · Unknown · Macrozheng Mall

Name of the Vulnerable Software and Affected Versions: macrozheng mall versions up to 1.0.3 Description: A vulnerability exists in macrozheng mall up to version 1.0.3, involving the cleartext transmission of sensitive information. The vulnerability affects an unknown functionality of the...

6.3CVSS6.7AI score0.00131EPSS
Exploits1References9
RedhatCVE
RedhatCVE
added 2025/08/07 3:33 p.m.6 views

CVE-2025-47152

An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Co. Ltd PDF-XChange Editor 10.6.0.396. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive...

6.5CVSS6AI score0.00249EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/08/07 3:33 p.m.6 views

CVE-2025-27931

An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Editor version 10.5.2.395. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information...

6.5CVSS6AI score0.00249EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/08/07 12:31 a.m.7 views

CVE-2025-50688

A command injection vulnerability exists in TwistedWeb version 14.0.0 due to improper input sanitization in the file upload functionality. An attacker can exploit this vulnerability by sending a specially crafted HTTP PUT request to upload a malicious file e.g., a reverse shell script. Once...

6.5CVSS8.1AI score0.00845EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-43825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: Fix the sorting functionality in iiogtsbuildavailtimetable The sorting in...

7.8CVSS5.8AI score0.00019EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/08/06 8:37 p.m.3 views

CVE-2025-8523

A vulnerability has been found in RiderLike Fruit Crush-Brain App 1.0 on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.fruitcrush.fun. The manipulation leads to improper export of android...

5.3CVSS5.1AI score0.00054EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/08/06 12:0 a.m.5 views

(0Day) AOMEI Backupper Workstation Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of AOMEI Backupper Workstation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. User interaction on the part of an...

7.3CVSS6.9AI score0.00032EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/08/06 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-47108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: hdmi: Perform NULL pointer check for mtkhdmiconf In commit 41ca9caaae0b...

5.5CVSS5.3AI score0.00014EPSS
Exploits0References2
NVD
NVD
added 2025/08/05 3:15 p.m.4 views

CVE-2025-27931

An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Editor version 10.5.2.395. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information...

6.5CVSS0.00249EPSS
Exploits1References2
Rows per page
Query Builder