Lucene search
K

11 matches found

UbuntuCve
UbuntuCve
added 2026/01/13 4:15 p.m.3 views

CVE-2025-68769

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fsrecoverfsyncdata With below scripts, it will trigger panic in f2fs: mkfs.f2fs -f /dev/vdd mount /dev/vdd /mnt/f2fs touch /mnt/f2fs/foo sync echo 111 /mnt/f2fs/foo f2fsio fsync /mnt/f2fs/foo f2fsio...

5.7AI score0.00068EPSS
Exploits0References36
EUVD
EUVD
added 2025/12/04 3:31 p.m.1 views

EUVD-2025-201224

In the Linux kernel, the following vulnerability has been resolved: btrfs: directly free partially initialized fsinfo in btrfscheckleakedroots If fsinfo-supercopy or fsinfo-superforcommit allocated failed in btrfsgettreesubvol, then no need to call btrfsfreefsinfo. Otherwise btrfscheckleakedroots...

5.8AI score0.00024EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-28873

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00073EPSS
Exploits1References4
NVD
NVD
added 2025/08/29 7:15 p.m.4 views

CVE-2025-9669

A vulnerability has been found in Jinher OA 1.0. This issue affects some unknown processing of the file GetTreeDate.aspx. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used...

9.8CVSS0.00073EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/08/29 7:2 p.m.3 views

CVE-2025-9669 Jinher OA GetTreeDate.aspx sql injection

A vulnerability has been found in Jinher OA 1.0. This issue affects some unknown processing of the file GetTreeDate.aspx. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used...

7.5CVSS6.6AI score0.00073EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/08/29 12:0 a.m.5 views

PT-2025-35304

Name of the Vulnerable Software and Affected Versions: Jinher OA version 1.0 Description: A vulnerability exists in the processing of the GetTreeDate.aspx file within Jinher OA. Manipulation of the ID argument results in a SQL injection. Remote exploitation is possible. The exploit has been...

7.5CVSS7.5AI score0.00073EPSS
Exploits1References7
CNNVD
CNNVD
added 2024/09/20 12:0 a.m.2 views

eNMS 安全漏洞

eNMS is an open source network automation platform from eNMS. A security vulnerability exists in eNMS version 4.0.0, which stems from vulnerability to directory traversal attacks via gettreefiles...

7.5CVSS6.8AI score0.00521EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/09/20 12:0 a.m.4 views

PT-2024-32090 · Enms · Enms

Name of the Vulnerable Software and Affected Versions: eNMS version 4.0.0 Description: The issue is related to a Directory Traversal vulnerability via the get tree files parameter. This allows unauthorized access to files on the system. No information is provided about the estimated number of...

7.5CVSS7AI score0.00521EPSS
Exploits1References9
OSV
OSV
added 2023/05/25 10:15 p.m.1 views

CVE-2023-2902

A vulnerability was found in NFine Rapid Development Platform 20230511. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /SystemManage/Organize/GetTreeGridJson?search=false&nd=1681813520783&rows=10000&page=1&sidx=&sord=asc. The manipulation leads ...

6.5CVSS5AI score0.00256EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:0 a.m.1 views

The vulnerability of the Gitaly.GetTreeEntries component in the git-based software development platform allows a hacker to cause a service failure.

The vulnerability of the Gitaly.GetTreeEntries component in the git-based software development platform for collaborative code management on GitLab is related to incorrect handling of logical operations. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.8CVSS0.0019EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2006/08/10 12:4 a.m.8 views

CVE-2006-4063

Multiple PHP remote file inclusion vulnerabilities in Csaba Godor SAPID Blog Beta 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 rootpath parameter to a usr/extensions/getbloginfochannel.inc.php, b usr/extensions/getblogmetainfo.inc.php, or c...

7.5CVSS7.7AI score0.03866EPSS
Exploits0References3
Rows per page
Query Builder