Lucene search
+L

7959 matches found

Positive Technologies
Positive Technologies
•added 2025/12/11 12:00 a.m.•19 views

PT-2025-50722

Name of the Vulnerable Software and Affected Versions React versions 19.0.0 through 19.2.1 react-server-dom-parcel versions 19.0.0 through 19.2.1 react-server-dom-turbopack versions 19.0.0 through 19.2.1 react-server-dom-webpack versions 19.0.0 through 19.2.1 Description An information leak issue...

5.3CVSS6.6AI score0.64233EPSS
SaveExploits7References87
GithubExploit
GithubExploit
•added 2025/12/10 8:39 a.m.•178 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182-PoC-exploit Next.js RCE via React Server Funct...

10CVSS7.7AI score0.99802EPSS
SaveExploits393
RedhatCVE
RedhatCVE
•added 2025/12/10 5:39 a.m.•18 views

CVE-2022-50636

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pcideviceispresent for VFs by checking PF pcideviceispresent previously didn't work for VFs because it reads the Vendor and Device ID, which are 0xffff for VFs, which looks like they aren't present. Check the PF instead...

5.8CVSS6.1AI score0.0021EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2025/12/10 12:39 a.m.•14 views

SUSE CVE-2022-50636

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pcideviceispresent for VFs by checking PF pcideviceispresent previously didn't work for VFs because it reads the Vendor and Device ID, which are 0xffff for VFs, which looks like they aren't present. Check the PF instead...

5.5CVSS6AI score0.0021EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2025/12/10 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2022-50636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: Fix pcideviceispresent for VFs by checking PF pcideviceispresent previously didn't work for VFs because it reads the Vendor and Device ID, which are 0xffff...

6.5AI score0.0021EPSS
SaveExploits0References3
NVD
NVD
•added 2025/12/09 4:17 p.m.•26 views

CVE-2025-41693

A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected...

4.3CVSS0.00515EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/09 3:31 a.m.•13 views

EUVD-2022-55720

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pcideviceispresent for VFs by checking PF pcideviceispresent previously didn't work for VFs because it reads the Vendor and Device ID, which are 0xffff for VFs, which looks like they aren't present. Check the PF instead...

6AI score0.0021EPSS
SaveExploits0References9
NVD
NVD
•added 2025/12/09 1:16 a.m.•11 views

CVE-2022-50636

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pcideviceispresent for VFs by checking PF pcideviceispresent previously didn't work for VFs because it reads the Vendor and Device ID, which are 0xffff for VFs, which looks like they aren't present. Check the PF instead...

0.0021EPSS
SaveExploits0References8
OSV
OSV
•added 2025/12/09 1:16 a.m.•18 views

UBUNTU-CVE-2022-50636

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pcideviceispresent for VFs by checking PF pcideviceispresent previously didn't work for VFs because it reads the Vendor and Device ID, which are 0xffff for VFs, which looks like they aren't present. Check the PF instead...

6.1AI score0.0021EPSS
SaveExploits0References11
OSV
OSV
•added 2025/12/09 12:00 a.m.•18 views

CVE-2022-50636 PCI: Fix pci_device_is_present() for VFs by checking PF

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pcideviceispresent for VFs by checking PF pcideviceispresent previously didn't work for VFs because it reads the Vendor and Device ID, which are 0xffff for VFs, which looks like they aren't present. Check the PF instead...

6.4AI score
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•17 views

PT-2025-50276

Name of the Vulnerable Software and Affected Versions @vitejs/plugin-rs versions 0.5.5 and below Description The @vitejs/plugin-rs software, which provides React Server Components RSC support for Vite, contains a flaw that could allow for arbitrary remote code execution on the development server...

9.8CVSS7.7AI score0.00814EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•13 views

Vite Plugin React 代码注入漏洞

Vite Plugin React is an open source plugin for Vite. A code injection vulnerability exists in Vite Plugin React 0.5.5 and earlier versions, which stems from an insecure dynamic import in the Server Functions API that could lead to remote code execution...

9.8CVSS7.9AI score0.00814EPSS
SaveExploits0References3
OSV
OSV
•added 2025/12/08 5:16 p.m.•13 views

CVE-2025-32328

In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS5.9AI score0.00095EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/08 12:00 a.m.•20 views

PT-2026-37459

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer issue exists in the drm/amdgpu component. When the SDMA block is not enabled, buffer funcs fails to initialize, leading to a potential null pointer dereference...

5.5CVSS5.3AI score0.00127EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/12/07 12:00 a.m.•16 views

Hotel-Management-services-using-MYSQL-and-php 代码注入漏洞

Hotel-Management-services-using-MYSQL-and-php is a hotel management system by the individual developer Alok .S. Jaiswal. A code injection vulnerability exists in Hotel-Management-services-using-MYSQL-and-php that stems from improper handling of unknown functions in the file /usersub.php, which...

6.1CVSS4.8AI score0.00231EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/12/05 3:27 p.m.•20 views

CVE-2025-2848

A vulnerability in Synology Mail Server allows remote authenticated attackers to read and write non-sensitive settings, and disable some non-critical functions...

6.3CVSS6.8AI score0.00368EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/05 10:31 a.m.•16 views

USN-7906-2 linux-gcp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - Android drivers; - TTY drivers; - F2FS file system; - 9P file system netwo...

7.9CVSS6.5AI score0.00209EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2025/12/05 12:00 a.m.•12 views

The vulnerability of the Modbus TCP and Modbus RTU protocols implemented in DIRIS Digiware M-70 communication gateways allows a perpetrator to cause service interruptions.

The vulnerability of the Modbus TCP and Modbus RTU protocols implemented by DIRIS Digiware M-70 communication gateways is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS5.8AI score0.00321EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/05 12:00 a.m.•15 views

The vulnerability of the Modbus TCP protocol implementation in DIRIS Digiware M-70 communication gateways allows a perpetrator to cause service interruptions or increase their privileges.

The vulnerability of the Modbus TCP protocol implementation in DIRIS Digiware M-70 microprogramming communication switches is related to the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures or increase their...

7.2CVSS5.8AI score0.00343EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/05 12:00 a.m.•30 views

The vulnerability of the Modbus RTU protocol implementation in DIRIS Digiware M-70 communication switches allows a intruder to cause a service failure.

The vulnerability of the Modbus RTU protocol implementation in DIRIS Digiware M-70 communication gateways is related to the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

8.6CVSS5.7AI score0.0054EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder