Lucene search
+L

7048 matches found

OSV
OSV
added 2025/01/07 8:15 p.m.1 views

DEBIAN-CVE-2025-0218

When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, an insufficiently seeded random number generator is used when generating the directory name, leading to the possibility for a local attacker to pre-creat...

7.1CVSS5.6AI score0.00174EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/07 8:15 p.m.11 views

UBUNTU-CVE-2025-0218

When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, an insufficiently seeded random number generator is used when generating the directory name, leading to the possibility for a local attacker to pre-creat...

7.1CVSS5.8AI score0.00174EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/01/07 7:18 p.m.16 views

CVE-2025-0218 pgAgent scheduled batch job scripts are created in a predictable temporary directory potentially allowing a denial of service

When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, an insufficiently seeded random number generator is used when generating the directory name, leading to the possibility for a local attacker to pre-creat...

5.5CVSS6.9AI score0.00174EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.9 views

pgAgent 安全漏洞

pgAgent is an open source job scheduler for PostgreSQL from the pgAdmin Project. A security vulnerability exists in pgAgent versions prior to 4.2.3 that stems from insufficient initialization of the random number generator used to generate directory names, which allows a local attacker to...

7.1CVSS5.2AI score0.00174EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/07 12:00 a.m.12 views

PT-2025-3788 · Pgagent +1 · Pgagent +1

Name of the Vulnerable Software and Affected Versions: pgAgent versions prior to 4.2.3 Description: The issue arises when pgAgent executes batch jobs, creating a script in a temporary directory before execution. In affected versions, an insufficiently seeded random number generator is used to...

7.1CVSS6.7AI score0.00174EPSS
SaveExploits0References12
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/01/06 12:49 p.m.9 views

Malicious code in walletcore-gen (npm)

The package contains several malicious PowerShell and VBS scripts used to harvest browser data, take screenshots, log keystrokes, and establish startup persistence. It also bundles a password stealer and exfiltrates stolen data via Slack and Discord webhooks. --- -= Per source details. Do not edi...

7AI score
SaveExploits0References1
NVD
NVD
added 2025/01/02 12:15 p.m.20 views

CVE-2024-56253

Missing Authorization vulnerability in supsystic Data Tables Generator by Supsystic data-tables-generator-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Data Tables Generator by Supsystic: from n/a through = 1.10.36...

5.4CVSS0.00319EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/02 12:01 p.m.11 views

CVE-2024-56253 WordPress Data Tables Generator by Supsystic plugin <= 1.10.36 - Broken Access Control vulnerability

Missing Authorization vulnerability in supsystic Data Tables Generator by Supsystic data-tables-generator-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Data Tables Generator by Supsystic: from n/a through = 1.10.36...

5.4CVSS7.2AI score0.00319EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/02 12:01 p.m.50 views

CVE-2024-56253

CVE-2024-56253 describes a Missing Authorization vulnerability in the WordPress plugin Data Tables Generator by Supsystic. The issue allows exploitation of incorrectly configured access controls, affecting versions from unknown (n/a) up to 1.10.36, per the initial description. The accompanying CV...

5.4CVSS7.2AI score0.00319EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/02 5:15 a.m.15 views

CVE-2002-20002

The Net::EasyTCP package before 0.15 for Perl always uses Perl's builtin rand, which is not a strong random number generator, for cryptographic keys...

5.4CVSS0.00305EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/01/02 12:00 a.m.13 views

CVE-2002-20002

The Net::EasyTCP package before 0.15 for Perl always uses Perl's builtin rand, which is not a strong random number generator, for cryptographic keys...

5.4CVSS7AI score0.00305EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/02 12:00 a.m.8 views

PT-2025-3219 · Supsystic · Data-Tables-Generator-By-Supsystic

Name of the Vulnerable Software and Affected Versions: Data Tables Generator by Supsystic versions 1.10.36 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This is due to improper...

5.4CVSS9.3AI score0.00319EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/01/02 12:00 a.m.8 views

WordPress plugin Data Tables Generator by Supsystic 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

5.4CVSS8.4AI score0.00319EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/02 12:00 a.m.10 views

PT-2025-1323 · Unknown · Net::Easytcp

Name of the Vulnerable Software and Affected Versions: Net::EasyTCP versions prior to 0.15 Description: The issue concerns the use of Perl's built-in rand function, which is not a strong random number generator, for generating cryptographic keys. This weakness can potentially lead to predictable...

5.4CVSS6.8AI score0.00305EPSS
SaveExploits0References6
zdt
zdt
added 2025/01/02 12:00 a.m.643 views

WordPress Code Generator Pro 1.2 SQL Injection Vulnerability

CVE-2024-55978 Code Generator Pro = 1.2 - Unauthenticated SQL Injection Description The Code Generator Pro plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...

9.3CVSS7.1AI score0.00747EPSS
SaveExploits1
CVE
CVE
added 2025/01/02 12:00 a.m.63 views

CVE-2002-20002

CVE-2002-20002 affects Net::EasyTCP (Perl) before 0.15. The issue is that cryptographic keys are generated using Perl’s built-in rand(), which is not a strong RNG. Impact: potential weakness in cryptographic keys. CVSSv3.1 base score 5.4 (Network, High attack complexity, No privileges required, U...

5.4CVSS7AI score0.00305EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/01/02 12:00 a.m.18 views

CVE-2002-20002

The Net::EasyTCP package before 0.15 for Perl always uses Perl's builtin rand, which is not a strong random number generator, for cryptographic keys...

5.4CVSS0.00305EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/02 12:00 a.m.9 views

MetaCPAN Net::EasyTCP 安全漏洞

MetaCPAN Net::EasyTCP is a module of the MetaCPAN Foundation. It is used to create secure, bandwidth-friendly TCP/IP clients and servers. A security vulnerability exists in MetaCPAN Net::EasyTCP versions prior to 0.15, which stems from the use of Perl's built-in rand function to generate...

5.4CVSS6.5AI score0.00305EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/12/30 4:26 p.m.7 views

WordPress Data Tables Generator by Supsystic plugin <= 1.10.36 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ngô Thái An Patchstack Alliance in WordPress Plugin Data Tables Generator by Supsystic versions = 1.10.36...

5.4CVSS7AI score0.00319EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/26 11:37 a.m.9 views

WordPress Barcode Generator for WooCommerce plugin <= 2.0.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Mika in WordPress Plugin Barcode Generator for WooCommerce versions = 2.0.2...

6.5CVSS7AI score0.00343EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder